TPMS Flaw in Toyota, Mercedes, and Other Major Brands Enables Covert Vehicle Tracking

Research demonstrates that unencrypted, fixed identifiers emitted by TPMS sensors in many common car brands can be collected with inexpensive software-defined radios to track vehicles at city scale, reconstruct movement and parking patterns, and infer sensitive information about drivers; the study collected millions of messages from over 20,000 vehicles and calls for encrypted, rotating identifiers and regulatory action.