Live data from Hacker News

Ford Releases An SDK For Their Cars

bits.blogs.nytimes.com

71–73 of 73 posts

Re: Ford Releases An SDK For Their Cars

#71
post #53

Earlier quoted context omitted.

They're getting a bit closer with OpenXC. Doubtful they'll ever let anyone all the way in, but you never know... http://openxcplatform.com/

As an addendum to this, we (finally) were able to release OpenXC just now.

That's great news, congrats on making 1.0^H^H0.9.

Re: Ford Releases An SDK For Their Cars

#72
post #15

Earlier quoted context omitted.

The real hackers are already in. ;) The Nissan Pathfinder for example has a pin on the ECM that when grounded loads the engine profile from the upper 256K of RAM vs the normal lower 256K of RAM. If you modify an engine profile to set limits of 5 MPH and 1000 RPM and load it into the upper 256K and wire that pin to the dome light switch, you have an amazing anti-theft system.

Security through obscurity. Works well until it becomes a popular tactic. Anyway, haven't immobilizers all but stopped drive-away car theft?

I'd label it more as "heterogenous security." If everyone modded their own car, a thief is forced to develop novel attacks for each car.

Immobilisers have two major issues. The first is code weakness. Many of the early ones used static keys. In '98 when Germany mandated them for new cars, BMW and others switched to using the odometer reading as a shared secret. Newer ones often use weak 40-bit keys. The second issue is that most immobilizers simply cut the ignition circuit and the fuel pump circuit. If you know where the relays are on a model of car you can short circuit them.

Re: Ford Releases An SDK For Their Cars

#73
post #72

Earlier quoted context omitted.

Security through obscurity. Works well until it becomes a popular tactic. Anyway, haven't immobilizers all but stopped drive-away car theft?

I'd label it more as "heterogenous security." If everyone modded their own car, a thief is forced to develop novel attacks for each car. Immobilisers have two major issues. The first is code weakness. Many of the early ones used static keys. In '98 when Germany mandated them for new cars, BMW and others switched to using the odometer reading as a shared secret. Newer ones often use weak 40-bit keys. The second issue…

You're seriously proposing BYO security?

Immobilisers have dramatically reduced rates of drive-away car theft in Australia where they became mandatory a while ago. They might not be completely foolproof, but they certainly do stop the vast, vast majority of criminals.

Post reply on HN