BMW has patched a security flaw that left 2.2 million cars, including Rolls Royce and Mini models, open to hackers.
www.bbc.co.uk/news/technology-31093065
|
But this is a different flaw to the flaw with Keyless entry/'keyless start which is how so may X5s (and Range Rovers, etc.) have been stolen, isn't it?
|
Yes it is a different flaw. The biggest surprise is they used HTTP and not HTTPS and didn't do any sort of checks. Therefore potential to hijack the connection. What you had to do was spoof a mobile phone network for the ConnectedDrive to connect to.
|