Researcher details flaw enabling remote unlock of X-brand cars worldwide
infosecau · hn · 2026-11-09
A Hacker News front-page post links to a write-up on shubs.io titled "Unlocking any car from X brand in most of the world," detailing a vulnerability in the brand's connected-car service that reportedly allows an attacker to remotely unlock arbitrary vehicles of the same brand across most regions. The issue highlights weaknesses in automaker cloud APIs and account/authorization flows — a classic telematics attack surface worth studying for security practitioners.
More from Embodied
- Physical Intelligence to present π0.7 at CoRL oral with emergent robot capabilities — lucy_x_shi · 2026-11-09
- Fully open MolmoAct2 action reasoning model wins Best Paper at CoRL TAG — jmin__cho · 2026-11-09
- Dyna Robotics' Dynasaur Folds Clothes Nonstop at CoRL, Shrugging Off Every Interruption — JasonMa2020 · 2026-11-09
- Dyna Robotics shows Taku humanoid at CORL; talks on self-improving robots scheduled — JasonMa2020 · 2026-11-09
- MoRE: Mixture-of-Experts 3D World Model Handles Rigid, Plush and Cloth Objects for Real Robots — anand_bhattad · 2026-11-09
- Billion-dollar Physical AI startups are coming, and most won't build their own hardware or models — Scobleizer · 2026-11-09