Used car security questioned over former owners' app connections

Manufacturers have no way to disconnect cars' apps from former owners who can track their old cars, a computer security expert has warned

Used car buyers can have their cars tracked by former owners who fail to disconnect their smartphones from applications in cars, a computer security researcher has warned.

IBM researcher, Charles Henderson, has called on carmakers to do a better job of protecting new owners after he found he was still connected to his old car after a year of selling it.

Henderson said that even though he deleted all personal details in the car before selling it on, it remained linked with his phone, allowing him to track its details.

He argued that manufacturers have no way to disconnect the car's apps from former owners. “The car is really smart but it’s not smart enough to know who its owner is, so it’s not smart enough to know it’s been re-sold.”

Auto Express previously highlighted similar issues with a number of other owners. A Land Rover Discovery Sport owner who sold his car privately was able to continue accessing the car’s InControl app even though the new owner was now on the other side of the country. He could still find out the car's location, and worryingly whether or not it was locked.

Car dealers warned to tighten up cyber security to KO hackers

Another second-hand owner contacted Auto Express over saved addresses on his Honda CR-V's sat-nav. They had bought the car from a “famous celebrity’s wife” but were stunned to see all previous sat-nav destinations were stored in the car’s system.

Both Land Rover and the Society of Motor Manufacturers and Traders told Auto Express that while manufacturers are able to remove owners’ details from cars (but not necessarily disconnect them from the apps), it’s the user’s responsibility to remove their old vehicle from their account after selling it.

• Car hacking: study shows over 100 models at risk

The news comes after cyber security firm Kaspersky Lab found security issues with seven Android apps for cars. For now the company has not named the apps, but said they lacked the most basic software defences to protect drivers from having their details stolen.

The company said hackers could use any of the seven apps to locate a car, unlock it and even in some instances start the car. Viktor Chebyshev, Kaspersky researcher said: “Why don’t connected car application developers care about security as much as the developers of banking applications? They are also controlling very valuable things for the user, but they’re not thinking about security mechanisms.” 

Do you use car apps regularly? Tell us in the comments below...

Recommended

Treasury eyes up road pricing to plug £30bn fuel-duty gap
News

Treasury eyes up road pricing to plug £30bn fuel-duty gap

The UK’s Petrol and diesel car ban will bring with it huge losses for the Treasury as fuel-duty revenue dries up; road pricing looks set to be the sol…
17 Nov 2020
Road bosses approve 138 miles of new smart motorway with no hard shoulder
smart motorway
News

Road bosses approve 138 miles of new smart motorway with no hard shoulder

Nine new sections of all-lane running smart motorway are set to open despite concerns over the lack of a hard shoulder
9 Nov 2020
Fiat-Chrysler faces £5bn UK lawsuit over defeat devices
Fiat Doblo 2015 - steering wheel
Fiat

Fiat-Chrysler faces £5bn UK lawsuit over defeat devices

Around half a million FCA-engined vehicles in England and Wales could be affected by diesel emissions scandal, says law firm
27 Oct 2020
Dash cam portal saves 170,000 hours of police time in two years
News

Dash cam portal saves 170,000 hours of police time in two years

Nextbase's National Dash Cam Safety Portal is used by 33 police forces and has recorded more than 20,000 uploads
21 Oct 2020

Most Popular

New Suzuki Swace estate launched on UK market
News

New Suzuki Swace estate launched on UK market

Based on the Toyota Corolla Touring Sports, the Suzuki Swace estate comes to the UK
11 Nov 2020
All-new Renault Kangoo van unveiled ahead of 2021 launch
Renault Kangoo ZE Concept - show pic
Renault Kangoo

All-new Renault Kangoo van unveiled ahead of 2021 launch

First images of the third-generation Renault Kangoo panel van - which will soon square-up to the new Volkswagen Caddy
12 Nov 2020
New Citroen C3 2020 review
Citroen C3

New Citroen C3 2020 review

The Citroen C3 supermini has been updated for 2020, but have the updates boosted its appeal?
12 Nov 2020