The bad safety protection left the gaps of the easier car

Subaru left the safety door, even if it contains snails, reveals the cardinal caterpillar. Security Shorts Sam Curry and Shubham Shah report their results (through Acade) of a website that has been stolen easily. After obtaining a chance, he was able to control the test car to see what is available for a year. Warns that the Subaru is far away from the only partner with a default security around the vehicle data.

When security researchers informed Subaru, the company has taken a quick action. Fortunately, researchers say that the minority of the minority had not broken before. But it says that the Subaru authoritator can still find the owner of the owner and one knowledge: The last name of the owners, Zip Code, email address, telephone number, phone number, phone number, phone number, phone number, telephone number, or license.

The entrance to the stolen Admin was a part of Subari’s Stardlink suite connection. (No contract with The Spacex Service of the same name.) Curry and Shah entered the Entrior Sublink email address on LinkedIn and restarted in the final range of questions – because it happened in the last browser, not the server server. Redrupled to two-products in the action of doing “the easiest thing we can consider: Removing the Customer Cover to UI.”

Although the research test followed the place where the vehicle was examined one year, they may not say that the applicant’s legal employees may be approved. It’s because a test car (a 2023 Subaru Ipreza Curry purchased his mother unless she could break) only used for a long time. The data of this site was not selected in many other places, perhaps: It was correct to less than 17 feet and replaced each time after the engine started.

“When I searched and get my car on Dashboard, I proved that the Starlink administrator should be able to obtain any subjay in the United States, Canada, and Japan,” and Japan wrote. “We wanted to prove that there’s nothing we need, so we had to approach him if we could disable his vehicle. He would raise her car in the Gagin, and then we had promised in his car.”

In addition to their location, Portal Portal allowed the researchers to start far away, stopping, closing and opening each vehicle attached to the Subaru. He said Curry Mom did not receive information to be informed as an authorized use, and not received notifications after opening its vehicle.

They may ask and get a lot of each customer, plus one’s contact with emergency, legal users, home address, the last four digits of credit cards and pin. In addition, he was able to find a profile call of the owners of the owners and the owners of the car, Odometer’s reading and sales record.

In the words in the Eldailed, Director of Subaru Communications of Dominick Incorrect, Inc. Subslable Subjects of Starlinks. Subaru resembling the Stardices That day, and there is no substance a cars or customer data reached without authorization. Secure researchers were able to obtain two accounts of their relative and their friend who allowed them. “

Subaru also stimated that its cars could not be driven away and that the company does not sell the data of space. It added only some other employees who can get the data of the parking to depend on the value of work.

Security researchers say to follow the security of security – come from the ability of one employee access to “Most information” – is not different from Subaru. Acade They claim to curry and Shah the previous job revealed the same mistakes that affect the Acura, Gecora, Honda, hygiei, Kia, Toyota and others.

These two believe that there is a reason to worry about the way to companies and strategies to avoid safety. Curry writes: “The car companies are very special because 18 years of Texas can consult a lot about a California car, and they do not stop any bells. “It’s part of their daily work. All employees have a chance to have a lot of personal information, and everything depends on trust. It seems that it is very difficult to protect these acts when such a great chances are in the world random. “

The A total report of research It’s worth reading.

Changes, January 24, 2025, 1:07 PM et: The story has been modified to add words from Subaru.