Used car security questioned over former owners' app connections

Manufacturers have no way to disconnect cars' apps from former owners who can track their old cars, a computer security expert has warned

Used car buyers can have their cars tracked by former owners who fail to disconnect their smartphones from applications in cars, a computer security researcher has warned.

IBM researcher, Charles Henderson, has called on carmakers to do a better job of protecting new owners after he found he was still connected to his old car after a year of selling it.

Henderson said that even though he deleted all personal details in the car before selling it on, it remained linked with his phone, allowing him to track its details.

He argued that manufacturers have no way to disconnect the car's apps from former owners. “The car is really smart but it’s not smart enough to know who its owner is, so it’s not smart enough to know it’s been re-sold.”

Auto Express previously highlighted similar issues with a number of other owners. A Land Rover Discovery Sport owner who sold his car privately was able to continue accessing the car’s InControl app even though the new owner was now on the other side of the country. He could still find out the car's location, and worryingly whether or not it was locked.

Car dealers warned to tighten up cyber security to KO hackers

Another second-hand owner contacted Auto Express over saved addresses on his Honda CR-V's sat-nav. They had bought the car from a “famous celebrity’s wife” but were stunned to see all previous sat-nav destinations were stored in the car’s system.

Both Land Rover and the Society of Motor Manufacturers and Traders told Auto Express that while manufacturers are able to remove owners’ details from cars (but not necessarily disconnect them from the apps), it’s the user’s responsibility to remove their old vehicle from their account after selling it.

• Car hacking: study shows over 100 models at risk

The news comes after cyber security firm Kaspersky Lab found security issues with seven Android apps for cars. For now the company has not named the apps, but said they lacked the most basic software defences to protect drivers from having their details stolen.

The company said hackers could use any of the seven apps to locate a car, unlock it and even in some instances start the car. Viktor Chebyshev, Kaspersky researcher said: “Why don’t connected car application developers care about security as much as the developers of banking applications? They are also controlling very valuable things for the user, but they’re not thinking about security mechanisms.” 

Do you use car apps regularly? Tell us in the comments below...

Recommended

UK new car registrations down nine per cent in July
v5c document
News

UK new car registrations down nine per cent in July

Semiconductor shortage, Covid restrictions in China and war in Ukraine all contribute to fifth consecutive month of decline
4 Aug 2022
Nearly three quarters of drivers have almost had a car crash
Braking
News

Nearly three quarters of drivers have almost had a car crash

Research shows 72 per cent of drivers have had a near-miss, while drivers also estimate that they see around 14 incidents of illegal driving every wee…
3 Aug 2022
Fines not being enforced for drivers in red ‘X’ motorway lanes
M6 motorway traffic
News

Fines not being enforced for drivers in red ‘X’ motorway lanes

Police forces are failing to enforce red ‘X’ offences on smart motorways as effectively as first hoped, a Government minister has revealed
28 Jul 2022
Car sales staff make or break a dealership
Car salesperson demonstrating interior to customer
News

Car sales staff make or break a dealership

Survey reveals customers value good dealer staff over facilities, processes and pricing
27 Jul 2022

Most Popular

New 2025 Land Rover Discovery set for luxury reinvention
Land Rover Discovery - front (watermarked)
News

New 2025 Land Rover Discovery set for luxury reinvention

The Land Rover Discovery nameplate could spawn a family of models like the Defender
4 Aug 2022
New Mercedes EQE 350+ 2022 review
Mercedes EQE 350 - front
Road tests

New Mercedes EQE 350+ 2022 review

The new Mercedes EQE electric executive car tackles British roads for the first time
5 Aug 2022
New all-electric MG4 hatchback to start from £25,995
MG 4 - front
News

New all-electric MG4 hatchback to start from £25,995

The MG4 will rival Volkswagen’s ID.3 with up to 281 miles of range
5 Aug 2022