Hyundai wants Ioniq 5 owners to pay to fix a keyless entry security hole
Thieves have been stealing cars with a Game Boy-like device
What the fuck? They did a mistake implementing a half-assed protocol and it's the end user that has to pay for it?
The "usb ignition" debacle didn't teach anything to those assholes?
Also, wasn't them that used a default passphrase in creating a SSL certificate for the CAN bus or something like that so everyone could reverse engineer that?
edit: yes, it was them, they used multiple "encryption" keys by copying them verbatim from tutorials https://programmingwithstyle.com/posts/howihackedmycar/
undefined
CheapGPT> Make car, plz?
This is some misleading reporting though, that same security flaw exists on all keyless vehicles, it's not Hyundai specific. literally part of the article.
That last one sounds absolutely positive though
It was also them that sold engines with machining debris still inside. When the debris clogged up oil passages the crank became oil starved. The engine would then self-destruct.
They denied it was their fault for a long time.
That was a great read. Thanks for sharing
This continues a weird anti-Hyundai/Kia push I see from the US, seems like a coordinated effort.
If you read the article or really know anything about keyless systems, this is not a HMG specific issue, look online for Mercedes, BMW SUVs being stolen with the same "Gameboy" device.
Here is a bmw m3 being stolen the same way https://youtube.com/shorts/1f2RaUswWAE
It's not clear at all what they are offering from the article, it's half assed reporting. It seems they are selling increased security not a "fix", there is no fix for this otherwise it would have been done already industry wide.
saying it's Hyundai making you pay for their own flaw is active FUD spreading at best, wouldn't be surprised if it's malicious paid for hit piece by US auto industry and it seems like based on the comments here it worked.
The actual article could be: Hyundai offers in-house increased security for their Vehicles with only a 50 dollar co-pay from the customer.
(These added security devices cost hundreds from third party vendors)
wouldn't be surprised if it's malicious paid for hit piece by US auto industry
I dont think it's quite so conspiratorial. This is low hanging fruit for journalists after the major issue they had with not including immobilizers as a standard feature.
If you know anything about car security, you'll know that chip and key immobilizers are miles apart from smart fob authentication, and that any vehicle from any manufacturer using a smart fob is vulnerable to a wireless relay attack.
I think someone is being paid to not understand the difference here. I think Hyundai cheaping out on immobilizer chips is unacceptable, but I also blame NHTSA for not requiring it in the FMVSS, Canada had none of the US' problems with Hyundai / Kia thefts because the CMVSS requires an immobilizer since 2007.
Step 1: obtain tool
Step 2: 'borrow' one car per night, add as many miles/kilometers as possible
Step 3: watch dealerships shit themselves
Step 4: be the silent reason why all affected vehicles get free fixes
They provided a free alternative: Park near a Kia 🤣
While these Game Boy-like devices cost around €20,000 in Europe,
huh, I could have sworn they were around $200-250USD online. I'm not great at math I'll let theverge figure out the exchange rate.
