4 ms·
Seems like that's all you can ask for if the attacker has physical access to the machine. Would be happy to be corrected though.
by j88439h84 8y ago
Seems like that's all you can ask for if the attacker has physical access to the machine. Would be happy to be corrected though.
- Rjevski 8y agoNot sure I agree. It’s one thing if you get physical access, replace the engine control module by a crooked one that will send the proper signals to the ignition and all the other actuators and start the car. It’s another thing if you talk to the real engine control module (which should already be on alert because the car was broken into) and tell it “trust me, I’m legit, here’s your new firmware” and the computer just runs your code no questions asked.
- jinzo 8y agoBut on the other hand, on modern cars that is not nearly enough to get the car started. As OP pointed out, Simos18 was quite conveniently hacked, but that's far from the only ecu family. And usually they aren't hacked as easly/quickly. For example, all that Simos18 "easy" hacking can be done once you have IGN ON, if you have IGN ON it's probably easier to just code a new set of keys, than it is to flash new FW on all related and needed computers.