4 ms·
I'm not so sure. The key has to be stored somewhere on the car. Why not desolder that and examine it? (If we're going with "Theoretically possible," that is.)
by shawn 8y ago
I'm not so sure. The key has to be stored somewhere on the car. Why not desolder that and examine it?
(If we're going with "Theoretically possible," that is.)
- bri3d 8y agoThe solution here is a combination of tamper-proof secure enclave and ephemeral keys, just like it is for trusted boot chains. Obviously it's not 100% secure and just like mobile phones (which, again, are the exact same problem space) it's eventually defeated, but the magnitude of difficulty can be multiplied without much effort.
- Rjevski 8y agoMy solution wasn't to protect against that - if you're up for desoldering stuff you may as well just replace the ECU with your own one which is happy to start the car. This was just an idea to thwart installation of compromised firmware by thieves via the diagnostics port. It's just a little layer of security, not designed to be bulletproof, merely to slow down thieves by forcing them to actually swap the hardware.
- shawn 8y agoif you're up for desoldering stuff you may as well just replace the ECU with your own one which is happy to start the car. I demand a source that teaches me how to do this. :) Orrr if you're in Chicago let's go figure it out ourselves!
- GFischer 8y agoCESVI in Argentina. Not very close to Chicago though :P , but I'm sure there's an US equivalent. https://www.cesvi.com.ar/index2.html https://www.cesvi.com.ar/index2.html I remember reading about the people that dismantled cars to find where manufacturers source the parts: https://jalopnik.com/the-fascinating-company-that-tears-cars-apart-to-find-o-1787205420 https://jalopnik.com/the-fascinating-company-that-tears-cars... Those guys can probably switch you the ECU :)
- shawn 8y agoThis is awesome. Thank you!
- tomaskafka 8y agoIn Europe: https://ecu.de/ https://ecu.de/