+ Publier publicitaire GRATUIT !
Stats d'annonce: Dernier 24h - 78, actuel - 1099, total - 87220

'Millions' of Volkswagen cars can be unlocked via hack

15 Août 2016 - BBC

A sizeable proportion of 100 million Volkswagen Group cars sold since 1995 can be unlocked remotely by hackers, a team of researchers has said.

The problem affects a range of vehicles manufactured between 1995 and 2016 - including VWs and models from the company's Audi, Seat and Skoda brands.

A homemade radio costing about £30 is the only hardware an attacker requires.

Volkswagen said it was working with the researchers and added that several new vehicles were unaffected by the issue.
Two separate attacks affecting different models are described in a paper by researchers from the University of Birmingham and German security firm Kasper & Oswald.

With the second method, an older cryptographic scheme in some other brands was found to have a similar, albeit more complex vulnerability.

The team showed it was possible for a malicious hacker to spy on key fob signals to target cars via a cheap, homemade radio.

'Cryptographic catastrophe'

By cloning the digital keys, the researchers found they could then unlock a variety of VW Group vehicles.
This was possible because they were able to reverse-engineer the keyless entry system in the affected models - a process which yielded some master cryptographic keys.

Prior to publishing their research, the team behind the paper agreed with Volkswagen that some key pieces of information - including the value of the master cryptographic keys - would not be made public.

"We were kind of shocked," Timo Kasper at Kasper & Oswald told the BBC. "Millions of keys using the same secrets - from a cryptography point of view, that's a catastrophe."

Mr Kasper said that after the researchers alerted Volkswagen to the problem in November 2015, they set up some meetings to help the car maker understand the vulnerability.

"We had very fruitful discussions - there was a very good atmosphere," he said.

However, there are "at least ten more, very widespread" hacking schemes affecting various other car brands that Kasper & Oswald is still waiting to publish, following appropriate disclosure to the companies involved, Mr Kasper added.

'Constructive exchange'

A spokesman for Volkswagen said several current-generation vehicles, including the Golf, Tiguan, Touran and Passat were not affected by the problem.

"The responsible department at Volkswagen Group is in contact with the academics mentioned and a constructive exchange is taking place," he told the BBC.

The spokesman added that starting the car's engine with this attack was "not possible".

Security expert Ken Munro at Pen Test Partners said critical components of the attack had been omitted from the published paper.

"You'd need some academic-level knowledge of cryptography to be able to do this," he added.

However, he also said the research was the latest in a string of similar findings that showed how many on-board systems in modern cars were vulnerable to hacking.

"Manufacturers are doing the right thing now, but you've got this huge problem with the installed base, those cars will last maybe 10 years - the fix is not simple," he told the BBC.

"You're potentially replacing all the control units in all the vehicles out there."

Mr Munro added that it might be possible to prevent the reverse-engineering approach taken by the researchers in order to prevent the discovery of the crucial cryptographic keys.

The paper will be presented later today at the Usenix cybersecurity conference in Austin, Texas.

Nouvelles par Tags

2011 models2012 models3D printing458 italia6-series coupeA1A2abc motorsabu dhabiaccidentaccidentsaccordACIMacuraadvertisingafricaAIairbagairbagsairbusairportalcotestalfaalfa romeoalgeriaalibabaalpineamazonamphibiousandroidAnil Bachooappappleappointmentsappsapriliaarabiaargentinaarielarnold schwarzeneggerArtashok leylandasiaastonaston martinauctionaudiaudit reportaustraliaAustralian Grand Prixaustriaautoauto industryauto shanghaiauto showautonomous carautonomus carAutopilotautopont DecaenaventadorawardsAxessBagatellebahrain grand prixBAIBaie-du-TombeaubajajBalaclavaBambousBangkok International Motor ShowBangkok Motor ShowBangladeshbatmobilebatterybattlebeachbeachesBeau-BassinBeaux SongesBeaux-SongesbeetleBeijing Motor ShowBelgiumBell-Villagebentleybernie ecclestonebetamaxbetamax casebicyclebicyclesbikebikesbiodieselBlue-BaybmwboatboatsBogota Auto ShowBois-Marchand accidentBologna Motor ShowbondboschBPObrabusbrakesbrazilbribebribesbridgebridgestonebriobudgetbugattiBugatti ChironbuggybuickburnoutbusbusesbuyingbydcadillaccalebassescamaroCamp-ChapelonCanadacarcar buying tipscar dealerscar importcar marketcar rentcar rentalcar salescar servicecar sharingcar showcar theftcar washcarbon fiberCarPlaycarscartingcascavelleCaudanCCIDCCTVCEBcelebretiescelebritiesCentres De FitnessCESChamp de MarsChamp-de-MarsChengdu Motor ShowcherychevroletChevrolet CamaroChicago Auto ShowchinaCHINESE GRAND PRIXChris Evanschryslercitroencivicclassicclassic carclassic carsclassicscommercialcomparisonconceptconceptsconsumer reportsconvertiblecoromandelcorruptioncorvetteCourtCourtsCPBcr-vcrashcrash testcrash testscrossovercrowdfundingCubaCurepipecustom carCUVCWAcyclonedaciadaihatsudaimlerdakardartzdash camdashcamdatsunDelhi Auto ExpodeloreandesignDetroitDetroit Auto Showdéviations routièresdieseldiesel scandalDIYDLCdodgeDPPdragdrag battledrag racedrag racingdriftdriftingdriver licensedriverless cardrivingdriving licensedriving schooldriving schoolsdriving testdriving tipsdronedronesdrugsdrunk drivingdsDubaiDubai Motor ShowducatiearthquakeEbayebeneecoecologyeconomyelectricelon muskengen motor showengineenginesEOCethanoletios livaEUEuropeeveventsexpofacebookfakeFast And Furiousfaux permis de conduireFernando AlonsoferrariferryfiatfiestafilmsfinancesfinefinesfinlandFirefiskerfitness centerFlacqFlic-en-FlacfloodFloodsflying carFond-du-SacFootballForbachForbach accidentforce indiafordFord mustangformula1forza motorsportFrancefrankfurtfrankfurt motor showfraudFSCfuelfuel economy scandalfuel pricefuel stationfuel stationsfunnyfutureGaikindo Indonesia International Auto ShowGaikindo Indonesia International Motor ShowgamesgeargeelygenesisGeneva Auto Showgeneva motor showGermanygirlsgmgodzillagolfgolf carGoodlandsgoodwoodgooglegoogle glassGoProgovernmentgpsgran turismogrand tourgrand-baieGrand-Bassingreat wallgreecegreengreen energygrnoGros-CaillouxGRSE accidentGTAGymkhanahackershakershamannharley-davidsonHatchbackhealthcarehellcatHennesseyherohistoryhitachiholdenHollandHollywoodhondahonda civichonda cr-vHonda HR-Vhonda jazzHong Konghorsepower falsifyinghospitalshot wheelshotelhotelshoverbikehoverboardhow toHuayrahummerhumorhurricaneHusqvarnahybridhydrogenhyundaiHyundai i20Hyundai KonaHyundai TucsonHyundai Velosteri3i40ICACiframacIIHSillegal racingillegal taxiillegal transportIMCimportindiaIndia Auto ExpoIndian MotorcycleIndian OilindicaIndonesiaIndonesia International Motor Showindonesia motor showinfinitiInfinityinfrastructureinsuranceintelinteriorinteriorsiPadiphoneiranirelandIRPisraelisuzuIsuzu D-maxitaliaItalyjaguarjamesjames bondJames Mayjapanjapaneese carsjapanese carjapanese carsJapanese Grand PrixjazzJDMjeepjeep wranglerJeremy ClarksonjettaJin Feijobskartkawasakikei carken blockKenyakhankiaKia CeedKia ForteKia StingerKoenigseggkoreaKoshik ReesaulKTMLALA Auto ShowLa MarieLa PrairieLa VigieLallmatielamborghiniLamborghini Uruslancialandland cruiserland roverLand Rover DefenderLarsen & ToubroLaventurelawsLe Morneleallegolewis hamiltonlexuslicenselight metrolimousineLionel Messilotuslow cost carLRTluxuryluxury carluxury carsM1m3macondemad maxMadagascarMahebourgmahindramaintenancemalaysiamanmansorymapsMare d’Albertmarketmarketingmartinmarutimaruti suzukiMaruti SwiftmaseratiMatt LeBlancMauritiansmauritiusmaybachmazdaMazda Mx-5mazda3McLarenmecedesmercedesmetroMetro Expressmexicomichael schumacherMicrosoftMidlandsminimitsubishiMitsubishi PajeroMitsubishi TritonmitsubushiMMMMokamonacomonaco grand prixMont-ChoisyMontagne-BlancheMontebello accidentmontereymoparMoroccomotomoto-écolemotormotor showMotor vehicle test centremotorcyclemotorcyclesmotorsportmotorsportsmotosportmoviesmpvMRAmugenmuscle carMusicmustangmv agustaMVDANADA Auto ShowNandanee SoornackNando Bodhananonascarnavigation systemnavigation systemsNavin RamgoolamNCGNDUNepalnetherlandsnew carnew york auto shownew zealandnfsNHTSANigerianissanissanNissan LeafNissan TerranorwayNouvelle-FranceNTANTCNurburgringoff-roadoffroadOlympic Gamesopelpaganipagani huayraPaillesPakistanPamplemoussespanasonicParisparis motor showparkingparliamentPebble Beachpenaltiespenalty pointsPereyberepermis de conduirePetit-RaffrayPetite-RivièrepetrolpeugeotPhilippinesPhoenixpickuppickupspininfarinapirelliPitonPlaine-LauzunplayboyPNQPointe-aux-SablespolandpolarispolicepoliticspollutionPomponettepontiacporscheporsheportPort LouisPort-LouisPoste-de-FlacqPPCPPPprankPravind JugnauthpricepricespriusproguardprotestsprotonPSApublic transportpublict transportQ3qorosQuartier-Militairequatre-bornesr8Raceracingrainrallyramrangerange roverratingsRDArecallrecallsrecordrecordsred bullreduitrenaultrenderingrent a carrepairreplicaReunionRezvaniRHTRiambelRichard DuvalRichard HammondRiche-TerrerickshawrimacRing RoadrioRiviere-du-RempartRiviere-Noireroadroad accidentroad rules & regulationsroad safetyRoad Traffic ActRoad Traffic Amendment Actroadsroads safetyrobberyrobotrobotsroche-boisRodriguesrolls-royceromeoRose-HillroverRoyal EinfieldRoyal EnfieldRRSRSUrumoursRussiasaabsafetysafety ratingssafety testsafety testsSaint-PierreSainte-Croixsalesamsungsamusao paulo auto showSao Paulo Motor Showsaudisaudi arabiascamscandalscaniaschool busschool vanscooterscootersseatsebastian vettelsecond hand carsecond hand carssecond hand cars importself driving carself-drivingself-driving carself-driving carsSEMASEMA showSeoul Motor Showservice stationsShanghaishanghai motor showshelbyShellshowsingaporeSingapore Grand PrixskodaSlovakiasmartsnakeSobrinho caseSohail Sesungkursolar energysorezesoreze accidentsoulsound systemssouthsouth africasouth koreaspainspare partsspeed camerasspeed limitspeedingsportSportscarspy shotsssang yongSsangYongSt-JeanSt-Julienstar warsstartupstatisticsSTCstreet racingstrikestudysubaruSudhir SesungkursudySunshine AutosupecarssupercarssuprcarssurveySUVsuzukiSuzuki IntruderSuzuki JimnySuzuki Swiftsuzuki vitaraSuzuki XbeeSwedenswiftSwitzerlandTATaiwantakatatamarintankTanzaniaTarisa Resorttatataxtax fraudtaxestaxiTBStechnlogytechnolgytechnologytenderTerre-RougeTerre-Rouge–Verdunteslatesla model stest driveteststhailandThailand International Motor ExpoThe Grand TourtheftThierry Henryticket pricetipstiresTMRSUtokyoTokyo Auto Salontokyo motor showtoptop geartotaltoyotaToyota Alphardtoyota corollaToyota HiluxToyota RAV4Toyota Rushtoyota supraToyota Tacomatoyota yaristoystoytatrafficTraffic BranchtrailertransformerstransporttrendsTrianontricksTriolettriumphTrou d’Eau DouceTrou-FanfarontrucktruckstsunamituningTurkeytvstyresUAEuberUBSukukraineunionsuomuralUSused carused car importused carsVacoasVacoas-Phoenixvanvarma caseVeer Luchoomunvehicle inspectionVehiclesvelostervenezuelaVerdunVictoria Bus StationVictoria stationvideoVienna Auto ShowvietnamVintagevintage carsVipervivo energyvolkswagenvolvovwwaymoWeatherwheelsWootonWorldyachtyamahayariszagato
Vendez Votre Auto