Security concerns cloud high-tech number plates

New digital license plates offer convenience but could be vulnerable to hacking

Security concerns cloud high-tech number plates

E-plates, the high-tech alternative to traditional metal license plates, are generating excitement as they become legal in some US states. These plates boast features like customisable messages and stolen vehicle alerts. However, a recent security breach has exposed a critical vulnerability: hacking.

Josep Rodriguez, a security researcher, demonstrated how to “jailbreak” Reviver brand digital license plates. This allows a user to alter the displayed number at will, potentially evading tolls, parking tickets, and even speeding cameras. The hack involves physically accessing the plate and reprogramming its firmware.

The implications are concerning. Malicious actors could use stolen plates or exploit unwitting drivers to pin traffic violations on others. Furthermore, the hack undermines the core purpose of license plates – vehicle identification.

Reviver claims the hack requires specialized tools and expertise, limiting its real-world application. However, Rodriguez argues the process can be simplified, potentially leading to readily available hacking tools online.

This isn’t the first security lapse for Reviver. In 2022, a hacker gained administrative access to the company’s database, allowing them to manipulate plates remotely. While patched, this incident highlights the inherent risks of digital license plates.

With the UK considering adopting e-plates with embedded RFID chips, these vulnerabilities necessitate a cautious approach. Law enforcement, regulators, and e-plate manufacturers need to collaborate to develop robust security measures before widespread adoption here in the UK.

As researcher Sam Curry warns, “people will mess with them,” and the potential consequences for Police and responsible drivers are too significant to ignore.

Source: Wired

Have your say!

0 0

Lost Password

Please enter your username or email address. You will receive a link to create a new password via email.