Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I hacked my car

programmingwithstyle.com

Post reply on HN
Print view View original

41–50 of 142 posts

Re: I hacked my car

#41

Post by dabigjhall »

This sort of idiocy is why I removed the modem from my Niro EV: https://www.kianiroforum.com/threads/how-to-remove-head-unit...

(It is basically the same head unit, Kias/Hyundais share a lot of components.)

IMO Kia makes great cars but I don't trust them with Internet security. Android device permanently connected to the Internet with unfettered access to the CAN bus of my car....no thank you. And even if it was relatively secure today, I doubt it will get security updates for the 10+ years I expect to have the car, if at all.

I'm glad folks can now sign their own firmware to run on their own cars, but what else is vulnerable in these things?

The car is amazing otherwise, and I'm glad Kia does not seem to use the modem for any anti-features, so the car is totally fine with removing it.

Re: I hacked my car

#42

Post by zaik »

TheRealDunkirk wrote: post #34

I worry that embarrassing cases like this are going to cause global corporations to call for the ban of general purpose computers for the public. I mean, look at all they’ve done. We’re at a tipping point with the right to repair movement, but John Deere still hasn’t lost yet.

Please don't give them ideas. Software freedom is already in a bad enough state.

Re: I hacked my car

#44

Post by irogers »

twawaaay wrote: post #38

Most development at very large companies happens by hordes of people who call themselves developers but do not care about development and barely understand anything they are doing. Most coding happens by copying and pasting from Stack* and then restarting the application hundreds of times and tinkering with the code mindlessly until it happens to work. Anything besides getting the "happy path" (sic!) to work is a sec…

Fwiw, this would fail Android's Compatibility Test Suite:

https://android.googlesource.com/platform/cts/+/3ece5ae7a51d...

Re: I hacked my car

#45

Post by twawaaay »

irogers wrote: post #44
twawaaay wrote: post #38

Most development at very large companies happens by hordes of people who call themselves developers but do not care about development and barely understand anything they are doing. Most coding happens by copying and pasting from Stack* and then restarting the application hundreds of times and tinkering with the code mindlessly until it happens to work. Anything besides getting the "happy path" (sic!) to work is a sec…

Fwiw, this would fail Android's Compatibility Test Suite: https://android.googlesource.com/platform/cts/+/3ece5ae7a51d...

Not necessarily. There are various ways to conceal a listening service, for example through knocking protocol.

Re: I hacked my car

#46

Post by johannes1234321 »

devonallie wrote: post #18

>> I have to wonder if they used that linked “RSA Encryption & Decryption Example with OpenSSL in C” tutorial… Makes me feel better about my own incompetencies. But also makes me scared for the future of safety in vehicles.

Well, for security code a common mantra is "don't invent it yourself" :)

Re: I hacked my car

#47

Post by almostnormal »

Youden wrote: post #37
someweirdperson wrote: post #33

Earlier quoted context omitted.

PIDs according to J1979? The vehicle itself discloses them in the PIDs dividable by 0x20, where each bit indicates the availability of one of the next 32 PIDs. Each PID is described in great detail by SAE, too, no manufacturer specific information needed for interpretation. Anything that is not J1979 but purely manufacturer defined though, is a different story, and making that available is the main reason for the exi…

Unfortunately for EVs most of the interesting stuff isn't standardised. If it was, life would be much easier.

Sorry, I missed that point about EV, I didn't expect OBD-Ii PIDs and EV in the same sentence.

Re: I hacked my car

#49

Post by rubicon33 »

twawaaay wrote: post #38

Most development at very large companies happens by hordes of people who call themselves developers but do not care about development and barely understand anything they are doing. Most coding happens by copying and pasting from Stack* and then restarting the application hundreds of times and tinkering with the code mindlessly until it happens to work. Anything besides getting the "happy path" (sic!) to work is a sec…

How is this isolated to Asia? As a developer in the USA, I’ve seen prioritization of deadlines over quality in nearly every org I’ve worked at.

We would probably all love to hand write encryption algorithms for data transfer, or beautiful animations on user interactions, or perfectly graceful fault handling, or 100% test coverage.

The reality is that kind of work takes far longer than most employers are willing to wait. I doubt heavily that it’s the engineers love of coding that is lacking, rather the employers patience.

Re: I hacked my car

#50

Post by jpoesen »

twawaaay wrote: post #38

Most development at very large companies happens by hordes of people who call themselves developers but do not care about development and barely understand anything they are doing. Most coding happens by copying and pasting from Stack* and then restarting the application hundreds of times and tinkering with the code mindlessly until it happens to work. Anything besides getting the "happy path" (sic!) to work is a sec…

"most developers from Asia do not really expect or care about privacy"

-> You did a casual racism there, unless you can back up your claim with non-anecdotal evidence.

Post reply on HN