undefined | Better HN

0 pointsaftbit2y ago0 comments

I'm pretty sure they are all dumb enough for this. This is why people can steal (modern) cars by ripping a headlight out and accessing the CAN bus through the gap.

https://kentindell.github.io/2023/04/03/can-injection/

AIUI the military uses "CAN bus firewalls" to prevent this. There is also some sort of encrypted/authenticated CAN bus protocol in the works. Neither are common in production cars as of 2022 or so, though they may be soon enough.

0 comments

lttlrck2y ago

Encrypted/authenticated CAN sounds like "Apple component pairing coming to car near you". No thanks.

aftbitOP2y ago

Honestly we need a law that says that _all_ keys used in your car (software and physical) need to be given to you. This should include the keys to sign the updates, manage the CAN networks, etc.

Even ignoring the automaker lobby's inevitable opposition, this would never happen because one could use it to defeat things like emissions controls or the coming anti-impairment technology[1].

1: https://apnews.com/article/coronavirus-pandemic-joe-biden-te...

j / k navigate · click thread line to collapse