Live data from Hacker News

Insecure vehicles should be banned, not security tools like the Flipper Zero

saveflipper.ca

261–270 of 916 posts

Re: Insecure vehicles should be banned, not security tools like the Flipper Zero

#263

Philosophy warning: I don't know if there is a term for it, or if a philosopher/etc. has written about this phenomenon, but: a noticeable trend to me is what I'll call "the replacement of ethical expectations with specific, written down laws." Rather than expecting a human being to behave in certain ways intrinsically (i.e., normative ethics ) we tend to assume they will behave in the worst way possible, and then pas…

Ethical norms are sufficient in a homogeneous society, but the "trustless" trend has enabled collaboration with ever larger groups of people with reduced need for trust. I'm thinking blockchains, cryptography, the stock market, the concept of limited liability, and law itself.

Limited liability is more trusting than trustless.

Blockchain and crypto are great examples of the true value of trust, and the true cost of not having it - in fact, Bitcoin gives a way to measure trust in physical unit of kilowatt hours, that is the amount of energy you need to keep burning to replace trust in a system.

Re: Insecure vehicles should be banned, not security tools like the Flipper Zero

#264

Earlier quoted context omitted.

Fix the cars. A brand new $60,000 car shouldn’t be so simple to swipe. They probably spent less time stealing my neighbors car than he did waiting on the credit check to buy the car lol… it’s crazy these days with cars.

Cars are computers now. What do we know about computer security and physical access? If I can touch the machine, I can hack and own it. No level of technology will stop this. But cutting off the profit motive by making it very hard to export cars will have a massive impact on these crimes, and for old and new cars.

> No level of technology will stop this.

Tell that to the FDA.

I work in medical devices. It's no longer sufficient to throw up your hands and assume "well, they have their hands on the device, we can't stop them from doing anything." The new cybersecurity guidance anticipates an attacker having physical access to your Device and you are expected to understand and mitigate any impact that can have.

Cars shouldn't be any different.

Re: Insecure vehicles should be banned, not security tools like the Flipper Zero

#265
post #257

Earlier quoted context omitted.

USA crime is still very low compared to pretty much the entire 20th century, it seems early to proclaim certain approaches as a failure. FWIW, catalytic converter theft was recently a big problem in the US and the classic approach of getting the FBI involved, identifying the high-level fencers and arresting, was incredibly effective and cat thefts have plummeted. I suspect disrupting the organized crime in Canada wou…

It's only the case if people don't deny that the crimes exist, and Canada might suffer a bit from that lack of recognition. In France as well, if you mention that there is criminality, people will frown upon you. "No it's 100% safe country, it is a feeling of being unsafe".

I am someone you would label a ‘crime denier’ because I feel the problem is definitely smaller than in the past and it is generally overstated in the media. That is precisely why I think we should focus on organized crime and the driving clearing houses rather than individual street-level criminals.

Re: Insecure vehicles should be banned, not security tools like the Flipper Zero

#266
post #75

Earlier quoted context omitted.

Maintenance is a big key management problem though: if only the owner has it, there will be problems when people inevitably lose it. If there are shared keys for service departments or databases, thieves will get access to them. Things like time-limited on-demand keys can limit those problems but now you can’t get your car serviced when Toyota’s servers go down and they need to commit to not breaking API compatibilit…

The same problem exist for car keys. The answer is, when a person "inevitably lose[s] it", they need to pay to get their electronics refit.

The result of that may be that losing a key is financially devastating enough that it totals many vehicles. And/or if the odometer and other local storage is affected, that may cause permanent title issues for the car.

The number of people who lose their keys vastly dwarfs the number of people who are having their car stolen with a flipper zero.

Re: Insecure vehicles should be banned, not security tools like the Flipper Zero

#268

Earlier quoted context omitted.

This is done by organized crime with engineers on staff. Sure it’s drug addicts stealing cars but the people shipping them are smart and have access to capital.

I agree, but that brings us back to my original question: why can't same smart organized crime people unlock my smartphone then? Because Apple/Google give a damn about security and car manufacturers do not.

Also: When your phone or computer is hacked, most people think "Wow, the device is flawed." But when your car gets stolen, most people think "Wow, we should stop those criminals." Apple/Google are incentivized to give a damn about security because incidents reflects poorly on their products. We need to start making thefts via security exploits reflect poorly on the car manufacturers and their products.

Re: Insecure vehicles should be banned, not security tools like the Flipper Zero

#270

Earlier quoted context omitted.

That anecdote is a non sequitur, but nonetheless: I assume you didn't see the full video, where it turned out that the police assaulted the "illegals" unprovoked? https://www.thecity.nyc/2024/02/08/times-square-migrants-arr... That Fox News article is mostly information-free, but my takeaway is that it's blaming "bail reform" for the release of the people the police assaulted, which is abjectly false: they were charg…

I mean - an arrest, even if wrongful, is not the same as an assault. I don’t think I have the ability to judge what is a wrongful arrest simply from the video. This video does not really vindicate the people attacking the cops imo.

I'm going to stop responding because this thread is off topic, but this is exactly what a culture of lawlessness looks like. The police very clearly assaulted someone on camera, and you're bending over backwards to find a way to exculpate them. There's a reason the judge declined to set bail.
Post reply on HN