3 ms·
It's an open secret in the industry that the CAN bus is not authenticated. If you connect, you can read the data on the bus and inject the data on bus. But, th
by RealityVoid 3y ago
It's an open secret in the industry that the CAN bus is not authenticated. If you connect, you can read the data on the bus and inject the data on bus.
But, that does require physical access to the car and hooking to the wires. Nobody complains that if you hook to the buses on a PC you can own it.
Now they have this security concept where every ECU on the car will have their own private key in their own secure enclave. You need that key to put authenticated data on bus and it can only be updated by the OEM's.
The authenticated bus infra will probably not protect against remote attacks ( since if you own the ECU SW you have the cert and you will still be able to publish signed messages) but will kill ability to change HW.
I really would not like to kill our ability to fix our vehicles but I feel this is the thing that is going to happen.
- harambae 3y ago> Now they have this security concept where every ECU on the car will have their own private key Not just a concept, on vehicles you buy today (from, for example, Ford and VW) https://cdn.vector.com/cms/content/products/VectorCAST/Events/Symposiums/4_Securing_Communications_-_Things_I_Wish_Someone_Had_Told_Me.pdf https://cdn.vector.com/cms/content/products/VectorCAST/Event...
- hooverd 3y agoI hate computers. Seems like lately they're only used to make our lives worse.
- gottorf 3y agoSince the Industrial Revolution, and only made worse with the Information Revolution, technology has advanced much quicker than the ability for laws and customs to adapt.
- bluGill 3y agoIt sometimes seems that way, but when you look at how people lived without computers things were worse. Cars in the 1930s were not fuel efficient, polluted a lot, and you have to do things like file the points every couple months. I remember when you called buildings not people - the phone was attached to the wall, and what just a voice device, it didn't hold Wikipedia or current maps to everywhere. However we forget how bad the past really want.
- JohnFen 3y ago> when you look at how people lived without computers things were worse In some ways. In other ways, things are worse now.
- bethly 3y agoI’m curious what maximization function you are considering
- hooverd 3y agoFor a fleeting moment they seemed like something about actually increase freedom, but now...
- mycall 3y agoThe devices on CAN bus can use embedded certificates to securely communicate with each other. Basically VPN over CAN.