3 ms·

We are confident in the performance of our Snapshot device – used in more than two million vehicles since 2008 – and routinely monitor the security of our devic

by ipsin 12y ago

We are confident in the performance of our Snapshot device – used in more than two million vehicles since 2008 – and routinely monitor the security of our device to help ensure customer safety. There's something about the phrasing of PR statement that really added credibility to the Thuen's claim. Highlighting that it's a seven year old system, or that you "routinely monitor the security of the device" doesn't have anything to do with the actual security of the system. "Routine monitoring" sounds worthless, because they probably don't mean "routinely dumping the firmware, physically, from the device". In any event, we'll see soon whether this is a legitimate CANbus bridge, and if so, all the previously-released exploits come into play.

pbz 12y ago
And they're confident in the "performance" not the security of the device.
a3n 12y ago
Security through declaration. I'm sure Target would have responded similarly prior to their POS breach that exposed millions of credit card details. "We are confident in the performance of our POS terminals - used in more than 5 zillion transactions since 2008 - and routinely monitor the security of our POS terminals to help ensure customer confidence." Unfortunately they weren't routinely monitoring the security of their HVAC systems, which is partly how the attackers gained access to the POS terminals. And automotive systems like these will eventually be breached via the insurance companies' HVAC systems, or something equally and superficially non-related, or by the dealer's unrelated systems, or by drivers' smartphones, otherwise known as drivers' internet connected and therefore compromised computers, or even drivers' music-containing USB thumbdrives (one of which is plugged in to my vehicle's sound system right now). These days a car is merely a computer, or collection of computers, with wheels. Now that they're networked, either in real time or periodically, the fun begins.

by ipsin 12y ago

pbz 12y ago

And they're confident in the "performance" not the security of the device.

a3n 12y ago

Security through declaration. I'm sure Target would have responded similarly prior to their POS breach that exposed millions of credit card details. "We are confident in the performance of our POS terminals - used in more than 5 zillion transactions since 2008 - and routinely monitor the security of our POS terminals to help ensure customer confidence." Unfortunately they weren't routinely monitoring the security of their HVAC systems, which is partly how the attackers gained access to the POS terminals. And automotive systems like these will eventually be breached via the insurance companies' HVAC systems, or something equally and superficially non-related, or by the dealer's unrelated systems, or by drivers' smartphones, otherwise known as drivers' internet connected and therefore compromised computers, or even drivers' music-containing USB thumbdrives (one of which is plugged in to my vehicle's sound system right now). These days a car is merely a computer, or collection of computers, with wheels. Now that they're networked, either in real time or periodically, the fun begins.