3 ms·

Isn't the hack supposed to expose the fact that there is a weakness and openness to attack? -- if they can hack a remote car any hacker could potentially do the

Isn't the hack supposed to expose the fact that there is a weakness and openness to attack? -- if they can hack a remote car any hacker could potentially do the same -- and then killing someone via remote hack would be a lot easier... we might start to see serial killers hiding behind the internet

toomuchtodo 10y ago
Indeed. Sending CAN frames directly is essentially a remote privilege escalation (think sudo user with no password). One of the shining examples of this done properly is Tesla; they have a gateway that you can issue commands to over the internal network, but it alone issues the CAN commands. You cannot issue CAN commands directly. https://youtu.be/KX_0c9R4Fng?t=38m40s https://youtu.be/KX_0c9R4Fng?t=38m40s
- slededit 10y ago
  The problem is traditional vehicles are required to have an OBD-II port that supports CAN by law.
- schoen 10y ago
  Do people who design these things end up making a lot of puns about CAN and CANNOT?