[ihsw]

Way to go with the "think of the children" rhetoric. Who's to say that criminals and malicious governments alike don't already have these codes? Obviously the codes need to be disabled, so why not speed up the process?

Personally I feel that an outright ban is unacceptable, however a six month delay is reasonable.

In fact the scientist may have been sitting on this information for quite some time now, and Volkswagen et al have probably already been notified but they refuse to fix it (be it laziness/stupidity, it's outright negligence). My point is we don't know anything except that there's a vulnerability.

Car cyber-security has been in the news recently, and the reports indicate that cars represent a massive attack surface that is very poorly protected. Automobile manufacturers need a swift kick in the ass now more than ever.

[aneth4]

Who's to say malicious people DON'T already have the codes? Clearly Volkswagen and the court believe they do not.

I agree that a perpetual ban is not acceptable in this case. Industry should have to fix the situation and the keys should not be predictable from this hardware.