3 ms·
It's easy to complain since they're the only manufacturer who opens up your car as an API
by zoover2020 2y ago
It's easy to complain since they're the only manufacturer who opens up your car as an API
- AlotOfReading 2y agoNone of the issues I mentioned where discovered via API. The flash wear issue was discovered by bricked cars. Security researchers are pretty good at publishing about remote unlock mechanisms for all manufacturers, though Tesla's bounty program has helped. The UDS implementation issues are non user facing and were discovered by reverse engineering. Ford, as an interesting point of comparison, published a competent (if incomplete) open source UDS server.
- mdaniel 2y agoI wanted to say thank you, searching for that phrase[1] produced a ton of fascinating reading, including https://mpese.com/publication/uds_fuzzing/SAE_UDS_Paper.pdf https://mpese.com/publication/uds_fuzzing/SAE_UDS_Paper.pdf "Comparing Open-Source UDS Implementations Through Fuzz Testing" from Apr 2024 which itself linked to a lot of GH repos of the tools they used I didn't find the Ford one specifically, but I also didn't go surfing through the many pages of results 1: https://duckduckgo.com/?q=open+source+UDS+server&ia=web https://duckduckgo.com/?q=open+source+UDS+server&ia=web