5 ms·
That ssh into moving cars is really scary. I guess an engineer can do a lot in that session if he wants.
by markus_zhang 3y ago
That ssh into moving cars is really scary. I guess an engineer can do a lot in that session if he wants.
- chaxor 3y agoAt least they're using ssh and not some home rolled garbage. If ssh uses keys and not small passwords, it's one of the most secure methods around to get access to a machine. Unfortunately far too many companies are just rolling their own extremely flimsy and insecure VPN programs these days.
- hnthrowaway8860 3y agoYou are missing the point. Their engineers have the ability to ssh into your car. While you arr going 85mph on the freeway. That's by itself is scary af.
- MarcoZavala 3y ago[dead]
- 0zemp2c 3y ago[dead]
- SketchySeaBeast 3y agoI get anxiety updating my bios at the best of times, I can't even imagine at speed.
- bakuninsbart 3y agoI can only speak for German car companies, but their tech is incredibly secure, and multiple teams work on just making sure it is close to impossible to get access to anything digitally controlled in a car. The thing with cars is that malicious actors usually can get physical access to it, which makes it an order of magnitude more difficult to secure. This is one of the main reasons car computers often seem so clunky.
- yafbum 3y agoA lot of this tech seems to consider the legitimate owner of the car doing DIY repairs as "malicious" as well, unfortunately.
- kramerger 3y agoI see your point, but modern cars are too complicated to allow tinkering anyway. Besides, would you dare driving next to the guy that just installed random rom from xda?
- yafbum 3y agoI'm talking about simple stuff like authorizing additional keys, enabling remote lock/unlock without a stupid subscription, etc. The rom on the car is way less of a concern to me than whatever the person had to drink or their road rage fueled tailgating...
- deleted 3y ago[deleted]
- sour-taste 3y agoI think the protocol used to access the moving vehicle is the least of the concerns here.
- 6D794163636F756 3y agoIt definitely a near top concern. If they're doing a flimsy home spun thing then it's much more likely to be compromised. While the company being able to do this is enough to prevent me from buying a car from them, an insecure system that could be compromised means I believe the company should offer a recall on all cars. Being more secure doesn't mitigate the concerns, but it not being secure hightens them. To be clear, neither is acceptable but it being secure is still a big issue.
- indymike 3y ago> That ssh into moving cars is really scary. I guess an engineer can do a lot in that session if he wants. It all depends exactly what the engineer is SSHing into. A bash shell with root access? BAD. A shell with only monitoring and diagnostic tools that are cleared to use while the car is running? Probably not a problem and actually sounds both useful and the right way to do it. I'd love to be able to SSH into my car and get diagnostics.
- tedivm 3y agoAccording to the engineer who leaked that ssh thing (which was years ago) they were live patching and pushing updates to the cars over ssh. It was essentially full root. That said this was also super early in the company history, so this might have been for the roadsters more than the actual commercial cars.
- markus_zhang 3y agoEither way, that makes me think, maybe the code is still there? Oops I'm not rich enough to afford a Tesla anyway.
- red-iron-pine 3y agoThey're dropping the price hard. Probably one of the only nice things I'll say about Tesla is they're willing to wade in and compete on price. And that's mostly cuz Toyota or Ford are still charging too much.
- markus_zhang 3y agoWith interest like this I almost feel vehicles are a burden, albeit a necessary one. Interesting that rate and price both hike.