Millions of cars could be tracked and unlocked by a hidden security flaw | Malwarebytes
https://www.malwarebytes.com/blog/bugs/2026/07/millions-of-cars-could-be-tracked-and-unlocked-by-a-hidden-security-flawOpen linkView original on sh.itjust.worksSyndicated from the fediverse. Read and engage on the original instance.
View original on sh.itjust.workshttps://www.malwarebytes.com/blog/bugs/2026/07/millions-of-cars-could-be-tracked-and-unlocked-by-a-hidden-security-flawOpen linkView original on sh.itjust.works
7 replies
Fucking tech bros.
I'm not a fan of tech bros but, for once, this isn't on them. This is on the dealers. It should be the dealers responsibility (and expense) to track down and patch each and every car they installed this garbage on.
Especially considering they install before purchase, unknown to the customer.
Remote control/tracking without the customer's consent sounds like a major liability.
I guarantee you it's buried somewhere in the stack of paperwork you have to sign while being pressured not to read it.
This is on the dealers. But it's also on the tech bros at KARR that created a device that uses the same authentication key everywhere stored in plain text. There needs to be criminal corporate liability for negligence that bad. Especially when it took them 18 months to patch.
And it should have been laughably easy to patch. The whole Dev process should have taken far less than a single month.
That's not negligence, it's reckless disregard.
The dealers didn't program them badly. Tech bros trying to scale and integrate verticals did that.