Given the above, convince me I should care about how hard it is to break into passive keyless entry cars?
Once an attacker can remotely hack a single car, they can hack all cars that have an identical configuration, with little additional cost.
What happens then? Even if insurance companies could replace all affected cars simultaneously (very unlikely), they’d have to replace them with a model that isn’t affected.
Anyway, even if it isn’t autonomous, suppose a car has a smartphone app that allows you to turn on the heating before getting in. And then someone exploits that and gains control over the heating. They could then proceed to drain the batteries or the fuel tank by leaving it on over night, let’s say.
Not exactly a threat to national security, but still a major inconvenience.
I did not confuse anything. I only mentioned passive keyless entry in a footnote, as an example of an insecure technology that you can't really avoid anymore. You still have a chance to avoid "connected car" features, but in my estimation the days are numbered for that.
And do what with them? It's decently difficult to fence a single car, it's impossible to make millions of cars disappear.
Btw, the truck attack in the German market would've been a much larger scale if the truck's safety mechanism didn't trigger the emergency break.
Regardless, that Jeep hack sure proved a clusterf*ck of system design, and should be a cautionary tale.
You wouldnt buy a car that is safe- because bad security does not smell.
> They never had their car stolen and if they did, their insurance would have replaced it.
You'll be a fun thicket convincing your insurance your car was hacked. Especially if it turns out to be true. Nobody has rulebooks for that one yet.
If you have really good insurance, perhaps you'd end up driving a loaner for a few months.
I don't really care if you care or not, it's your car, but I care.
Also, the issue with passive keyless entry isn't just theft of the car itself, its more often theft of its contents. It makes break-ins much easier to do undetected.
The Toyotas Camrys also seemed good, except I couldn't find a V6 to test drive and they didn't have Android Auto.
Just a note: I'm not super-paranoid about my car getting hacked. I didn't want a cellular modem because I know I won't use whatever features it enables, and I didn't want my car to be ransomed for a bitcoin. I didn't want passive keyless entry because it didn't seem like much of a convenience, and it weakens security against petty theft.
My criteria, in priority order:
Must haves:
* V6 engine
* No cellular modem
* No passive keyless entry (not really available anymore, so I had to drop it as a dealbreaker)
Nice to haves:
* Android Auto/Carplay
* Adaptive cruise control, etc.
The dealers don't know about the cars at this level of detail. I had to use these questions to pry the data out of them:
1. Is this a connected car? Can I unlock it or start the engines from my smartphone?
2. Is that feature an option or is the feature part of the base model?
3. Can I get the connected feature later? Would I have to bring the car in to get something installed or can you enable them from your computer?
#3 is a really important question. Subaru (and perhaps others) ship all their cars with the hardware for connectivity, but the actual feature requires a subscription. The car is always connected to the internet, because the dealer can start your subscription remotely, but the salesmen don't understand that implication. They're thinking solely in terms of features you're getting, not what hardware the car has.
[1] It's almost impossible now to buy a new car without passive keyless entry that isn't a bottom-tier economy model, despite the well documented security problems with many of those protocols.