Firewalls Don't Stop Dragons Podcast

Firewalls Don't Stop Dragons Podcast

Hacking Your Honda

July 25, 2022

The “rolling code” technology used to remotely open and lock your car is supposed to prevent hacking. Unfortunately, Honda has a pretty serious vulnerability in their cars that apparently allows anyone with a little talent and cheap hacking tools to get into your car – and maybe even start it (though not actually drive it away). If correct, this vulnerability affects probably all Hondas made over the last 10 years. So far, Honda has denied that this is a problem, but many researchers have reproduced the hack.

In other news: cheap, Chinese-made GPS vehicle trackers are vulnerable to remote hacking; Chrome, Edge and Safari browsers fix serious 0-day bugs; Twitter data breach info on 5.4M users is up for sale on the dark web; Windows getting a crucial security update to make important security feature on by default; the Conti ransomware gang is attacking the entire country of Costa Rica; Facebook quickly bypasses Firefox’s URL tracking removal feature; Tor Browser adds a useful feature that will help people in repressive countries; Google appears ready to stop blocking political spam emails; Amazon admits to giving Ring video to law enforcement without consent or a warrant; a complicated, targeted web browser trick can be used to identify website visitors.

Article Links
  1. [U.S. News & World Report] Researchers: Chinese-Made GPS Tracker Highly Vulnerable
  2. [Ars Technica] 0-day used to infect Chrome users could pose threat to Edge and Safari users, too
  3. [] Twitter data breach exposes contact details for 5.4M accounts; on sale for $30k
  4. [ZDNet] Windows 11 is getting a new security setting to block ransomware attacks
  5. [ThreatPost] Conti’s Reign of Chaos: Costa Rica in the Crosshairs
  6. [Schneier Blog] Facebook Is Now Encrypting Links to Prevent URL Stripping
  7. [None] Tor Browser Adds Automatic Censorship Circumvention
  8. [Inc. Magazine] Google Revealed Plans for a Big Change to Gmail That Almost Nobody Wants. You Have 19 Days to Object
  9. [The Intercept] Amazon Admits Giving Ring Camera Footage to Police Without a Warrant or Consent
  10. [The Drive] I Tried the Honda Keyfob Hack on My Own Car. It Totally Worked
  11. [WIRED] A New Attack Can Unmask Anonymous Users on Any Major Browser
  12. Tip of the Week: More Uses for Password Vaults:

Further Info

Table of Contents

Use these timestamps to jump to a particular section of the show.

  • 0:02:02: Bad Bugs in GPS Vehicle Trackers
  • 0:07:16: Zero-Day Bugs in Chrome, Edge, Safari
  • 0:12:47: Twitter data breach affect 5.4M users
  • 0:15:20: Windows new default RDP security setting
  • 0:19:11: Conti gang attacks Costa Rica
  • 0:23:40: Facebook defeats URL tracker removal technique
  • 0:26:31: new Tor Browser feature
  • 0:28:51: Google wants to allow political spam
  • 0:34:08: Ring video given to police without warrant or consent
  • 0:39:17: How to hack just about any modern Honda
  • 0:50:43: Targeted, sophisticated web tracking hack
  • 0:57:59: Tip of the Week
  • 1:08:01: Wrap-up, DEF CON