3 ms·

>... CAN is one of the least secure BUS's imaginable. Can you elaborate on this?

• kayodelycaon 4y ago
  No security or authentication. IIRC, any attached device has full control over the physical layer by design. I don't really see why this is a problem in a car with isolated buses for safety-critical components.
  • hatsunearu 4y ago
    Yeah... that's like saying a car has a security risk because someone can go in the wheel well and slash the brake lines...
    • RC_ITR 4y ago
      Yeah, that is a security risk We choose to ignore it because it's rarely exploited, but by that logic, we should just ignore all zero-days.
  • leetbulb 4y ago
    Many newer vehicles contain systems, OEM and/or after-market, that are permanently connected to the internet via cellular modem. Other systems with insecure RF tech used for various gimmicks. Other systems that communicate with external and potentially malicious devices like chargers. Etc. Most of these systems have enough access to (in)directly destroy or booby trap the car. My car is able to receive ECU(!), firmware, software updates OTA from the manufacturer. These critical systems are just as "closed" or "isolated" as cloud-enabled "CCTV." Scary stuff.