Earlier quoted context omitted.
Not our jurisdiction, and what could car manufacturers do?
Address the problem at the EU level because both Sweden and the Baltics are in it. This what the EU is for. But obviously it is much convenient to solve this the "Apple" way and claim that there was no other way...
Hacking a VW Golf Power Steering ECU
61–70 of 174 posts
Re: Hacking a VW Golf Power Steering ECU
#62Earlier quoted context omitted.
With EPAS your steering wheel still physically steers the wheel via the rack and pinion gears. With ABS and ESC, most cars on the road today have a computer involved in the braking system. It seems pretty safe.
> With ABS and ESC, most cars on the road today have a computer involved in the braking system. It seems pretty safe. Absolutely. These systems have very simple feedback loops and controller algorithms. Determining that you lost traction is a simple problem to solve. Determining that a dangerous obstruction is in front of your vehicle is not. ABS/ESC also tend to have a more limited impact on the vehicle, even if the…
> Putting a computer between my foot/hands and the physics unfolding in front of me is a total non-starter.
Which ABS does, there's literally a computer in between your inputs and the 'physics'. So which is it? There was a time when ABS was not considered a simple problem. They had to invent it for the Concorde.
> You can typically disable these pretty easily (pull fuse/drive system configure).
If they did catastrophically malfunction, you wouldn't have time to pull fuses.
Re: Hacking a VW Golf Power Steering ECU
#63Earlier quoted context omitted.
> XOR with very large keys is how critical military encryption systems such as radios work. Cool! Do you have any references?
For example the TETRA standard for trunked radio, "The key stream bits shall be modules 2 added (XORed) with plain text bits in data, speech and control channels".
Re: Hacking a VW Golf Power Steering ECU
#64Earlier quoted context omitted.
And the only solution is lock our cars down and have no right to repair? And there is no question why something like this is happening within the EU? The union which is supposed to solve inequalities like this within its borders?
Lithuanian here. It’s not inequality when instead of a cheap hatchback you NEED to buy BMW 5-Series or Porsche Macan. But you import a damaged one from US. And then you need a bunch of „used“ parts to repair it.
Re: Hacking a VW Golf Power Steering ECU
#65Earlier quoted context omitted.
I don't think they actually send them to baltics, as those are stolen from cars here also and they probably catch a better price in Stockholm anyway. Or sent a lot further than that. The running "joke" is that insurers pay to put your original stuff back into car, as insurers somehow find "used" parts for mechanics.
The running joke is a joke indeed, we have accountability and traceability in our marvelous high-tax socialist haven, if you pay someone a significant amount it's VAT has to be tracked, parts can't just magically appear out of thin air, well maybe every now and then, but not systematically. Edit: Especially airbags, they require special certifications to be installed and managed in Sweden, second hand airbags is NOT…
There isn't any greater authority, keeping track of every car part or ensuring the number of wingmirrors leaving stock matches the number legitimately entering stock.
Re: Hacking a VW Golf Power Steering ECU
#66Earlier quoted context omitted.
Address the problem at the EU level because both Sweden and the Baltics are in it. This what the EU is for. But obviously it is much convenient to solve this the "Apple" way and claim that there was no other way...
Reintroducing border control would be a good 1st step. But gods forbid movement of „goods“ is endangered :)
Re: Hacking a VW Golf Power Steering ECU
#67Earlier quoted context omitted.
For example the TETRA standard for trunked radio, "The key stream bits shall be modules 2 added (XORed) with plain text bits in data, speech and control channels".
In the TETRA specification they use the term “key stream” to mean the output of a stream cipher, which they call a “key stream generator”. They aren’t XORing directly with a large key - the TETRA key size is 80 bits. See section 6.3.2.2 of https://www.etsi.org/deliver/etsi_en/300300_300399/30039207/...
Re: Hacking a VW Golf Power Steering ECU
#68Earlier quoted context omitted.
The running joke is a joke indeed, we have accountability and traceability in our marvelous high-tax socialist haven, if you pay someone a significant amount it's VAT has to be tracked, parts can't just magically appear out of thin air, well maybe every now and then, but not systematically. Edit: Especially airbags, they require special certifications to be installed and managed in Sweden, second hand airbags is NOT…
In my country, if your car is missing (say) a wingmirror, you can go to a 'scrap dealer' who has a yard full of written off cars, and they'll sell you a wingmirror taken off a scrapped car. There isn't any greater authority, keeping track of every car part or ensuring the number of wingmirrors leaving stock matches the number legitimately entering stock.
I'm not saying it can't happen every now and then, but it wouldn't work systematically.
Re: Hacking a VW Golf Power Steering ECU
#69Power Steering ECU... this things determines how the driving wheel makes the car turn. Safety issues must be considered.
The guy actually doing the modding and putting his butt in the seat has far more skin in the game than anyone who's second guessing him here.
I'm being half serious - this seems harmless enough, but where do you draw the line? I'm all for the fun of reverse engineering but maybe keep that shit off public roads.
Re: Hacking a VW Golf Power Steering ECU
#70Earlier quoted context omitted.
> One interesting difference and trend in automotive control modules (also mentioned in Willem's fantastic write-up) is that many EU modules started adding signature checking and encrypted updates in the late 2000s Do you mean the XOR encryption used? As someone working on the embedded linux(!= than embedded MCU) side i was very surprised to find such a crude "encryption" scheme employed. On the other hand i reckon t…
> Do you mean the XOR encryption used? As someone working on the embedded linux(!= than embedded MCU) side i was very surprised to find such a crude "encryption" scheme employed. I'm not a cryptographer - but I don't think there's anything wrong with XOR encryption, and I'm not sure why you're putting it in scare-quotes - XOR with a sufficiently large key is absolutely fine, and with a one-time pad is unbreakable. XO…
Excuse me, how do you envision the use of one-time pads in the real world?
And with sufficiently large block keys - how do you deal with data full of zeros? Because XOR of 0 will give you the exact key you have encrypted the data with.
You are not a cryptographer, and indeed, I don’t think you’ve spent enough time thinking about it.