+ Publier publicitaire GRATUIT !
Stats d'annonce: Dernier 24h - 52, actuel - 1180, total - 87786

Nissan Leaf App Contains Cyber Vulnerability, Researcher Says

25 Février 2016 - Autoblog

Nissan Leaf App Contains Cyber Vulnerability, Researcher Says

An app that helps Nissan Leaf owners connect to their cars contains cyber vulnerabilities that allow outsiders to manipulate certain controls and view information on the whereabouts of drivers.

Anyone with knowledge of a Nissan Leaf's vehicle identification number could use it to manipulate heating and air-conditioning functions and potentially drain the electric vehicle's battery. Outsiders could also view location data from a vehicle's recent trips and obtain private information on a driver's whereabouts.

Cyber-security research Troy Hunt disclosed the vulnerabilities Wednesday after discovering them during a workshop last month. He says the interface that controls communications between the outside world and car doesn't authenticate users, so anyone with cursory knowledge of a VIN can access the vehicle via the NissanConnect app and receive responses.

"Fortunately, the Nissan Leaf doesn't have features like remote unlock or remote start, like some vehicles from other manufacturers do, because that would be a disaster with what's been uncovered," Hunt writes on his website.

The vulnerability is an anomaly in automotive cyber-security circles. It contains none of the dire implications of the remote hack of a Jeep Cherokee that researchers demonstrated last year, in which they commandeered steering, acceleration and brake functions from halfway across the country. At worst, someone with mischievous intent could drain a battery and leave a car owner with a headache.

But that also misses the point. The Jeep hack was a difficult feat – it took researchers Chris Valasek and Charlie Miller months to target and exploit a single vehicle. By contrast, the NissanConnect vulnerability, Hunt says, was easy to find and exploit.

"In my view, this is the sort of flaw that needs to have the service pulled until it can be fixed properly and restored." – Troy Hunt

VINs can often be viewed through the windshield, and the "risks like the one above were discovered by doing nothing more than using the app as it was intended to be used and observing the traffic going backwards and forwards," Hunt writes. "This is the mobile equivalent of opening your browser's dev tools and watching the network tab."

On Wednesday afternoon, Nissan acknowledged a "data issue." A spokesperson for the company says, "our global technology and product teams are currently working on a permanent and robust solution. We are committed to resolving the issue as a matter of priority, ensuring that we deliver the best possible experience for our customers."

But as automakers rush to connect smartphone apps to vehicle functions, Hunt's research will surely be a topic discussed by the automakers' fledgling Information Sharing and Analysis Center, a group that became operational in December that's supposed to deal with the industry's car-hacking vulnerabilities.

In the meantime, Hunt is hoping Nissan fixes the problem by shuttering the app until it's more secure.

"In my view, this is the sort of flaw that needs to have the service pulled until it can be fixed properly and restored; it's not a critical feature of the vehicle yet it has the potential to impact its physical function and there's the privacy risk as well."

Nouvelles par Tags

2011 models2012 models3D printing458 italia6-series coupeA1A2abc motorsabu dhabiaccidentaccidentsaccordACIMacuraadvertisingafricaAIairbagairbagsairbusairportalcotestalfaalfa romeoalgeriaalibabaalpineamazonamphibiousandroidAnil Bachooappappleappointmentsappsapriliaarabiaargentinaarielarnold schwarzeneggerArtashok leylandasiaastonaston martinauctionaudiaudit reportaustraliaAustralian Grand Prixaustriaautoauto industryauto shanghaiauto showautonomous carautonomus carAutopilotautopont DecaenaventadorawardsAxessBagatellebahrain grand prixBAIBaie-du-TombeaubajajBalaclavaBambousBangkok International Motor ShowBangkok Motor ShowBangladeshbatmobilebatterybattlebeachbeachesBeau-BassinBeaux SongesBeaux-SongesbeetleBeijing Auto ShowBeijing Motor ShowBelgiumBell-Villagebentleybernie ecclestonebetamaxbetamax casebicyclebicyclesbikebikesbiodieselBlue-BaybmwboatboatsBogota Auto ShowBois-Marchand accidentBologna Motor ShowbondboschBPObrabusbrakesbrazilbribebribesbridgebridgestonebriobudgetbugattiBugatti ChironbuggybuickburnoutbusbusesbuyingbydcadillaccalebassescamaroCamp-ChapelonCanadacarcar buying tipscar dealerscar importcar marketcar rentcar rentalcar salescar servicecar sharingcar showcar theftcar washcarbon fiberCarPlaycarscartingcascavelleCaudanCCIDCCTVCEBcelebretiescelebritiesCentres De FitnessCESChamp de MarsChamp-de-MarsChengdu Motor ShowcherychevroletChevrolet CamaroChicago Auto ShowchinaCHINESE GRAND PRIXChris Evanschryslercitroencivicclassicclassic carclassic carsclassicscommercialcomparisonconceptconceptsconsumer reportsconvertiblecoromandelcorruptioncorvetteCourtCourtsCPBcr-vcrashcrash testcrash testscrossovercrowdfundingCubaCurepipecustom carCUVCWAcyclonedaciadaihatsudaimlerdakardartzdash camdashcamdatsunDelhi Auto ExpodeloreandesignDetroitDetroit Auto Showdéviationsdéviations routièresdieseldiesel scandalDIYDLCdodgeDPPdragdrag battledrag racedrag racingdriftdriftingdriver licensedriverless cardrivingdriving licensedriving schooldriving schoolsdriving testdriving tipsdronedronesdrugsdrunk drivingdsDubaiDubai Motor ShowducatiearthquakeEbayebeneecoecologyeconomyelectricelon muskengen motor showengineenginesEOCethanoletios livaEUEuropeeveventsexpofacebookfakeFast And Furiousfaux permis de conduireFernando AlonsoferrariferryFIAfiatfiestafilmsfinancesfinefinesfinlandFirefiskerfitness centerFlacqFlic-en-FlacfloodFloodsflying carFond-du-SacFootballForbachForbach accidentforce indiafordFord mustangformula1forza motorsportFrancefrankfurtfrankfurt motor showfraudFSCfuelfuel economy scandalfuel pricefuel stationfuel stationsfunnyfutureGaikindo Indonesia International Auto ShowGaikindo Indonesia International Motor ShowgamesgeargeelygenesisGeneva Auto Showgeneva motor showGermanygirlsgmgodzillagolfgolf carGoodlandsgoodwoodgooglegoogle glassGoProgovernmentgpsgran turismogrand tourgrand-baieGrand-Bassingreat wallgreecegreengreen energygrnoGros-CaillouxGRSE accidentGTAGymkhanahackershakershamannharley-davidsonHatchbackhealthcarehellcatHennesseyherohistoryhitachiholdenHollandHollywoodhondahonda civichonda cr-vHonda HR-Vhonda jazzHong Konghorsepower falsifyinghospitalshot wheelshotelhotelshoverbikehoverboardhow toHuayrahummerhumorhurricaneHusqvarnahybridhydrogenhyundaiHyundai i20Hyundai KonaHyundai TucsonHyundai Velosteri3i40ICACiframacIIHSillegal racingillegal taxiillegal transportIMCimportindiaIndia Auto ExpoIndian MotorcycleIndian OilindicaIndonesiaIndonesia International Motor Showindonesia motor showinfinitiInfinityinfrastructureinsuranceintelinteriorinteriorsiPadiphoneiranirelandIRPisraelisuzuIsuzu D-maxitaliaItalyjaguarjamesjames bondJames Mayjapanjapaneese carsjapanese carjapanese carsJapanese Grand PrixjazzJDMjeepjeep wranglerJeremy ClarksonjettaJin Feijobskartkawasakikei carken blockKenyakhankiaKia CeedKia ForteKia StingerKoenigseggkoreaKoshik ReesaulKTMLALA Auto ShowLa MarieLa PrairieLa VigieLallmatielamborghiniLamborghini AventadorLamborghini Uruslancialandland cruiserland roverLand Rover DefenderLarsen & ToubroLaventurelawsLe Morneleallegolewis hamiltonlexuslicenselight metrolimousineLionel Messilotuslow cost carLRTluxuryluxury carluxury carsM1m3macondemad maxMadagascarMahebourgmahindramaintenancemalaysiamanmansorymapsMare d’Albertmarketmarketingmartinmarutimaruti suzukiMaruti SwiftmaseratiMatt LeBlancMauritiansmauritiusmaybachmazdaMazda Mx-5mazda3McLarenmecedesmercedesmetroMetro Expressmexicomichael schumacherMicrosoftMidlandsminimitsubishiMitsubishi PajeroMitsubishi TritonmitsubushiMMMMokamonacomonaco grand prixMont-ChoisyMontagne-BlancheMontebello accidentmontereymoparMoroccomotomoto-écolemotormotor showMotor vehicle test centremotorcyclemotorcyclesmotorsportmotorsportsmotosportmoviesmpvMRAmugenmuscle carMusicmustangmv agustaMVDANADA Auto ShowNandanee SoornackNando Bodhananonascarnavigation systemnavigation systemsNavin RamgoolamNCGNDUNepalnetherlandsnew carnew york auto shownew zealandnfsNHTSANigerianissanissanNissan LeafNissan TerranorwayNouvelle-FranceNTANTCNurburgringoff-roadoffroadOlympic Gamesopelpaganipagani huayraPaillesPakistanPamplemoussespanasonicParisparis motor showparkingparliamentPebble Beachpenaltiespenalty pointsPereyberepermis de conduirePetit-RaffrayPetite-RivièrepetrolpeugeotPhilippinesPhoenixpickuppickupspininfarinapirelliPitonPlace de l’ImmigrationPlaine-LauzunPlaine-MagnienplayboyPNQPointe-aux-SablespolandpolarispolicepoliticspollutionPomponettepontiacporscheporsheportPort LouisPort-LouisPoste-de-FlacqPPCPPPprankPravind JugnauthpricepricespriusproguardprotestsprotonPSApublic transportpublict transportQ3qorosQuartier-Militairequatre-bornesr8Raceracingrainrallyramrangerange roverratingsRDArecallrecallsrecordrecordsred bullreduitrenaultrenderingrent a carrepairreplicaReunionRezvaniRHTRiambelRichard DuvalRichard HammondRiche-TerrerickshawrimacRing RoadrioRiviere-du-RempartRiviere-Noireroadroad accidentroad accidentsroad rules & regulationsroad safetyRoad Traffic ActRoad Traffic Amendment Actroadsroads safetyrobberyrobotrobotsroche-boisRodriguesrolls-royceromeorose-belleRose-HillroverRoyal EinfieldRoyal EnfieldRRSRSUrumoursRussiasaabsafetysafety ratingssafety testsafety testsSaint-PierreSainte-Croixsalesamsungsamusao paulo auto showSao Paulo Motor Showsaudisaudi arabiascamscandalscaniaschool busschool vanscooterscootersseatsebastian vettelsecond hand carsecond hand carssecond hand cars importself driving carself-drivingself-driving carself-driving carsSEMASEMA showSeoul Motor Showservice stationsShanghaishanghai motor showshelbyShellshowsingaporeSingapore Grand PrixskodaSlovakiasmartsnakeSobrinho caseSohail Sesungkursolar energysorezesoreze accidentsoulsound systemssouthsouth africasouth koreaspainspare partsspeed camerasspeed limitspeedingsportSportscarspy shotsssang yongSsangYongSt-JeanSt-Julienstar warsstartupstatisticsSTCstreet racingstrikestudysubaruSudhir SesungkursudySunshine AutosupecarssupercarssuprcarssurveySUVsuzukiSuzuki IntruderSuzuki JimnySuzuki Swiftsuzuki vitaraSuzuki XbeeSwedenswiftSwitzerlandTATaiwantakatatamarintankTanzaniaTarisa Resorttatataxtax fraudtaxestaxiTBStechnlogytechnolgytechnologytenderTerre-RougeTerre-Rouge–Verdunteslatesla model stest driveteststhailandThailand International Motor ExpoThe Grand TourtheftThierry Henryticket pricetipstiresTMRSUtokyoTokyo Auto Salontokyo motor showtoptop geartotaltoyotaToyota Alphardtoyota corollaToyota HiluxToyota RAV4Toyota Rushtoyota supraToyota Tacomatoyota yaristoystoytatrafficTraffic BranchtrailertransformerstransporttrendsTrianontricksTriolettriumphTrou d’Eau DouceTrou-FanfarontrucktruckstsunamituningTurkeytvstyresUAEuberUBSukukraineunionsuomuralUSused carused car importused carsVacoasVacoas-Phoenixvanvarma caseVeer Luchoomunvehicle inspectionVehiclesvelostervenezuelaVerdunVictoria Bus StationVictoria stationvideoVienna Auto ShowvietnamVintagevintage carsVipervivo energyvolkswagenvolvovwwaymoWeatherwheelsWootonWorldyachtyamahayariszagato
Vendez Votre Auto