Comments on: Hacker Uses Telematics System for Revenge http://intelematicstoday.com/2010/03/23/hacker-uses-telematics-system-for-revenge/ Automotive Telematics - Business and Technology Tue, 30 Nov 2010 22:14:06 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: “Usage Based Insurance” Bulletin April 2010 « Pay_as_you_drive http://intelematicstoday.com/2010/03/23/hacker-uses-telematics-system-for-revenge/comment-page-1/#comment-637 “Usage Based Insurance” Bulletin April 2010 « Pay_as_you_drive Sat, 17 Apr 2010 17:52:57 +0000 http://intelematicstoday.com/?p=675#comment-637 [...] based on this recent news http://intelematicstoday.com/2010/03/23/hacker-uses-telematics-system-for-revenge/ we think about the security of our [...] [...] based on this recent news http://intelematicstoday.com/2010/03/23/hacker-uses-telematics-system-for-revenge/ we think about the security of our [...]

]]> By: Compensation Calculator http://intelematicstoday.com/2010/03/23/hacker-uses-telematics-system-for-revenge/comment-page-1/#comment-614 Compensation Calculator Tue, 13 Apr 2010 20:34:28 +0000 http://intelematicstoday.com/?p=675#comment-614 I cannot describe how refreshed I find myself to read and reccomend your blog. Its well composed and holds excellent info. carry on the good work! I cannot describe how refreshed I find myself to read and reccomend your blog. Its well composed and holds excellent info. carry on the good work!

]]> By: Evy http://intelematicstoday.com/2010/03/23/hacker-uses-telematics-system-for-revenge/comment-page-1/#comment-493 Evy Thu, 25 Mar 2010 17:46:37 +0000 http://intelematicstoday.com/?p=675#comment-493 That´s incredible...the question is..Does this company have systems auditor? or has an efecctive IT controls? I guess this company does not have an risk analysis effective...if the companys have a real controls not only in paper the risk minimize it.! The company has to review their security plans. That´s incredible…the question is..Does this company have systems auditor? or has an efecctive IT controls? I guess this company does not have an risk analysis effective…if the companys have a real controls not only in paper the risk minimize it.!
The company has to review their security plans.

]]> By: Troy http://intelematicstoday.com/2010/03/23/hacker-uses-telematics-system-for-revenge/comment-page-1/#comment-483 Troy Wed, 24 Mar 2010 17:05:23 +0000 http://intelematicstoday.com/?p=675#comment-483 With great power comes great responsibility. I think centralizing that power makes auditing, logging, and revocable trust even more important. API keys and trusted certificate relationships must be revocable. We run a phone call API and have seen that firsthand - simple access control, sane usage limits, and and central management are as important as the service itself. Cases where hardware ships to remote, disconnected locations (say, in-vehicle telematics) make this harder. Auto-updating firmware brings its own challenges, like bricking the device. Usually the controls need to reside somewhere outside the in-vehicle device. With great power comes great responsibility. I think centralizing that power makes auditing, logging, and revocable trust even more important. API keys and trusted certificate relationships must be revocable.

We run a phone call API and have seen that firsthand – simple access control, sane usage limits, and and central management are as important as the service itself.

Cases where hardware ships to remote, disconnected locations (say, in-vehicle telematics) make this harder. Auto-updating firmware brings its own challenges, like bricking the device. Usually the controls need to reside somewhere outside the in-vehicle device.

]]>