Hackers show that they can unlock a Subaru Outback and start engine via text message

Article by Christian Andrei, on August 4, 2011

At the Black Hat security conference that took place recently in Las Vegas, there was a demonstration of the Subaru Outback being unlocked and its engine being started remotely. The event was conducted by two security researchers from iSec Partners named Don Bailey and Matthew Solnik.

They got an Android phone and used a technique they referred to as 'war texting' wherein they used two unnamed remote control products that are for locking and unlocking.

After setting up their own GSM network, it took them just two hours to intercept the password authentication messages between the server and the car. They said that this technique could be used to hit other systems that receive firmware updates through text messages.

These include traffic control systems and security cameras. It’s worrisome that this technique could be used on SCADA sensors, which are employed in industrial systems like the power grid and water supply.

Bailey said that the “real threat” would be if this technique controls power, phone, or traffic systems. They declined to provide details about how the hacking is accomplished or to say what cars are at risk until the manufacturers get the chance to fix the vulnerabilities.

Notably, similar remote-control apps are used by General Motors, BMW and Mercedes. In May 2010, other security researchers have successfully attempted to remotely control cars. A group from the University of Washington used a diagnostic computer system named the Controller Area Network to control the locks and the brakes of the cars remotely.

If you liked the article, share on:


Login or Create new account to add a comment!


Tesla is making sure that all models under production will receive the necessary advanced hardware that will allow them to be autonomously driven. The fitment of these advanced hardware to...
by - October 27, 2016
Wondering how fast the 2017 Chevrolet Camaro ZL1 in actual driving? To provide customers a good idea on how fast the 2017 Camaro ZL1 could really get, Chevrolet recently had...
by - October 27, 2016
So, it is official! The new Honda Clarity FCV has the longest verified range of any zero-emissions vehicle currently on the road in the United States. One of the main...
by - October 27, 2016
Many have been anticipating Mercedes-Benz Vans’ newest luxury pickup truck, the X-Class. While Mercedes-Benz has yet to reveal the official production version of the X-Class, it was kind enough to...
by - October 27, 2016
We’ve seen quite a lot of intriguing stories in the age of Internet (where the most interesting part was revealed before the story unfolds). Some are from movies and novels...
by - October 26, 2016