Millions of California-bought cars can be hijacked via Bluetooth

UCSD researchers found that dealer-installed KARR/SWDS Bluetooth security devices used in roughly 2.2 million vehicles rely on a common secure key, allowing an attacker within a few yards to unlock doors, sound the horn, flash lights, or disable the engine; affected units often remain active even without a paid service and are not trivial to remove. KARR has released a firmware update to address the issue, and the researchers will present details at upcoming security conferences.