The loophole could mean thieves who exploit the
bugs gain time to break into and steal a vehicle.
The vulnerability can also be used to fiddle with
some of the car's settings and drain its battery.
Mitsubishi recommended that users turn off the wi-
fi while it investigates the issues with the system.
Helping thieves
Security expert Ken Munro said the investigation
started when he was waiting to collect his children
from school and noticed an unusual wi-fi access
point pop up on a list on his smartphone.
He realised it was on a nearby Mitsubishi Outlander
that belonged to a friend who then showed him the
associated app and how it could be used to control
some aspects of the vehicle.
"I got playing with it and soon realised it was
vulnerable so I stopped," he told the BBC.
Mr Munro then bought an Outlander and set about
investigating how the car's owner communicates
with their vehicle via the app.
Many other car makers use a web-based service
that supports apps for connected cars so owners
can lock them remotely or otherwise control them.
Typically, commands sent to a car pass through
these servers before being sent to the car over the
mobile network.
By contrast, Mitsubishi has decided to only let apps
talk to cars via the onboard wi-fi. Unfortunately,
said Mr Munro, there were serious shortcomings
with the way the wi-fi has been set up.
To begin with, said Mr Munro, the format for the
name of the access point on the car is very distinct.
This has led to the location of many Mitsubishi
hybrids being logged on websites that gather the
names of access points.
"Some were spotted while driving and others when
parked at their owner's house," wrote Mr Munro in
a blog outlining his findings. "A thief or hacker can
therefore easily locate a car that is of interest to
them."
Short-term fix
Although Mr Munro owned the vehicle, he and his
colleagues at Pen Test Partners security firm
carried out their investigation as if they had no
special access to it. This involved using well-known
techniques that let the researchers interpose
themselves between car and owner and watch data
as it flowed between the two.
The team used this access to replay commands
sent to an Outlander allowing them to flash the
lights, tweak its charging settings and drain the
battery.
Mr Munro said he was "shocked" to find out that he
could also turn off the car alarm via this replay
attack.
A thief who is sure the alarm could not go off would
have plenty of time to use other techniques to
unlock a car and gain entry, he said.
A history of car hacking
The Mitsubishi Outlander is the latest in a series of
cars that have been found wanting when it comes to
security.
Chrysler's 2014 Jeep Cherokee, the Tesla Model S
and the Nissan Leaf have all been shown to be
vulnerable to hack attacks of different degrees of
severity.
The most startling was the attack staged on the
Jeep which allowed the researchers to take control
of the vehicle remotely. The discovery led to 1.4
million vehicles being recalled for a software
update.
Security researchers fear that the more cars get
connected to phones and the web, the more holes
will be found.
But car makers are always playing catch-up when
it comes to security as it takes far longer to develop
a vehicle than it does to find, expose and share the
flaws in their onboard computer systems.
"Once unlocked, there is potential for many more
attacks," he said. "The on-board diagnostics port is
accessible once the door is unlocked."
Access to the diagnostics port could allow thieves
to connect customised hardware that would let them
start the car, suggested Mr Munro.
A demonstration of the problems with the on-board
wi-fi was given to Mitsubishi in the UK on 3 June
where the bugs were shown to still work on the
latest version of the app.
Mr Munro said he had been impressed by the
cooperation he had received from Mitsubishi in
exploring the bugs and seeking ways to fix them.
In a statement, Mitsubishi said: "This hacking is a
first for us as no other has been reported anywhere
else in the world."
It said it "took the matter seriously" and was keen
to get Mr Munro talking to its engineers in Japan to
understand what he found and how it could be
remedied.
It added that although the bugs were "obviously
disturbing" the hack only affected the car's app and
would give an attacker limited access to the
vehicle's systems.
"It should be noted that without the remote control
device, the car cannot be started and driven away,"
it said.
While Mitsubishi investigated it recommended that
owners deactivate their onboard wi-fi via the
"cancel VIN Registration" option on the app or by
using the remote app cancellation procedure.
A longer-term fix would require some action from
Mitsubishi, said Mr Munro.
"New firmware should be deployed urgently to fix
this problem properly, so the mobile app can still be
used," he said.
Pages
FEATURED POST
HUGS AND THEIR MEANING YOU NEED TO KNOW IN THE WOMAN’S WORLD
DIFFERENT TYPES OF HUG WOMEN DO AND THEIR MEANING HUG INTRODUCTION : You might never understand some ways women express their feel...
The alarm on Mitsubishi's Outlander hybrid car can be turned off via security bugs in its on-board wi-fi, researchers have found.
Quotes
The way to get started is to quit talking and begin
doing.
In order to succeed, we must first believe that we
can.
I'd rather attempt to do something great and fail
than to attempt to do nothing and succeed.
Failure will never overtake me if my determination
to succeed is strong enough.
Credits: Scholars
If you want to get what everyone is getting, do whateveryone is doing.
 |
| Think big |
10 big problems that need your attention
 |
| 10 big problems that need your attention |
Close up photos of the little boy who fell into the Gorilla pen...see the cut on his forehead
This is the 4 year old boy, Isaiah Dickerson, who
fell into a Gorilla enclosure last month, leaving zoo
officials no other choice but to kill the Gorilla. The
only injury he sustained from his near-death
experience is a cut on his forehead. He's pictured
above as he left his family home in Cincinnation
June 1st.
Last week, his mum Michelle Gregg was picked up
by police and taken to a police station for one and
a half hours of questioning. She was later released.
Pre-School teacher's body found in pond with cement tied to her legs
24-year-old pre-kindergarten teacher, Ryan
Benjamin (pictured left with her boyfriend) was
found dead on Friday June 4th. The body of the
certified teacher who taught at Warwick Childcare
in Pottstown, was dumped into a Chester County,
Pennsylvania, pond and she had a cinder block
tied to her leg. This was done to make her body
sink...
Police say there were “no signs of obvious
trauma, gun shot, stabbings, blunt force” to her
body when she was found. They also said they do
not have a suspect yet.
Leicester City plead for Jamie Vardy to stay one more year as Arsenal close in on £20m deal
Over the weekend news leaked that Arsenal had
submitted a £20 million offer for Jamie Vardy with
Premier League winning sensation team Leicester
City, a figure that matched the attacker’s exit
clause in his contract.
Leicester City are powerless at the moment to
keep Jamie Vardy as his release clause has been
activated by Arsenal. They have pleaded with his
agent and the player to reconsider staying with
Leicester for one more season.
Arsenal has offered Vardy a four year contract and
he's supposed to tell Leicester today if he will take
up Arsenal's offer or not.
The Foxes must now decide whether to match
Arsenal’s contract offer, which is in excess of
£100,000-a-week
“I have been told that Jamie wants to join us and
it's very good news for us - I think we can be
complimentary,” said Giroud to the BBC. "He's a
fantastic player, so it's good news for us."
Asked if Vardy’s arrival would mean a change in
formation from Wenger's usual 4-2-3-1 system,
Giroud joked: "Obviously 4-4-2. As I said in the
past I am happy with competition. We have always
had fantastic strikers at Arsenal and I want the
best for this club. Hopefully he is going to help us
win this title.
Cultists allegedly murder Youth Corper serving in Bayelsa (photos)
James Onuh, a civil engineering graduate of
University of Agriculture, Makurdi, Benue State
and a National Youth Service Corps member
serving with Bayelsa State Ministry of Works, was
killed by unknown gunmen alleged to be cultists in
Obele, Yenagoa.
The Gunmen allegedly attacked James close to his
place of residence and shot him. He was rushed to
the Federal Medical Centre, Yenagoa, where he
passed away.
The state Police Public Relations Officer, Asinim
Butswat, confirmed the incident, saying, 'We are
trailing the suspects and investigation is ongoing.'
Has Skin-Lightening Tarnished Your Skin?
If your answer is yes, you’re probably wondering
why. What went wrong? Is your cream bad? Or is
skin-lightening just not for you?Many people go
into skin-lightening without taking time to learn the
best ways to achieve flawless results. That’s why
you go about it, hoping to achieve Rihanna type
results, and come out looking like orangutan!
You need to understand skin lightening and how
skin lightening creams work. Most skin-lightening
creams do not co-operate well with the sun, so
when applied during the day, the creams will
create a counter effect on your skin, in reaction to
the sun!
Considering factors such as what time of day you
apply your skin-lightening cream, the quality of
creams you use, and the amount of SPF contained,
will go a long way in helping you achieve the
flawless fair skin that you desire!
So is your skin-lightening cream making you
dark? Are you developing unsightly spots? Don’t
give up yet. You only need to readjust your routine!
You’ll enjoy perfect results when you learn to
lighten your skin the right way.
Mecran Cosmetics is here to help and here to stay!
Expect new skin-lightening solutions that will
eliminate all the above factors! Spotless
transformation is within your reach!
'Messi is a good player, but C.Ronaldo will win the Ballon D'or this year' - Former footballer Roberto Carlos says
Former Real Madrid and Brazil defender Roberto
Carlos has voiced his opinion on who he thinks will
win the 2016 Ballon D'or award- and it's no other
person but Cristiano Ronaldo.
Cristiano Ronaldo helped Real Madrid win the
UEFA Champions League this season and Carlos
feels it's enough to surpass Lionel Messi and Luis
Suarez who won the Spanish League and Copa Del
Rey for this year's Ballon D'or Award.
"Cristiano Ronaldo will win the Ballon D'Or,
even if he doesn't win the Euros," he said
after the Corazon Classic Match at the
Santiago Bernabeu on Sunday. "Messi is a
good player, but winning the Champions
League counts for a lot," Carlos said. "The
best player in the world decided the
competition. I think he'll be the best in the
world again." Carlos also expects Neymar
to win the FIFA Ballon d'Or one day. "He
must keep doing what he's doing and he'll
be the best someday," the former Real
left-back said.
Beautiful photos of new Miss USA 2016 - Deshauna Barber
Miss District of Columbia & now Miss USA 2016,
Deshauna Barber is a 26-year-old IT analyst,
Army officer and a graduate of Virginia State
University with a degree in business
management.
She works as an IT analyst for the U.S.
Department of Commerce in Washington D.C. as
well as a Logistics Commander for the 988th
Quartermaster Detachment Unit at Fort Meade,
Maryland. Her entire family also served in the
army
Cristiano Ronaldo pictured with his mum and son
The Portugal captain uploaded a photo of him, his
mum and his son on his IG page. Cute family!
amson Siasia's led Olympic team beat Honduras 3-1 in Korea's Suwon Tourney
The Dream Team led by coach Samson Siasia
have finally won a game at the Suwon Invitational
Tournament ahead of Rio 2016 Olympics as they
came from behind to defeat Honduras 3 – 1.
Honduras' Alber Elis scored in the 17th minute for
Honduras and the team entered halftime holding a
lead over Nigeria.
After much persistence, Captain Azubuike
Okechukwu equalized for Nigeria in the 61st
minute. before Godwin Saviour scored a
magnificent goal by lobbing the goalie from the
center of the pitch to make it 2-1.
Saturday, later scored probably the best goal of
the tournament as he beat goalkeeper Fonseca in
goal from the center of the pitch to make it 3-1.
Samson Siasia will be happy with this result after
losing 1 – 0 to South Korea in their tournament
opener and then 6 – 2 to Denmark.
Learn how to make Creams, body butters, soaps, body wash , body oils e.tc
Kaira Beauty line over the years has become a
household brand name well known for effective
and result oriented skin care products.
Kaira beauty line also supply organic skin care
ingredients for making creams, soaps , body oils
to cream and soap makers in various
measurements . Some of the skin care
ingredients available are :
Glutathione powder 50g
Kojie San Soaps, Glutathione soaps
Glutathione whitening pills
Alpha arbutin powder
Filipino powder with solutions( for half caste
creams)
Beeswax, Ewax , stearic acid
Borax
Cream bases
Vitamin A
Grape Seed Oil , Argan oil , jojoba oil
Lemon Oil ,carrot oil
Castle soap
Sweet almond Oil
Avocado oil, Tea tree oil, vit E oil
Sandalwood powder
*Mango Butter, cocoa butter
Kojic acid
Nicinamide , licorice
Snow white powder
Whitening glycerin
Turmeric powder
Lactic acid ,Glycolic acid
Different Fragrances
Germal plus
Due to numerous demands, Kaira beauty line
presents its annual skincare training workshop.
The workshop is set to hold in 5 states in Nigeria;
Lagos, Abuja, P.H, Asaba, Benin.
The training is aimed at creating knowledgeable
and capable skin care consultants and product
makers. Students get to learn how to make from
scratch organic products, whitening products and
skin treatment products using FDA approved
components.
It doesn't just stop there , students will also be
taught how to create their very own brand , how to
package their products,strategical marketing
points for distributing products and generating a
healthy costumer base.
Products to be learned include :
- Body butters
-Face cleansers
-Face toners
- Body wash
-Black soap
- Body scub
-Cream base
-moisturizing lotions
-Snow White cream
- Half cast cream
-Egyptian white cream
-Lightening oil
-white spots skin treatment
-vaginal tightening wash
-stretch mark control cream
Training fee costs N50,000 ( fee covers training,
lunch, certificate and take home products)
Location and Dates for the workshop:
Lagos - Saturday 11th June & Sunday 12th June
2016
Abuja-Saturday 18th June & Sunday 19th June
2016
P.H - 25th June & 26th June 2016
Benin - 2nd July & 3rd July 2016
Asaba-9th July & 10th July 2016
To register call : 08081499416
To order for ingredients call/ what's app :
08081499416.
England players sharp in suits as they leave for France
England players certainly looked the part at they
were pictured boarding the team flight to France.
The players showed off their gentleman side in
navy blue suits by indigenous tailor, Marks and
Spencer's.
Raymond Dokpesi reportedly escapes assassination attempt, police detail shot dead (photo)
Chairman of Daar communications, owners of AIT
and RayPower, Raymond Dokpesi, escaped an
assassination attempt on his life on Saturday night
June 4th.
According to The signal, Dokpesi's wife, Tosin
complained of stomach ache and was taken to the
Child Care and Awareness Clinic at Wuse 2 Abuja,
when the armed men accosted her car, asked for
Raymond Dokpesi before killing his police security
named Sergeant Den Gaius of the FCT Police
Command.
Details made available from Dokpesi's office to The
Signal says;
“The Managing Director of Africa Independent
Television, Dr Mrs Oluwatosin Dokpesi who had
arrived from Lagos complained of serious stomach
cramps and was rushed to the Child Care and
Awareness hospital in Wuse 2. She was
accompanied by her cousin Ms Abolore Sode and
an aide, Ms Aisha Adamu. They were escorted by
the deceased sergeant.
They were trailed by the Honda Accord and as soon
as Mrs Dokpesi alighted from the car and entered
the hospital, the assailants attacked them. They
were asking the driver and sergeant about Mrs
Dokpesi’s whereabouts. They collected the handset
of the driver and shot the sergeant thrice and made
away with the AK47 of the sergeant. They did not go
with the Prado vehicle No APP 577DK nor did they
collect any items. The driver said that the assailants
said in Hausa that “He is not there. Bastard! We will
still get him”. They shot thrice at the sergeant and
sped off. He died on the spot.”
Rapid Response Squad nabs cable thief in Lagos
52 days after the commissioning of Light Up Lagos
Project by Governor Akinwunmi Ambode, at the
Old Toll Gate end of Lagos-Abeokuta Expressway,
the operatives of the Rapid Response Squad (RRS)
of Lagos State Police Command, over the
weekend, arrested a vandal digging up the
armoured cable and removing its silver protector
in Ojota area of the state.
The suspected cable thief, Obaji Christopher, 23,
from Benue State, was caught red-handed by RRS
operatives who were on routine surveillance of
Ojota loop, inward Ketu – Alapere Road at about
11:20 a.m. while pulling out the cable from the
ground.
Obaji, who explained to interrogators that he just
got to Lagos two weeks ago, was seen with an
accomplice still at large, digging up the armoured
cable with hoe and removing its silver protector
before he was arrested.
One of the RRS men who arrested the suspect
(who spoke on condition of anonymity) explained,
"early on Saturday morning, during our
daily patrol routine, we saw the suspect
where he was vandalizing the armoured
cable meant to electrify Lagos at a very
unsuspicious corner in Ojota.
"The cable was buried after it was laid. We
saw him and his accomplice digging up the
cable. He was using hoes to bring the
cable to the surface, while his friend had
on him a broken saw used in cutting some
part in the cable. He was unable to take to
his heels because we had already
surrounded the whole area," he said.
Upon his arrival at the RRS Headquarters, the
suspect confessed to the crime, saying that
poverty led him into the act. In his confessional
statement, the suspect said, "I just arrived Lagos
about two weeks ago. When I had nowhere to
sleep, I started sleeping inside Ojota park. It was
at this park that I met one guy, simply identified as
Anago, who introduced me to this job.
The suspect explained further,
"Anago told me that if I was able to go for
two to three operations, I will have enough
money to take care of my present
predicament. On this very day, we went
together to Ojota for the operation. When
we got there, both of us dug the ground
where the cable was buried".
He added:
"We had successfully pulled it out. But to
my greatest surprise, I didn't know how
my friend escaped from the scene. When I
was about to be parking the cable into a
sack, I saw Policemen appeared. At this
point, I didn't know what to do again. That
was how I got apprehended in the act".
The RRS operatives further conducted thorough
surveillance checks around the motor park as part
of efforts to arrest his accomplice, Anago, but
proved abortive as the suspect could not provide
reasonable address of the fleeing assistant, saying
that they met at the motor park where they both
sleep every night.
RRS monitors who have kept a close watch on
Light Up Lagos Project’s facilities in the area and
Ogudu stretch, including armoured cable,
observed that vandals were tampering with the
facilities, thereby necessitating their close
monitoring of the area.
It was learnt that the Commander of RRS directed
all officers to always check out the Light Up Lagos
Project in order to protect and prevent vandals
from destroying the Government’s facilities within
the metropolis.
It could be recalled that RRS on Saturday, April 2,
2016, arrested a similar cable thief, Lucky
Udeagwu, for stealing a 35-meter-long armoured
cable meant for the State Government’s Light Up
Lagos’ project in Ogudu.
While confirming the arrest, Lagos State Police
Public Relations Officer (PPRO), Superintendent of
Police, SP Dolapo Badmus, said that the state
would not tolerate vandalism and sabotage of
Governments' efforts.
The suspect has been transferred to SARS's
office in Ikeja
Chris Brown tattoos daughter's face on his back
Chris Brown is working on a tattoo of his daughter,
Royalty's face on his back. He shared the photo
and wrote: 'Not finished but we working
Kim Kardashian steps out in sexy dress to celebrate Kanye's birthday in New York
Kim Kardashian stepped out in this sexy number to
celebrate her husband- Kanye West' birthday on
Sunday. He was alos supposed to perform at the
Governor's Ball but the event was cancelled due
to bad weather. Kim expressed her disappointment
about the cancellation on Snapchat but Kanye
went ahead and performed at Hot 97's Summer
Jam with other Summer Jam performers including
Big Sean, A$AP Rocky, DJ Khaled, A$AP Ferg,
Young Thug, Future, Travis Scott, and Pusha T.
Due to the canceled event, Kanye, Kim and their
daughter North were all seen heading to The Lion
King on Broadway. North was seen laughing and
squealing after the show which seemed like she
enjoyed the show.
Photo: 22-year-old student of IMT, Enugu allegedly dies after being bitten by snake in school hostel
22-year-old Faith Adamma Okonkwo died after
being bitten by a snake last week in her hostel.
According to Abia Fact Newspaper, the deceased
was until her death, a 300 level Computer Science
student of Institute of Management Technology
Enugu (IMT). She hailed from from Anaoma Village
,Amichi ,Nnewi South LGA of Anambra State.
10 Habits of Couples in Strong and Healthy Relationships
What makes for a healthy romantic relationship differs from couple to couple. Forming a trusting and positive partnership takes effort and time. And unfortunately, it doesn’t just happen overnight. For any relationship to grow strong and stay strong, you need to put in some work. Below are some habits that will help create and maintain a happy and healthy twosome.The Key to Happy Relationships It’s Not All About Communication
If couples were paying any attention during the past few decades, they should be able to recite the one critical ingredient for a healthy relationship —communication, but the latest study shows that other skills may be almost as important for keeping couples happy. While expressing your needs and feelings in a positive way to your significant other is a good foundation for resolving conflicts and building a healthy relationship, these skills may not be as strong a predictor of couples’ happiness as expert source thought .In an Internet-based study involving 2,201 participants referred by couples counselors,3 climbers dead, 2 missing on Mount Everest
International trekkers pass through a glacier at the
Mount Everest base camp in Nepal in February. A
Nepal official says some 30 climbers have gotten
frostbite or become sick on Mount Everest, in
addition to three who died in recent days on the
world's highest mountain. (Tashi Sherpak,
KATHMANDU, Nepal — The dangers of scaling
Mount Everest again have been made clear as three
climbers have died over the past three days and
two are missing, reports say.
According to CNN, Phurba Sherpa, 25, fell to his
death on Thursday while working to fix a route just
150 meters from the summit. Eric Arnold, 36, of the
Netherlands died Friday night of a suspected heart
attack or altitude sickness. Arnold had reached the
summit and was heading back down the mountain.
Maria Strydom, 34, of Australia, began suffering
altitude sickness and died Saturday before she
could be rescued. Strydom had reached camp IV,
the final camp before the summit.
According to the Sydney Morning Herald, altitude
sickness can occur when a person goes to extreme
heights too quickly and oxygen fails to reach the
body's tissues. Severe symptoms include coughing,
breathlessness, irrational behavior, inability to walk
straight or sit up, hallucinations and frothy, blood-
tinged spit caused by lung damage.
The two missing climbers, Paresh Nath and Goutam
Ghosh, were last seen Saturday near the summit,
known as the "death zone," the Associated Press
reports .
Nearly 400 climbers have reached the 29,035-foot
summit since May 11 thanks to favorable weather.
But even with good weather, the mountain remains
very dangerous. The BBC reports 30 climbers have
suffered frostbite or become ill.
Climbing of Everest resumed this year after two
years off because of a major earthquake in 2015
and an avalanche that killed 16 sherpas in 2014.
Thousands of people have reached the top of
Everest since New Zealander Edmund Hillary and
Sherpa Tenzing Norgay first did it in 1953, but more
than 250 people have died trying.
Crocodile drags away Australian woman; official blames 'human stupidity'
A saltwater crocodile reportedly dragged away a
woman as she swam at a beach Sunday night in the
Queensland state of Australia.
QUEENSLAND, Australia — A woman on a trip to
celebrate the end of her friend's cancer treatment
was dragged away by a saltwater crocodile as the
women swam at a beach Sunday night.
The BBC reports Cindy Waldron, 46, was with friend
Leeann Mitchell, 47, at Thornton Beach near Cairns
when the attack occurred at about 10:30 p.m. The
women were in waist-deep water.
Witnesses reportedly heard Waldron scream, "A
croc's got me, a croc's got me!"
Mitchell tried to pull Waldron away from the
crocodile but was unsuccessful. Waldon has not
been seen since.
Warren Entsch, an official with the North
Queensland MP, says the victim is at fault for the
attack, according to inquisitr.com.
The area where the women were swimming was
near a creek that offers crocodile-spotting tours,
Entsch says.
"You can't legislate against human stupidity,"
Entsch says. "This is a tragedy but it was avoidable.
You can only get there by ferry and there are signs
there saying watch out for the bloody crocodiles. If
you go in swimming at 10 o'clock at night, you're
going to get consumed."
On average, two people per year are killed by
crocodiles in Australia.
President Buhari to proceed on a 10 days vacation to London..to see an ENT specialist..
A press statement has been released by the
Presidency concerning a 10-day vacation President
Buhari is about to undertake, to enable him to rest
and also see an E.N.T (Ear. Nose. Throat) Specialist
in London. The statement reads,
President Muhammadu Buhari will take 10 days off
and travel to London on Monday June 6th to rest.
During the holiday, he will see an E.N.T. specialist
for a persistent ear infection. The President was
examined by his Personal Physician and an E.N.T
Specialist in Abuja and was treated. Both Nigerian
doctors recommended further evaluation purely as
a precaution.
