This Subaru Hack Exposed Location Data and Allowed Remote Access [Video]

We know that cars are better connected than ever before, which is great when you want to remember where you parked or start defrosting the vehicle windows while you’re still in bed—but this modern tech comes with security and privacy concerns, as a new hack of Subaru cars and their Starlink software has shown.

Security researchers Sam Curry and Shubham Shah explain in a blog post how they were able to remotely hack into the Starlink connected vehicle service run by Subaru. Specifically, they targeted software on Curry’s mom’s car, but the same platform operates across Subaru vehicles in the U.S., Canada, and Japan.

With access to the driver’s surname and their attached ZIP code, email address, phone number, or license plate, Curry and Shah were able to start, stop, lock, and unlock the Subaru, as well as retrieve its current location. In addition, they could view the collected location history for …