#MegamosCrypto

Volkswagen has spent over two years trying to block the publication of a research paper which reveals a key hacking vulnerability in many of their models as well as thousands from other manufacturers. According to Bloomberg, a team of researchers discovered the vulnerability in 2012 and notified Volkswagen in May 2013. Instead of working with the researchers to resolve the issue, Volkswagen argued that the paper would increase the risk of theft and sued them to stop the publication.

The English High Court is trying to stop it, but it’s hard to know how much authority they have over the upcoming USENIX Security Symposium. If, as I suspect, the answer is “None”, then attendees to that event will be treated to a presentation on how to break the Megamos Crypto system, the RFID-based immobiliser that prevents counterfeit and physically-copied keys, to say nothing of plain old “hot-wiring” at the ignition switch, from starting the Bentley Continental GT that, apparently, uses it.

Of course, some of you will have already considered that if the system is in use in the CGT, it’s in use in the Phaeton, and probably the Touraeg, as well. You’re right, and there are far more cars at risk than just those.