Common Vulnerabilities and Exposures number 2017-14937: in unspecified post-2014 passenger car models, the explosive charge that deploys the airbag is controlled by an instruction that is secured by one of only 256 keypairs, and there is no rate-limit on authentication attempts over the CAN bus. It gets better! "In addition, at least one manufacturer's interpretation of the ISO 26021 standard is that it must be possible to calculate the key directly (i.e., the other 255 key pairs must not be used)."
CVE-2017-14937 shows airbags will deploy when told to deploy. They point out problems with security access.
• U.S. State Department blames Russia for cyberattacks that hit neighboring Georgia in October 2019 • By identifying Russia’s digital assaults on neighbors, US hopes to raise awareness of ongoing GRU attacks on US
Is it just us, or does it feel like winter hasn’t been as horrendous as usual this year? Well, stats show it’s actually been one of the warmer winters on record so far this year for many eastern U.S. cities in January and February. But, almost on cue, weather experts warn signs of a serious […]
While mobile devices are all but essential and the center of so many individual universes these days, find one person who loves their wireless plan with that type of passion. Check around. We’ll wait… Didn’t find anybody, did you? That’s because most wireless plans are designed for the convenience of the provider and will nickel-and-dime […]
In the early days of the web, everyone wanted a .com domain for their site. As a result, all the good ones got snapped up. But .com no longer has the cachet it once did. In fact, many new businesses and individuals are opting for other top-level domain extensions. One of the most memorable is […]