automobile

DMCA Exemptions will Boost IoT Security Research

In-brief: After a year in limbo, the Librarian of Congress moved last week to allow a number of exceptions to the U.S. Digital Millennium Copyright Act (DMCA) that will clear the way for researchers to explore smart vehicles and other products. 

Car Infotainment Vulnerability Raises Supply Chain Concerns

In-brief: Researchers from George Mason University and New York University are warning that the software used to link smart phones to in-vehicle “infotainment” (IVI) systems could make cars vulnerable to remote attack. 

One in Five Vehicle Vulnerabilities are ‘Hair on Fire’ Critical

In-brief: One of every five software vulnerabilities discovered in vehicles in the last three years are rated “critical” and are unlikely to be resolved through after the fact security fixes, according to an analysis by the firm IOActive. 

Update- Zero to 60: Experts Divided on Wisdom of Fiat Chrysler’s Bounty

In-brief: Security experts are divided on Fiat Chrysler’s new bug bounty program, with some decrying small dollar awards, while others argue the company may have moved far too quickly in offering cash rewards to begin with.

Fiat Chrysler Launches Public Bug Bounty – But It’s Not All That

In-brief: Fiat Chrysler Automobiles (FCA) has unveiled a public “bounty” program that will pay security researchers up to $1,500 dollars for information on vulnerabilities in software used in conjunction with the company’s vehicles. Don’t get too excited.