The IMDEA Networks research group, together with academic and government partners, has published a new paper on a long-standing problem (e.g. 1, 2, 3, and 4) in vehicle security and privacy: TPMS wheel sensors still tend to broadcast tyre telemetry over the air in clear text and include identifiers that remain stable for long periods. The paper’s central claim is not that this is a new weakness...
Global CSMS Certifications — The After-Effects of Korea
English version: The after-effects of the CSMS certification required for market access in Korea, based on UN R155, are multifaceted. They do not play out in isolation within individual OEMs; they have also become a topic in the discussions around amending a free trade agreement (FTA) between the European Union and Korea. How are the two connected? From the perspective of the OEMs that, over...
Geopolitical Risks in Automotive Security
English Version: Connected vehicles are a near-perfect illustration of how readily Europe can default to a familiar policy pattern: define technical minimum standards, mandate processes, audit artefacts, and assume that “cybersecurity” has thereby been dealt with. In the automotive context, this approach is well institutionalised in Europe, above all through UN Regulation No. 155, with its CSMS...
EU-Roadworthiness-Reform: Die politische Instrumentalisierung von PTI und RSI
Mit der Reform des europäischen Roadworthiness Package wird ein altes Prüfregime in eine neue Welt gezwungen. Periodische technische Inspektionen (PTI) und Roadside Inspections (RSI) sollen nicht mehr nur mechanische Zustände, sichtbare Mängel und klassische OBD-Artefakte abklopfen, sondern zunehmend das prüfen, was moderne Fahrzeuge tatsächlich steuert: elektronische Sicherheitssysteme. In...
Chloe Mayo from Synquery on knowledge harvesting
Hey Chloe Mayo, Head of Strategy & Ops at Synquery, I assumed that ignoring your repeated “Strategic Consulting Opportunity” emails to my private account would be a sufficiently clear signal to anyone with even modest social and cognitive skills: I have zero interest in engaging with you or your company. Since that message apparently didn’t make it from your inbox to basic inference, here it...