I can lock and unlock the car that's I don't own. This is slightly worrisome, and me and my partner have just decided not to get a eNiro of our own 😅

My brother who was working on buying a Kia EV6 could see and track its location before even signing the paperwork. All you need is the VIN.

Report it to a local tech site. That's a scandal.

Yeah iirc Hyundai/Kia are one of the worst in the car industry when it comes to handling user data.

This 100% needs to be reported. First to KIA, then to the media after whatever time is required to pass for responsible disclosure in your country/region.

Cybersecurity professional here, I'd read up on Kia's responsible disclosure policy, to avoid any potential trouble, and for guidelines on how to disclose it to them and handle this ethically.

https://www.kia.com/eu/vulnerability-disclosure/

Unfortunately they don't do bug bounties, which is too bad.

Edit: I wouldn't listen to people telling you to lock the car, exploit it in other ways or disclosing it to the media first. That is unethical at best and illegal at worst.

But think of the shareholder value lost if we invest in that!

I'll kill myself before I get a car connected to the internet

You should report this to somewhere like 404 media

If you think that's bad, ANYONE CAN DO IT.

Nissan does this too. I leased a new Kicks when they came out and HATED it. Seats were terrible, car was underpowered, and some jackass decided to program the cvt to "shift" because Nissan got complaints that the car was stuck in gear. Just learn how a CVT works.

Anyways, 4 years later, I still get emails about monthly maintenance work, tow alarms, and tracking updates. I never asked for them to begin with and I guess I'm stuck with it as a VW guy now.

Meldt het bij tweakers, die willen er vast een artikeltje overschrijven

. I can lock and unlock the car.

Keep it locked once the passenger is out. Maybe then they care.