PwnStar
2015-07-31 00:10:47.526309+02 by Dan Lyke 0 comments
OwnStar Device Can Remotely Locate, Unlock, and Start GM OnStar Cars.
“After a user opens the RemoteLink mobile app on their phone near my OwnStar device, OwnStar intercepts the communications and sends specially crafted packets to the mobile device to acquire additional credentials then notifies me, the attacker, about the vehicle that I indefinitely have access to, including its location, make, and model,” Kamkar said in a video demonstrating the device.
OnStar hack remotely starts cars, GM working on a fix.
... GM has already issued one patch this morning aimed at securing the RemoteLink app, but it was unsuccessful, according to Kamkar.
It's a simple WiFi MitM + replay attack.
So how the hell do I get the gig telling people how to implement systems that weren't written like the high school kid who's just discovered computers?