Digital license plates are becoming more common across various states, offering unique features like customizable displays that can show messages or indicate that a vehicle has been stolen. However, a recent discovery by a security researcher unveils a troubling flaw: the ability to hack these plates, allowing users to change their license plate numbers at will. Josep Rodriguez from a security firm demonstrated a method to manipulate digital license plates from Reviver, the leading manufacturer in the U.S. By simply removing a sticker and connecting a cable to the plate’s internal components, he could reprogram its firmware within minutes. This modified plate could then be controlled via a smartphone app, enabling users to display any message or number they choose.
Such vulnerabilities raise serious concerns regarding enforcement systems that rely on license plate identification, such as tolls and law enforcement tracking. Rodriguez warns that anyone with the hacked plate could evade penalties by altering the display to mimic another vehicle’s license plate, effectively shifting the responsibility for fines or tolls. While this exploitation could facilitate traffic violations, it also opens the door to additional risks, such as bypassing Reviver’s subscription fees for using premium features. The underlying issue stems from hardware vulnerabilities that cannot be easily patched with a software update, meaning the potential for misuse remains high unless the hardware itself is replaced.
Reviver has stated that tampering with a digital license plate constitutes a criminal offense and noted that jailbreaking requires physical access and specific skills. Nonetheless, Rodriguez disputes the claim that specialized tools are necessary. He asserts that, following a detailed reverse-engineering process to create a jailbreak tool, almost anyone could replicate the hack with minimal technical knowledge. This concern is amplified by the possibility of malicious users targeting vehicles to alter their identification without the owners’ consent.
While these digital license plates are currently legal in places like California and Arizona, with potential expansions to more states, experts like Rodriguez and another researcher, Sam Curry, are urging caution. They emphasize that authorities, manufacturers, and regulatory bodies should be vigilant about the implications of relying solely on digital license plates as identifiers. As digital registration becomes more prevalent, understanding and addressing these security flaws will be crucial in preventing misuse and ensuring the integrity of vehicle identification systems.
