Shortly after it was made public, Nissan shut down its app. The hack works, according to Hunt, because Nissans Connect app, which allows users to control their car, has poor security - in fact, you only need a cars vehicle identification number in order. Instead, he contacted Nissan and made the company aware of this flaw, and only after four weeks of waiting for something to happen did he go live with the results. In the Settings menu, click on the Manage button. On the Home screen, click on the Settings button. Updating your map maximizes your driver-centric navigation experience, helping you get the most from your system. Connect the SD card to your computer and login Mazda Toolbox with your user account. Follow the guidance below to use Mazda Toolbox. Thus, anyone with knowledge of how to send commands could do so, because Nissan's side didn't bother to determine that the commands were coming from verified sources.įor what it's worth, Hunt didn't immediately run to the internet after learning how to do this. Mazda offers its users an application to backup and restore their Navigation SD Cards. Popularized by security researcher Troy Hunt after remotely accessing a British Leaf from all the way in Australia and posting the results to YouTube, the security flaw is made possible because the connection between the remote user and the Leaf's systems was not authenticated. Nissan has disabled its NissanConnect EV smartphone app, which allowed users some degree of control over their Leaf electric vehicles from their phones, after one security researcher discovered that he could send random commands to random Leafs with nothing more than a Web browser and knowledge of a vehicle identification number (VIN).
0 kommentar(er)
