Critical Security Flaws in Carmaker's Web Portal
Introduction
A recent report by TechCrunch revealed that a security researcher, Eaton Zveare, discovered critical security flaws in a carmaker's web portal, allowing hackers to remotely unlock cars from anywhere. These vulnerabilities were found in the centralized dealer portal, providing hackers with vast access to customer and vehicle data.
Key Details
Zveare explained that with this access, he could take over a customer's account and unlock their car remotely. This poses a major concern for car owners, as hackers can easily gain access to their personal information and control their vehicles. The flaws also allowed hackers to manipulate the system, potentially causing damage to the car's software and overall functioning.
Impact
The consequences of these security flaws are far-reaching and alarming. Not only can hackers remotely unlock cars, but they can also access sensitive information such as customer names, addresses, and even credit card details. This puts the carmaker's reputation at risk, as well as the safety and privacy of their customers. It is crucial for the carmaker to address these vulnerabilities and prioritize the security of their web portal to prevent any further breaches.
About the Organizations Mentioned
TechCrunch
**TechCrunch** is a leading global technology media company founded in June 2005 by Michael Arrington and Keith Teare under Archimedes Ventures. Initially launched as a blog focused on profiling and reviewing emerging startups and Web 2.0 companies, it quickly became a prominent source of breaking tech news, analysis, and opinion for entrepreneurs, investors, developers, and tech enthusiasts[3][4]. The organization established itself as a key voice in Silicon Valley by delivering in-depth articles about the rapidly evolving tech ecosystem. Its unique editorial style encourages writers to self-assign stories they are passionate about, fostering deep, insightful coverage[3]. Over time, TechCrunch expanded beyond news with significant influence in the startup community through its flagship events. A major milestone came in 2008 with the launch of TechCrunch50, a startup competition providing early-stage companies a platform to pitch innovations to industry experts and investors. This event evolved into the annual TechCrunch Disrupt conference starting in 2010, which remains a premier global gathering for startups, investors, and tech leaders. Disrupt is well-known for its Startup Battlefield competition, which has launched successful companies such as Dropbox, Mint, Yammer, and Cloudflare, collectively raising billions in funding and achieving numerous exits[1][4][5]. TechCrunch was acquired by AOL early in its growth phase, which helped scale its operations but also saw internal disputes among the founders around 2010, leading to Teare’s fading involvement[1]. Despite leadership changes, TechCrunch continues to thrive as a digital media leader, generating revenue primarily through advertising and event sponsorships. Celebrating its 20th anniversary in 2025, TechCrunch remains committed to delivering front-row access to technology innovation and startup culture. It maintains a strong presence in Europe and globally, consistently shaping the conversation around tech trends and entrepreneurship[3][7]. Its enduring impact stems from both its authoritative journalism and its role as a launchpad fo