One of the reasons I pulled my OnStar module from my GM Vehicle... Lack of authentication in the GMLAN CAN network. Not a big deal for an isolated system (well, almost isolated, there's still the FM radio) but "isolated enough" to mitigate casual attacks.