![\"\"](\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/04\/obdii.jpg?w=680&h=452\")
<\/p>\n<\/p>\n
More and more devices, from smart dash cams to head-up displays to Bluetooth-enabled diagnostics dongles, are looking to tap your car\u2019s built-in diagnostic (or OBD-II) port for power and data.<\/p>\n
The problem: this port\u2026 really wasn\u2019t built to be used like that. Primarily designed to be tapped occasionally to better explain that oh-so-vague \u201cCheck Engine\u201d light, it certainly wasn\u2019t built to be connected to an always-attached device blasting out all sorts of different wireless protocols whenever the vehicle is on.<\/p>\n
Example A: Researchers at Argus Security<\/a> have found a flaw in a commercially available Bluetooth-enabled diagnostics dongle that let them\u00a0turn off the vehicle\u2019s engine<\/em> while the car was moving, as long as they were within Bluetooth range.<\/p>\n The dongle in question is the Bosch Drivelog Connect, a device meant to shed insight on your driving behaviors and send diagnostic information to a companion smartphone app via Bluetooth. To Bosch\u2019s credit, the company began addressing the issue within a day of being alerted, and publicly acknowledged and outlined their fix for\u00a0the issue here<\/a>.<\/p>\n \u201cWho cares? I\u2019ve never even heard of that device,\u201d you might say.<\/p>\n It\u2019s a fair stance, but one that assumes that this is the only device that has this sort of flaw. Similar flaws have been found in other devices<\/a>. Meanwhile, more gadgets are tapping the OBD-II port than ever \u2014 I see a new one hit my inbox every few weeks. Many of the ones I check out have obvious user-facing bugs\u2026 so it\u2019s probably safe to assume that all the workings behind the scenes aren\u2019t exactly flawless.<\/p>\n So do you need to go rip that shiny new dash cam or smart display out of your car? Probably not \u2014 but be mindful of the attack vector you\u2019re introducing to the 4,000-pound metal box you\u2019re cruising around in. It\u2019s the owner\u2019s responsibility to stay up to date on reports regarding the device\u2019s security, and to keep the device itself up to date<\/em> (a lot of these things are easy to set up and then completely forget).<\/p>\n More crucially, it\u2019s up to the device makers to test the hell<\/em> out of their devices, hire external firms to try to crack them and patch bugs as quickly as they responsibly can. Consider building a \u201cred alert\u201d notice\/mandatory update into apps for the worst stuff.<\/p>\n If you\u2019re interested in the specifics of the research on the aforementioned dongle, Argus has a deep breakdown of their methodology here<\/a>, from disassembling the companion app, to poking holes in the device\u2019s security, to actually shutting down one of their own vehicles while it was in motion.<\/p>\n","protected":false},"excerpt":{"rendered":"![\"\"](\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/04\/obdii.jpg?w=680\")
More and more devices, from smart dash cams to head-up displays to Bluetooth-enabled diagnostics dongles, are looking to tap your car’s built-in diagnostic (or OBD-II) port for power and data. The problem: this port… really wasn’t built to be used like that. Read More<\/a><\/p>\n\n<\/img><\/a>
<\/img><\/a>
<\/img><\/a>
<\/img><\/a>
<\/img><\/a>
<\/img><\/a>\n<\/div>\n
<\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[59,66,26],"class_list":["post-338806","post","type-post","status-publish","format-standard","hentry","category-technology","tag-media","tag-techcrunch","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/338806","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=338806"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/338806\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=338806"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=338806"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=338806"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}