Hyundai wants Ioniq 5 owners to pay to fix a keyless entry security hole
Hyundai wants Ioniq 5 owners to pay to fix a keyless entry security hole
www.theverge.com
Hyundai wants Ioniq 5 owners to pay to fix a keyless entry security hole
12 comments
-
-
What the fuck? They did a mistake implementing a half-assed protocol and it's the end user that has to pay for it?
The "usb ignition" debacle didn't teach anything to those assholes?
Also, wasn't them that used a default passphrase in creating a SSL certificate for the CAN bus or something like that so everyone could reverse engineer that?
edit: yes, it was them, they used multiple "encryption" keys by copying them verbatim from tutorials https://programmingwithstyle.com/posts/howihackedmycar/
-
CheapGPT> Make car, plz? -
This is some misleading reporting though, that same security flaw exists on all keyless vehicles, it's not Hyundai specific. literally part of the article.
-
That last one sounds absolutely positive though
-
It was also them that sold engines with machining debris still inside. When the debris clogged up oil passages the crank became oil starved. The engine would then self-destruct.
They denied it was their fault for a long time.
-
That was a great read. Thanks for sharing
-
-
Step 1: obtain tool
Step 2: 'borrow' one car per night, add as many miles/kilometers as possible
Step 3: watch dealerships shit themselves
Step 4: be the silent reason why all affected vehicles get free fixes
-
While these Game Boy-like devices cost around €20,000 in Europe,
huh, I could have sworn they were around $200-250USD online. I'm not great at math I'll let theverge figure out the exchange rate.
-
They provided a free alternative: Park near a Kia 🤣
12 comments
This continues a weird anti-Hyundai/Kia push I see from the US, seems like a coordinated effort.
If you read the article or really know anything about keyless systems, this is not a HMG specific issue, look online for Mercedes, BMW SUVs being stolen with the same "Gameboy" device.
Here is a bmw m3 being stolen the same way https://youtube.com/shorts/1f2RaUswWAE
It's not clear at all what they are offering from the article, it's half assed reporting. It seems they are selling increased security not a "fix", there is no fix for this otherwise it would have been done already industry wide.
saying it's Hyundai making you pay for their own flaw is active FUD spreading at best, wouldn't be surprised if it's malicious paid for hit piece by US auto industry and it seems like based on the comments here it worked.
The actual article could be: Hyundai offers in-house increased security for their Vehicles with only a 50 dollar co-pay from the customer.
(These added security devices cost hundreds from third party vendors)
I dont think it's quite so conspiratorial. This is low hanging fruit for journalists after the major issue they had with not including immobilizers as a standard feature.
If you know anything about car security, you'll know that chip and key immobilizers are miles apart from smart fob authentication, and that any vehicle from any manufacturer using a smart fob is vulnerable to a wireless relay attack.
I think someone is being paid to not understand the difference here. I think Hyundai cheaping out on immobilizer chips is unacceptable, but I also blame NHTSA for not requiring it in the FMVSS, Canada had none of the US' problems with Hyundai / Kia thefts because the CMVSS requires an immobilizer since 2007.