3 ms·
The problem is not OBD-II. Rather the risk is when another vulnerability occurs on another system attached on the CAN bus like an infotainment system. If that i
by sebazzz 9y ago
The problem is not OBD-II. Rather the risk is when another vulnerability occurs on another system attached on the CAN bus like an infotainment system. If that infotainment system is vulnerable and the vulnerability allows to control the CAN bus then you have the real problem.
- tyingq 9y agoI don't see the difference. Both have no need for unfettered access to the entire CAN bus. See this for example: https://www.autoblog.com/2015/01/21/2-million-progressive-snapshot-customers-may-be-at-risk-for-car/ https://www.autoblog.com/2015/01/21/2-million-progressive-sn... OBD-II messages are a subset of CAN bus messages, identified by bits in the header, so it should be simple to filter/firewall down to just what's needed for that physical port.