Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Toyota runs a car-hacking event to boost security (2024)

toyotatimes.jp

Post reply on HN
Print view View original

61–70 of 115 posts

Re: Toyota runs a car-hacking event to boost security (2024)

#61

Post by alephnerd »

sublimefire wrote: post #37

Car companies would benefit from hiring thieves in the dark web. There were always toolkits on sale as well. So they could just investigate what is being done to steal the cars and patch it. I suppose a good bounty program would help as well as the tech savvy thieves would have a choice to get a bug bounty instead of ganging up with other criminals. Sort of divide and conquer.

Automotive Pentesting has been an industry for years [0][1][2]

[0] - https://www.praetorian.com/services/automotive-penetration-t...

[1] - https://plaxidityx.com/

[2] - https://autocrypt.io/

Re: Toyota runs a car-hacking event to boost security (2024)

#62

Post by snowwrestler »

ssl232 wrote: post #14
DecentShoes wrote: post #7

That's great, but the writing is still on the wall if Toyota doesn't get serious about electric cars. With their current trajectory Toyota is headed at 1000mph directly towards being the next Blackberry, Kodak, Nokia or Blockbuster. I say this as someone who owned a Prius for 10 years and loved it, and have also driven their hydrogen car. The BZ4X is badly named overpriced garbage, not enough and not good enough. The…

The iPhone did everything the Nokia 3310 did, better. Electric cars do not (yet) do better some things hybrids do, such as being able to be fuelled with 400+ miles of range in 5 minutes. I’m nowhere near the point of wanting an electric car to replace my hybrid. The convenience of petrol and the cost of electricity is too high. High electricity costs aren’t going to be fixed in my country any time soon so Toyota will…

The iPhone actually had way worse battery life than basically any Nokia. It’s a great comparison. People happily traded more features for having to plug their phone in every night.

Re: Toyota runs a car-hacking event to boost security (2024)

#63

Post by lotsofpulp »

BrandoElFollito wrote: post #34

My brother had his car (a sleek AUDI) stolen in front of his house. He left the key in the entry hall, and someone extended the range. Are current electronics (the consumer ones) good enough at scale to limit the time the round-trip car-key-car takes?

I am curious if any Teslas have ever been stolen by being able to duplicate the Tesla key.

Is app + Bluetooth or the NFC cards inherently more secure than traditional key fobs?

Re: Toyota runs a car-hacking event to boost security (2024)

#64

Post by chasd00 »

Tangent but I have a 2016 Toyota 4Runner. Great car and fits my family and needs perfectly. The key fob broke so I needed to get a replacement, I got a blank and had a locksmith cut and program the blank. He must have not done it right because it worked and then I got stranded cause it must have lost its pair to the car or something. Nothing wrong with the vehicle, the engine wouldn’t start because of the key. I do road trips through the desert SW and other remote places, if I have the key I need the car to start no matter what. I really don’t want my keys to require a battery either. I wish there was a way to bypass the rfid/BLE or whatever it is.

Re: Toyota runs a car-hacking event to boost security (2024)

#65

Post by lotsofpulp »

hopelite wrote: post #50
decimalenough wrote: post #42

Earlier quoted context omitted.

Tesla sells nearly as many cars in a quarter (497,099 in Q3 2025) as the Leaf managed in its entire lifetime (577,000 between 2010 and 2022).

Is the hating Tesla tantrum over? That being said, you can’t really compare the sales of all of Teslas to the sales of one specific form factor/model with any kind of seriousness. Nor do I think it’s a fair comparison to compare Tesla that has parted on various hype patterns over the years to tap the zealots into even becoming their free advertisement and marketing departments not unlike how Apple fanboy cult people…

95% (actual percentage) of Teslas sold are Model 3 or Model Y, so one can cut that sales figure in half and still reasonably compare to the sales of another model.

>And that’s without going into the various battery issues and the now conflicting electricity interests between EV and AI.

I do not understand what this means. Isn't the same gas used to power vehicles used to power turbines that provide electricity?

Re: Toyota runs a car-hacking event to boost security (2024)

#66

Post by lotsofpulp »

ocdtrekkie wrote: post #58
Theodores wrote: post #46

The legacy automakers have been cramming ever more ECUs into their cars, at a considerable cost expense. Tesla did something different with the big screen and one 'big computer' rather than a bevvy of ECUs. This appears to be the design pattern going forward, as evidenced by VW's investment in Rivian, where they also go for the 'big computer' approach. It seems to me that the security of Tesla cars is pretty good, co…

You can't hotwire a Tesla, but the manufacturer can, and can stop you from driving it too. I am not sure on the whole I prefer that option.

All the other new car seem like they are coming with integrated modems also, so I presume they have the same capability of stopping you from driving the car too.

Re: Toyota runs a car-hacking event to boost security (2024)

#67

Post by vigilans »

chasd00 wrote: post #64

Tangent but I have a 2016 Toyota 4Runner. Great car and fits my family and needs perfectly. The key fob broke so I needed to get a replacement, I got a blank and had a locksmith cut and program the blank. He must have not done it right because it worked and then I got stranded cause it must have lost its pair to the car or something. Nothing wrong with the vehicle, the engine wouldn’t start because of the key. I do r…

Did you get a genuine key? I never had one fail on me.

The immobilizer is the single best piece of technology for preventing car theft. If you create a backdoor for bypassing it, you'll end up like Hyundai/Kia which decided to sell cars without the immobilizer in recent years and which have turned into a joke in the minds of potential customers.

It does not require a battery in most cases and is separate from the keeloq system that controls your car's doors.

Re: Toyota runs a car-hacking event to boost security (2024)

#68

Post by andrewmcwatters »

Buttons840 wrote: post #56

There's 2 things when it comes to security: Companies are responsible for their own security. You cannot try to hack them without their permission. Security researchers who do something like test the security of a car without the permission of the car manufacturer (like in this post) are committing a felony. Also, companies are not responsible (liable) for their own poor security. If they do something like leak the p…

> Companies are responsible for their own security. You cannot try to hack them without their permission. Security researchers who do something like test the security of a car without the permission of the car manufacturer (like in this post) are committing a felony.

Not a single sentence here is correct.

Re: Toyota runs a car-hacking event to boost security (2024)

#69

Post by FunkyDuckling »

chasd00 wrote: post #64

Tangent but I have a 2016 Toyota 4Runner. Great car and fits my family and needs perfectly. The key fob broke so I needed to get a replacement, I got a blank and had a locksmith cut and program the blank. He must have not done it right because it worked and then I got stranded cause it must have lost its pair to the car or something. Nothing wrong with the vehicle, the engine wouldn’t start because of the key. I do r…

for my 2016 Mazda, the keys do not need a battery to operate.

you instead need to hold the fob up to the start button and it will work passively, rather than just being in the car normally. Glad they still give manuals with cars as I had to learn that without service.

Re: Toyota runs a car-hacking event to boost security (2024)

#70

Post by kakacik »

chasd00 wrote: post #64

Tangent but I have a 2016 Toyota 4Runner. Great car and fits my family and needs perfectly. The key fob broke so I needed to get a replacement, I got a blank and had a locksmith cut and program the blank. He must have not done it right because it worked and then I got stranded cause it must have lost its pair to the car or something. Nothing wrong with the vehicle, the engine wouldn’t start because of the key. I do r…

If you even rarely get into situations you describe, saving on a freakin' key fob and not going via official dealership is supremely... not smart.

What you describe would be exactly reason #1 I would immediately say to anybody on topic of why not saving desperately on such a thing, despite never being in such situation myself.

Sometimes learning from other's mistakes should be enough. No, mostly it should be enough.

Post reply on HN