Connected Cars Have an Access Problem That Outlasts the Sale

A researcher switched off a BYD Shark 6’s headlights while a journalist drove it at night. The same investigation demonstrated remote location tracking and access to the cabin microphone. Those are substantial capabilities to lose control of in something you use to get your family home.The demonstration, covered by Security Affairs, came from ABC’s Four Corners investigation. Researcher Dan Hreszczuk had the vehicle for two weeks before the test. He said the access he used lacked a password, but he could not access the brakes or cameras.ABC’s published account does not provide enough technical detail to establish that an attacker could compromise an untouched Shark remotely over the internet. It demonstrates what Hreszczuk could do after gaining access. It does not establish a fleet-wide attack or state surveillance. BYD told ABC that Australian customer data is stored in Australia and that it has not and would not give that data to Chinese authorities.Interfering with a driver’s…