Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I also hacked my car

goncalomb.com

Post reply on HN
Print view View original

61–70 of 93 posts

Re: I also hacked my car

#61

Post by goncalomb »

fmntf wrote: post #6

Good job! DLT logs are pretty standard in the infotainment industry, the format specification is openly available. I recommend you to download DLTViewer from GitHub and open the log files (if they are not encrypted). You may find good stuff there!

Author here. Yes, there is some good stuff in the logs, I found the Wi-Fi password there, that was useful. At the time I used some VSCode plugin to read the .dlt files (they are not encrypted), but later I did find that dlt-viewer on COVESA's GitHub.

Re: I also hacked my car

#62

Post by goncalomb »

dn3500 wrote: post #58
goncalomb wrote: post #2

First time posting here on HN, I hope you find my latest hacking adventure interesting. Inspired by another post here on HN: https://news.ycombinator.com/item?id=32447650

Could you have used ssh? It might have been as easy as using nftp to upload a new /root/.ssh/authorized_keys file. Or not, depending on how they have ssh configured.

Author here. I talk a little bit about SSH in the end, if I was successful in breaking the root password and if sshd is configured for root access (I'm not sure), I could have just used that. Otherwise, for me to change authorized_keys or some other file to run some code as root, it's the same work.

Re: I also hacked my car

#64

Post by seagulls »

pvaldes wrote: post #24

And then you move the car to the maker for a simple maintenance task and, surprise bill.

Complete nonsense. The fact I disabled OnStar on my vehicles, for example, is an interesting point of conversation only when I bring them in for an oil change. They happily show me the diagnostic codes it produces and could not care less about it, nor could I.

Re: I also hacked my car

#65

Post by 2rsf »

speedgoose wrote: post #14
bloomingeek wrote: post #7

Awesome post! When will we be able to operate our car without it spying on us? Will we eventually be able to turn off the "phoning home" function/part?

Remember to remove the TPMS sensors from your wheels. They broadcast unique identifiers wherever you drive.

Some newer cars use the ABS sensors instead for TPMS sensors, one less privacy concern to worry about

Re: I also hacked my car

#66

Post by 2rsf »

numpad0 wrote: post #51

Note that this is just for the infotainment head unit, sort of your wall thermostat, not the "entire car". A car is like a lunchbox, there is in fact no "core".

True, but the "infotainment" might still control quite a lot of things besides playing music

Re: I also hacked my car

#67

Post by NotSammyHagar »

OptCohTomo wrote: post #63

A little off-topic, but https://www.scanmytesla.com/ is a great automotive hack. Here is some data I collected with it: https://bartev.org/ and some data from a drag race with my Model 3: https://bartev.org/tesla-drag-race/

That was really interesting, using so much more energy (16x) than usual. They've really tuned their power delivery to deliver good range so we don't constantly race around. And a tesla still has that great instant torque even with that.

Re: I also hacked my car

#68

Post by goncalomb »

fragmede wrote: post #22

That's awesome. USB Gadget mode has always been a favorite of mine because you can do cool stuff by pretending to be a device like that.

Author here. Yes, gadget mode is nice. I was kind of lucky that the serial port "function" worked (not without that small kernel patch). But if they had implemented AOA properly on the head unit, it wouldn't be so easy (they allow a device already in AOA mode, without the "handshake"). I would have to write more kernel code or use Google's "accessory" gadget implementation.

Re: I also hacked my car

#69

Post by [deleted] »

Slurpuff wrote: post #8
bloomingeek wrote: post #7

Awesome post! When will we be able to operate our car without it spying on us? Will we eventually be able to turn off the "phoning home" function/part?

The hard part about this nobody is willing to experiment with their $30k+ vehicle and risk bricking it. If you want a car that doesn’t spy on you you’re gonna have to look back a decade or so.

[deleted]

Re: I also hacked my car

#70

Post by ryukoposting »

sircastor wrote: post #15
gambiting wrote: post #10

Earlier quoted context omitted.

Don't all cars have this? I've driven lots of different cars from all kinds of manufacturers and they all have Bluetooth lag, sucks if you want to watch YouTube just sitting in the car waiting for something.

I blame this on crappy drivers. A lot of modern Infotainment systems are running Linux of some variety, and the very easiest thing to do to get technology support is to grab the open source proof-of-concept Bluetooth driver, plug it in, and call it good.

As a firmware developer who has also done client-side Bluetooth development on Android, iOS, Windows, and Linux, I can tell you with 100% confidence that this just isn't the case. BlueZ is the best Bluetooth driver on any major platform, and it's not even close. The Windows one crashes constantly, and the iOS one has arbitrary nonstandard limitations and it tries to be clever by initiating pairing when you don't tell it to. BlueZ is the only one that actually implements the by-the-book Bluetooth spec, and does it without randomly exploding.
Post reply on HN