4 ms·
I think this problem is impossible to solve, and it's the same on faced by electronic voting. How can you guarantee that the software running in the car is the
by boobsbr 11y ago
I think this problem is impossible to solve, and it's the same on faced by electronic voting.
How can you guarantee that the software running in the car is the same one provided by the car manufacturer?
A more detailed explanation:
You can't guarantee that software provided by the manufacturer and the dump you could retrieve from the car – through an API call, or through forceful means – are the same as the one which is running in the car because you can't know what's going on the silicon inside epoxy packaging of the myriad of chips in the board
Even if the hardware is completely open sourced, the manufacturer could use a different/modified microprocessor packaged/labeled/branded just like the one specified in the schematics, so that it could internally store and run the shady code from the manufacturer, while giving you a perfectly legit and signed dump as the one provided by the manufacturer.
Although I do agree that opening the software and hardware to public scrutiny would be a massive improvement on the actual situation.
- nathan_long 11y ago> it could internally store and run the shady code from the manufacturer, while giving you a perfectly legit and signed dump as the one provided by the manufacturer. If you had the right to replace it with your own copy, you could make it blink lights in morse code at various points in the software to prove it was executing your code. Of course they could still do sneaky things, but it would be harder.
- wepple 11y agoI don't think it's impossible. Manufacturers should provide the software for audit and assessment. Car tinkerers[1] can usually quite easily pull various firmwares directly off chip, and if the two diverge in a significant way the car company will have a LOT of explaining to do. [1] http://opengarages.org/handbook/ http://opengarages.org/handbook/