By Graeme McNaughton/The Oshawa Express
General Motors, nor its Oshawa-based subsidiary General Motors of Canada, will not be recalling any vehicles after it was revealed part of its systems were susceptible to a hack.
Samy Kamkar, a self-described hacker and whistleblower, loaded a video to YouTube late last month showing how he was able to access and remote start vehicles using only a mobile phone to exploit a loophole in GM’s OnStar Remote Link system.
The phone, running a program called OwnStar, intercepts the OnStar signal. With that data, the OwnStar program is then able to locate, unlock and remote start a vehicle.
On Monday, website AutoBlog reported that the loophole has since been fixed.
“GM takes matters that affect our customers’ safety and security very seriously. GM product cybersecurity representatives have reviewed the potential vulnerability recently identified. In working with the researcher, we moved quickly to secure our back-office system and reduce risk,” Adria MacKenzie, General Motors of Canada’s corporate communications manager, told The Oshawa Express in an emailed statement before the patch was released. “However, further action is necessary on the RemoteLink app itself. We take all cyber matters seriously and an enhanced RemoteLink app will also be made available in app stores soon to fully mitigate the risk.”
This news comes just weeks after Fiat/Chrysler had to recall 1.4 million vehicles after hackers revealed an entertainment system that comes on various models under the Jeep, Chrysler and Dodge labels could be accessed remotely, and through that could gain control to other parts of the vehicle.