Scientist banned from revealing codes used to start luxury cars
High court imposes injunction on Flavio Garcia, who has cracked security system of cars including Porsches and Bentleys — A British-based computer scientist has been banned from publishing an academic paper revealing …
Context & Ripple Effects
The High Court injunction against Flavio Garcia lands four years after researchers divulged the code protecting most cellphone calls in 2009 — another case where an academic break of a widely deployed cipher collided with the companies whose products depended on it. This time the target is the immobilizer systems fitted to luxury cars including Porsches and Bentleys, and the remedy is a ban on publishing rather than a patch timeline.
The pickup across The Verge, Boing Boing and the Telegraph shows the story travelling well beyond the automotive beat, framing it as a test of whether a court can sit between a researcher and his peer reviewers.
First-order effects
- Garcia is barred from publishing the paper, leaving the vulnerability he identified undisclosed to car owners while the affected manufacturers retain private knowledge of the flaw.
- Porsche, Bentley and any other maker using the cracked security system gain time to respond, but inherit the reputational risk of having sought prior restraint instead of a fix.
Second-order effects
- Other academics working on vehicle or embedded-device security now face a chilling template: courts may suppress findings outright, pushing future disclosures toward private channels negotiated with manufacturers.
- Luxury automakers face pressure to demonstrate they are patching the underlying weakness, since an injunction delays public scrutiny without eliminating whoever else independently rediscovers the attack.
Third-order effects
- If injunctions become a standard manufacturer response, security research migrates from open publication to embargoed, company-controlled disclosure — a structural shift in how weaknesses in cars, phones and connected devices reach the public.
- The episode hardens the argument, familiar from the 2009 GSM case, that legal suppression cannot contain a cryptographic break once discovered, only delay owners' awareness of it.
The trend: Manufacturers of cipher-protected consumer products are turning to courts to control the disclosure of academic security research, repeating and extending the pattern set by the 2009 GSM cipher controversy.