|||
Subaru Security Flaws Exposed Its System for Tracking Millions of Cars. And it turns out the admins of the system can still see all your information. The article talks about how the tracking is so precise that you can see what spot you actually parked in. Aside from the gross negligence from the security side of things the amount of data they are keeping for a year seems unnecessary for the ways they suggest Starlink is used in their cars.
“Now-fixed web bugs allowed hackers to remotely unlock and start millions of Subarus. More disturbingly, they could also access at least a year of cars’ location histories—and Subaru employees still can.”
The two researchers say they found the email address for a Subaru Starlink developer on LinkedIn, took over the employee’s account, and immediately found that they could use that staffer’s access to look up any Subaru owner by last name, zip code, email address, phone number, or license plate to access their Starlink configurations. In seconds, they could then reassign control of the Starlink features of that user’s vehicle, including the ability to remotely unlock the car, honk its horn, start its ignition, or locate it, as shown in the video below.
By way of Wired