Does the attacker actually need to be nearby?
Or does there just need to be some communications link between the car's Bluetooth transceiver and the attacker?
I'd think that installing a BT <--> cell network bridge would easily solve that hurdle.
Or does there just need to be some communications link between the car's Bluetooth transceiver and the attacker?
I'd think that installing a BT <--> cell network bridge would easily solve that hurdle.
The cell -> phone -> bluetooth audio bridge?
I don't think there's an exploit there, but even assuming there was, it'd require an attacker to know the phone number of the person they are attacking and for the car to be on at the same time when they execute the attack.
Feels a little like the 90s ILUVYOU emails :)
I can see somebody setting up a Cassia in a car park and performing all sorts of bluetooth LE shenanigans remotely.