Being closed source doesn’t strike me as an effective mitigation tactic. You can already buy aftermarket ECUs and such, and it’s pretty unlikely the garage woul

Being closed source doesn’t strike me as an effective mitigation tactic. You can already buy aftermarket ECUs and such, and it’s pretty unlikely the garage would install anything that would invade your privacy more than what the manufacturers have installed. If they were going to do it as a prank or shortcut or misguided enhancement, they can do exactly the same thing with physical parts. I guess I just don’t see the threat vector here. The big benefit seems to be auto manufacturers being able to rely on security through obscurity, which has already failed: https://news.ycombinator.com/item?id=35452963 https://news.ycombinator.com/item?id=35452963