Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Control your Hyundai car with Python

github.com

Post reply on HN
Print view View original

41–50 of 60 posts

Re: Show HN: Control your Hyundai car with Python

#41

Post by V__ »

_8j50 wrote: post #35

If you get phished or something, can attackers use this to turn off the car while driving? Or something lesd harmful like keep it on while you're at work and drain gas.

Maybe. There was a vulnerability [1] with BlueLink and that could have been an attack vector, but the article mentions:

> The attack can’t be done at scale, because the local network that the vehicle owner is using would have to be infiltrated by the attacker.

Wikipedia says BlueLink uses Bluetooth [2]. So I'm not sure what connection is actually used, but if it's Bluetooth/local wifi and there are no further security bugs, then it would be unlikely that someone else could connect to the car in the first place.

[1] https://www.tomshardware.com/news/hyundai-blue-link-vulnerab... [2] https://en.wikipedia.org/wiki/Hyundai_Blue_Link

Re: Show HN: Control your Hyundai car with Python

#43

Post by tyingq »

redeux wrote: post #38

Having looked into this myself recently, why would I use this project over bluelinky? https://github.com/Hacksore/bluelinky

I see some differences. The python one can enumerate all cars in the account, the node.js one doesn't have that....you have to specify a VIN. Python one has figured out how to enable specific seat heaters at start, node.js one says "Not sure?", etc.

Re: Show HN: Control your Hyundai car with Python

#44

Post by TedDoesntTalk »

fragmede wrote: post #31
the_biot wrote: post #29

Earlier quoted context omitted.

In every country the world over? Do you have a source for that?

I don't follow the low end car market outside the US. It's entirely possible that developing countries still have "dumb" cars available, but due to their lack of adherence to US federal safety standards, importing one night as well be impossible for a normal consumer (aka anyone short of Jay Leno). As far as a cite, here an article that claims 2006 was the tipping point, so even earlier than I remember.

I have a 2017 Hyundai Santa Fe. It has a cellular radio built-in to “phone home”. It is not a high-end car.

Re: Show HN: Control your Hyundai car with Python

#46

Post by throw457 »

blowski wrote: post #34
throw457 wrote: post #33

Hackernews: connected closed proprietary Tesla good. Also hackernews: connected open api Hyundai bad.

Hackernews: A community made up of many people with a wide variety of opinions.

Nah… if you are not lucky enough to be in a discussion early it’s just one side of the hivemind jerking it and the other side stfu because no one wants to get downvote abused :)

Re: Show HN: Control your Hyundai car with Python

#47

Post by _8j50 »

V__ wrote: post #41
_8j50 wrote: post #35

If you get phished or something, can attackers use this to turn off the car while driving? Or something lesd harmful like keep it on while you're at work and drain gas.

Maybe. There was a vulnerability [1] with BlueLink and that could have been an attack vector, but the article mentions: > The attack can’t be done at scale, because the local network that the vehicle owner is using would have to be infiltrated by the attacker. Wikipedia says BlueLink uses Bluetooth [2]. So I'm not sure what connection is actually used, but if it's Bluetooth/local wifi and there are no further securit…

Makes sense. I thought it was done over the internet when U saw login().

Re: Show HN: Control your Hyundai car with Python

#48

Post by synchronizing »

V__ wrote: post #41
_8j50 wrote: post #35

If you get phished or something, can attackers use this to turn off the car while driving? Or something lesd harmful like keep it on while you're at work and drain gas.

Maybe. There was a vulnerability [1] with BlueLink and that could have been an attack vector, but the article mentions: > The attack can’t be done at scale, because the local network that the vehicle owner is using would have to be infiltrated by the attacker. Wikipedia says BlueLink uses Bluetooth [2]. So I'm not sure what connection is actually used, but if it's Bluetooth/local wifi and there are no further securit…

I can't speak on older BlueLink cars (article is from 2017), but my 2021 Elantra has GSM built-in and the commands are sent/received through the web - no bluetooth at all.

Re: Show HN: Control your Hyundai car with Python

#49

Post by grepfru_it »

dubswithus wrote: post #26
jdmoreira wrote: post #19

I worked for a modern car rental company where you just need to download an app to drive a car. The tech was super interesting, there are vendors that sell a box with both gsm and ble interfaces and the cars are fitted with these. You can send messages through ble or their cloud api / gsm. The app needed to first acquire a token to successfully establish a ble connection. I'm not saying you can't buffer overflow thro…

Zipcar? Or do they use Bluetooth?

Zipcar was hilariously easy to bypass/override with physical access. I had access to a local Volvo for almost 3 years until I stopped checking. I never drove the car because of gps and the proliferation of cameras, but I would store random things in the trunk when I was passing by the area

Re: Show HN: Control your Hyundai car with Python

#50

Post by V__ »

synchronizing wrote: post #48
V__ wrote: post #41

Earlier quoted context omitted.

Maybe. There was a vulnerability [1] with BlueLink and that could have been an attack vector, but the article mentions: > The attack can’t be done at scale, because the local network that the vehicle owner is using would have to be infiltrated by the attacker. Wikipedia says BlueLink uses Bluetooth [2]. So I'm not sure what connection is actually used, but if it's Bluetooth/local wifi and there are no further securit…

I can't speak on older BlueLink cars (article is from 2017), but my 2021 Elantra has GSM built-in and the commands are sent/received through the web - no bluetooth at all.

That sucks. Do you know if there is an option to limit it to wifi?
Post reply on HN