5 ms·
There's an industry standard (?) for Digital Keys: * https://carconnectivity.org https://carconnectivity.org * https://carconnectivity.org/digital-key/ https:
by throw0101a 5y ago
There's an industry standard (?) for Digital Keys:
* https://carconnectivity.org https://carconnectivity.org
* https://carconnectivity.org/digital-key/ https://carconnectivity.org/digital-key/
Perhaps moving to that will help with security since everyone won't have to re-invent the wheel. (Of course implementation bugs are still possible.)
- NL807 5y agoBut then if there is a vuln in the industry standard system, then all cars will be affected.
- sodality2 5y agoWe do the same with TLS, SSH, etc. As long as we have smart people at the helm I don't see a reason to be worried.
- BeefWellington 5y agoThe threat model and security considerations there are too different between those examples. TLS and SSH are not generally run on disconnected systems that may never get firmware updates, as just one obvious difference.
- sodality2 5y agoThere's The Update Framework (TUF) for that, so maybe at some point cars will be able to update easily.
- kj4ips 5y agoSounds like a case where formal methods might be both appropriate and funding might actually be available for that.