Subaru left open a gaping security flaw that, although patched, lays bare modern vehicles’ myriad privacy issues. Security researchers Sam Curry and Shubham Shah reported their findings (via Wired) about an easily hacked employee web portal.

Subaru and your data. The original hack was done by logging into the Starlink terminal as a Subaru employee, via some detective work on LinkedIn and a little tweaking of website c

A vulnerability in Subaru’s Starlink connected vehicle service exposed US, Canada, and Japan vehicle and customer accounts.

Hackers Sam Curry and Shubham Shah discovered a way to hack into Subaru vehicles using the company’s Starlink connected services application. The MySubaru app is part of this system and lets owners start or shut off the engine, unlock the doors, track the vehicle, and more.

Two security researchers discovered a security vulnerability in Subaru’s Starlink-connected vehicles last year that gave them “unrestricted targeted access to all vehicles and customer accounts” across the U.

Whether somebody's cheating on their wife or getting an abortion or part of some political group, there are a million scenarios where you could weaponize this against someone.” Curry and Shah today revealed in a blog post their method for hacking and tracking millions of Subarus,