4 ms·
So if I'm understanding this correctly, the initial vulnerability is remote-exploitable and relies on a firmware patch. Why wouldn't the manufacturer use the sa
by Kliment 11y ago
So if I'm understanding this correctly, the initial vulnerability is remote-exploitable and relies on a firmware patch. Why wouldn't the manufacturer use the same exploit to patch all affected vehicles rather than calling them in for service?
- maxerickson 11y agoPresumably they lack permission to do such a thing. The researchers only experimented on a car they owned/controlled.
- Kliment 11y agoThe manufacturer presumably has permission to do so. As for the attackers patching vulnerable vehicles, I hadn't thought of that, but of course that's a possibility as well. Pretty much the definition of white hat. :)
- maxerickson 11y agoYeah, it appears they do: http://www.driveuconnect.com/terms/ http://www.driveuconnect.com/terms/ (term 17)