Root Causes 271: A Whole Fleet of Identity-based Automotive Hacks

Published: Jan. 23, 2023, midnight

A white hat security researcher recently revealed a large number of identity-based vulnerabilities across many automotive manufacturers. In this episode we explain how a group of white hats exploited these manufacturers' dependence on non-secret "secrets" such as VIN or email address to force a raft of unacceptable behaviors across a large number of automotive brands.