65
Millions of cars could be tracked and unlocked by a hidden security flaw | Malwarebytes
(www.malwarebytes.com)
this post was submitted on 24 Jul 2026
65 points (98.5% liked)
Cybersecurity
10349 readers
92 users here now
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
- Be respectful. Everyone should feel welcome here.
- No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
- No Ads / Spamming.
- No pornography.
Community Rules
- Idk, keep it semi-professional?
- Nothing illegal. We're all ethical here.
- Rules will be added/redefined as necessary.
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub
Notable mention to !cybersecuritymemes@lemmy.world
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Fucking tech bros.
I'm not a fan of tech bros but, for once, this isn't on them. This is on the dealers. It should be the dealers responsibility (and expense) to track down and patch each and every car they installed this garbage on.
This is on the dealers. But it's also on the tech bros at KARR that created a device that uses the same authentication key everywhere stored in plain text. There needs to be criminal corporate liability for negligence that bad. Especially when it took them 18 months to patch.
And it should have been laughably easy to patch. The whole Dev process should have taken far less than a single month.
That's not negligence, it's reckless disregard.
The dealers didn't program them badly. Tech bros trying to scale and integrate verticals did that.
Especially considering they install before purchase, unknown to the customer.
Remote control/tracking without the customer's consent sounds like a major liability.
I guarantee you it's buried somewhere in the stack of paperwork you have to sign while being pressured not to read it.