Thu Jul 30, 2015 6:12pm EDT

Researcher says can hack GM's OnStar app, open vehicle, start engine

BOSTON/DETROIT | BY JIM FINKLE AND BERNIE WOODALL

A researcher is advising drivers not to use a mobile app for General Motors Co's (GM.N) OnStar vehicle communications system, saying hackers can exploit a security flaw in the product to unlock cars and start engines remotely.

"White-hat" hacker Samy Kamkar posted a video on Thursday saying he had figured out a way to "locate, unlock and remote-start" vehicles by intercepting communications between the OnStar RemoteLink mobile app and the OnStar service.

Kamkar said he plans to provide technical details on the hack next week in Las Vegas at the Def Con conference, where tens of thousands of hacking aficionados will gather to learn about new cybersecurity vulnerabilities.

[font size=1]-snip-[/font]

GM spokesman Terrence Rhadigan told Reuters via email that the company was preparing an update to the RemoteLink app that would address the vulnerability. "It's days away," Rhadigan said.

[font size=1]-snip-[/font]