A security researcher has discovered a way to hack digital license plates, allowing drivers to change their plate numbers at will and potentially frame others for traffic violations.
Josep Rodriguez from IOActive security firm revealed a technique to "jailbreak" digital license plates manufactured by Reviver, the leading U.S. vendor with 65,000 plates sold. The hack involves removing a sticker and connecting a cable to internal connectors, allowing the researcher to rewrite the plate's firmware within minutes.
Once compromised, the digital plate can receive commands via Bluetooth to display any characters or images. This vulnerability could enable drivers to evade tolls, speeding tickets, parking fines, and police surveillance systems.
The security flaw poses an even greater risk as hackers could potentially display someone else's legitimate plate number, causing the innocent party to receive tickets and toll charges for violations they didn't commit.
According to Rodriguez, the vulnerability exists at the hardware level in Reviver's chips, meaning it cannot be fixed with a software update. The company would need to physically replace chips in all affected plates to address the issue.
Reviver responded that tampering with plates would be illegal and emphasized that the hack requires physical access to the vehicle and plate. However, Rodriguez argues that while his initial research required sophisticated techniques, the resulting jailbreak tool is relatively simple to use.
The hack could also allow drivers to bypass Reviver's $29.99 monthly subscription fee while still accessing premium features like GPS tracking.
Digital license plates are currently legal in California, Arizona, and Michigan, with more states considering adoption. Security experts warn that transportation authorities and law enforcement agencies should recognize the potential for manipulation as these plates become more widespread.
While Reviver plans to redesign future plates to prevent such vulnerabilities, thousands of existing plates remain susceptible to this security flaw, raising concerns about the reliability of digital license plates for law enforcement and traffic management systems.