"Researchers Could Track the GPS Location of All of California's New Digital License Plates"

A team of security researchers gained "super administrator access" to Reviver, the company responsible for the rollout of California's new digital license plates. According to a blog post by the researchers, this access allowed them to track the physical GPS location of all Reviver customers and alter a part of text intended for personalized messages at the bottom of the license plate. Sam Curry, a bug bounty hunter, stated that an actual attacker could remotely update, track, or delete the Reviver plate of any user. Curry and his colleagues discovered vulnerabilities throughout the car sector, including Reviver. This article continues to discuss the discovered possibility of attackers gaining super administrative access to Reviver to perform malicious activities, such as tracking the physical GPS location of all Reviver customers and more. 

Motherboard reports "Researchers Could Track the GPS Location of All of California's New Digital License Plates"

Submitted by Anonymous on