A well-known security researcher, Jane Manchun Wong, has uncovered a hidden feature in the Waymo app that enabled her to display custom characters on the robotaxi's top display, also known as the "dome". Wong's discovery has raised concerns about the potential security implications of such a vulnerability.

Wong posted an image on social media platform X, showcasing the modified dome display with her handle, other strings of characters, and even emojis. She claimed to have achieved this by "messing around" with the Waymo mobile app on her Android phone while waiting for the robotaxi to arrive. Wong's hack did not involve "jailbreaking" or "rooting" the car itself, but rather exploiting a weakness in the app's input validation.

Waymo has since confirmed that Wong found an unreleased feature and has taken steps to restrict access to the dome display features for regular users. A company spokesperson, Sandy Karp, attributed Wong's discovery to her advanced Android knowledge and emphasized that the feature was never intended for public use.

The dome display is an essential component of Waymo's self-driving Jaguar I-Pace vehicles, serving multiple purposes such as identifying the vehicle, communicating with pedestrians and cyclists, and even displaying marketing messages. In 2020, Waymo announced the addition of moving LEDs to the dome to enhance its functionality.

Wong's discovery and subsequent update, in which she reported being unable to modify the Car ID anymore, suggest that Waymo has taken swift action to address the vulnerability. However, the incident highlights the importance of rigorous testing and validation of software features, particularly in the context of autonomous vehicles where security and reliability are paramount.

The incident also underscores the value of responsible disclosure and collaboration between security researchers and technology companies. Wong's actions, although playful in nature, have ultimately contributed to the improvement of Waymo's app security.

As the autonomous vehicle industry continues to evolve, incidents like this serve as a reminder of the need for ongoing vigilance and cooperation to ensure the safety and security of these complex systems.