[Ecks]

Mazda cars with next-gen Mazda MZD Connect infotainment systems can be hacked just by plugging in a USB flash drive into their dashboard, thanks to a series of bugs that have been known for at least three years, The issues have been discovered and explored by the users of the Mazda3Revolution forum back in May 2014. Since then, the Mazda car owner community has been using these 'hacks' to customize their cars' infotainment system to tweak settings and install new apps. One of the most well-designed tools is MZD-AIO-TI (MZD All In One Tweaks Installer). Recently, a security researcher working for Bugcrowd has put together a GitHub repository that automates the exploitation of these bugs. The researcher says an attacker can copy the code of his GitHub repo on a USB flash drive, add malicious scripts and carry out attacks on Mazda cars. Mazda said the issues can't be exploited to break out of the infotainment system to other car components, but researchers disagreed with the company on Twitter. In the meantime, the car maker has finally plugged the bugs via a firmware update released two weeks ago.

Read More @ https://www.bleepingcomputer.com/news/se...ash-drive/

[mothered]

Mazda cars with next-gen Mazda MZD Connect infotainment systems can be hacked... [snip]... thanks to a series of bugs that have been known for at least three years...

the car maker has finally plugged the bugs via a firmware update released two weeks ago.

It took them 3 years to finally patch their vulnerabilities. Simply appalling.

On topic of security flaws, a lot of websites (even .gov, .edu etc) are the same. I purposely plant back doors and months If not a year later, I can still get In. I did not expect this from Mazda though.

[Ecks]

It took them 3 years to finally patch their vulnerabilities. Simply appalling.

On topic of security flaws, a lot of websites (even .gov, .edu etc) are the same. I purposely plant back doors and months If not a year later, I can still get In. I did not expect this from Mazda though.

All of these smart cars now days are full of vulnerabilities and not just electronics or programs but physically as well, hit the right spot and doors literally open. I have dealt with a lot of these built in or unintentionally left in bad ideas and there is a reason I love old cars, something breaks you can actually fix it, no brain, no i/o ports, no nonsense.

[zorrophreak]

I actually have one of these. Yeah there's vulnerabilities, and its disappointing that it took Mazda this long to patch. Although I've left mine alone for the time being so I can look further into it.

Good job Mazda!