this post was submitted on 23 Jan 2025
6 points (100.0% liked)
Privacy
1112 readers
942 users here now
Protect your privacy in the digital world
Welcome! This is a community for all those who are interested in protecting their privacy.
Rules
PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!
- Be nice, civil and no bigotry/prejudice.
- No tankies/alt-right fascists. The former can be tolerated but the latter are banned.
- Stay on topic.
- Don't promote proprietary software.
- No crypto, blockchain, etc.
- No Xitter links. (only allowed when can't fact check any other way, use xcancel)
- If in doubt, read rule 1
Related communities:
- !opensource@programming.dev
- !selfhosting@slrpnk.net / !selfhosted@lemmy.world
- !piracy@lemmy.dbzer0.com
founded 3 months ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Here's the actual write-up. TLDR: The issue is not with the Starlink app itself, but the Starlink Admin system that was vulnerable due to poor coding practices. The pentester was able to take over a Subaru Starlink admin's account and apparently Starlink retains a TON of information about your vehicle and driving history that is easily viewable by any "admin". The tester was also able to add himself to the vehicle's authorized users and could trigger the remote features (i.e. lock/unlock, remote start) from the admin panel. Subaru was notified of this and they claim to have patched it. I'm not sure if opting out of the data collection and sharing would've helped keeping all that information from being retained there.
EST