4 ms·

Years back I bought a model3 infotainment unit on eBay to hack on - it’s absolutely insane at the amount of data contained on them. After gaining access to the

Years back I bought a model3 infotainment unit on eBay to hack on - it’s absolutely insane at the amount of data contained on them. After gaining access to the system I was able to get the VIN of the car and find the salvage auction from the car it came out of - it had been wrecked. I then was able to get all the location data that gets logged, showing a glimpse of the previous owners life (house, work, stores they went to, etc) as well as the final resting place of the car. The last gps locations logged were at the end of a “T” intersection in North Carolina - google street view gave a nice look at the trees the car most likely hit :>

foobarian 1y ago
Neat! What's the hardware like, a Linux-ish computer with SD cards? Or SSD? Which filesystem?
- gwbas1c 1y ago
  I suspect it's Windows, actually, and I'm pretty sure the UI is some form of C#. They tried to recruit me for the UI. If I lived closer, I would have jumped on it. Not only was I bit of a Tesla fanboy at the time, I used to work across the street from their office and really liked that area. (Deer Creek Road in Palo Alto.)
  - flutas 1y ago
    https://github.com/teslamotors/linux https://github.com/teslamotors/linux
  - dagmx 1y ago
    It’s Linux and the UI is Qt
  - iamjake648 1y ago
    If this were true, Tesla wouldn't have the only use able car infotainment system in the industry.
- clipclopflop 1y ago
  HW wise, the older units were intel atom based cpu (latest gen is amd I believe?) - the hardware is typical embedded stuff - cpu + eMMC + bt/wifi mcu + cellular daughter card. OS is linux + QT UI stuff. I would expect things have changed for newer HW revisions, but the previous gen did not utilize encryption (dmcrypt) so all data was unprotected at rest.
  - clipclopflop 1y ago
    Following up on this - the actual 'self driving' part of the HW stack is an entirely separate board with 2x custom ARM chips on it. The HW/SW is much more locked down and the OS/Data is not accessible. I believe a lot of the self-driving info gleaned by types like green were built up from the first generation of Model S cars where the 'self driving' HW was much less defensible and it was much easier to gain access to it.
    - pas 1y ago
      what does locked down mean here? this is almost the same situation that happened with DRM stuff like HDCP and the BluRay (?) encryption key (that was then posted all over the net), right? at best the decryption key is somehow custom to each car, not reproducible (eg. it's made by some random manufacturing process), and then Tesla reads this and encrypts everything in a way so that only that key can open it. but then do they keep every bit of decrypted data "on die"? (or they encrypt RAM too?)
      - bdamm 1y ago
        It is now sort of common for embedded chips to generate on-die encryption keys for external processes (flash) and there could even be a one-time encryption key for the ROM (pushed to the on-die ROM and then wiped from manufacturing). Encryption RAM is basically free because the chip can generate a key internally at each boot. There can even be deeper lock-downs although obviously the deeper you go the less common it is. Getting to the on-die key can be pretty much impossible unless you can find some bootloader attacks, and then you're very much into dangerous territory. In some cases even looking for a bootloader attack can be paramount to disruption of international arms treaties, legally. I'd expect them to also have fleet keys for stuff like navigation data. And of course, public-key based firmware signing. That's just table stakes these days.
normie3000 1y ago
> a glimpse of the previous owners life... ...and potentially death?
- clipclopflop 1y ago
  I tried to dig up news articles in the area and could not find any reported fatalities - but yea, maybe?
  - js2 1y ago
    https://roadway.report/ https://roadway.report/ HN submission: https://news.ycombinator.com/item?id=41012443 https://news.ycombinator.com/item?id=41012443
Shocka1 1y ago
This doesn't just apply to Tesla of course. You've discovered what is in most modern Infotainment systems. The car no longer belongs to the customer and is a source of continuous revenue for the manufacturer - at least that's the way the C-suite sees it. Early in my career I worked for one of the most popular car companies on the Infotainment team, and I argued for customer privacy and data on a daily basis with managers and other engineers. I was always the minority.

foobarian 1y ago

Neat! What's the hardware like, a Linux-ish computer with SD cards? Or SSD? Which filesystem?

gwbas1c 1y ago
I suspect it's Windows, actually, and I'm pretty sure the UI is some form of C#. They tried to recruit me for the UI. If I lived closer, I would have jumped on it. Not only was I bit of a Tesla fanboy at the time, I used to work across the street from their office and really liked that area. (Deer Creek Road in Palo Alto.)
- flutas 1y ago
  https://github.com/teslamotors/linux https://github.com/teslamotors/linux
- dagmx 1y ago
  It’s Linux and the UI is Qt
- iamjake648 1y ago
  If this were true, Tesla wouldn't have the only use able car infotainment system in the industry.
clipclopflop 1y ago
HW wise, the older units were intel atom based cpu (latest gen is amd I believe?) - the hardware is typical embedded stuff - cpu + eMMC + bt/wifi mcu + cellular daughter card. OS is linux + QT UI stuff. I would expect things have changed for newer HW revisions, but the previous gen did not utilize encryption (dmcrypt) so all data was unprotected at rest.
- clipclopflop 1y ago
  Following up on this - the actual 'self driving' part of the HW stack is an entirely separate board with 2x custom ARM chips on it. The HW/SW is much more locked down and the OS/Data is not accessible. I believe a lot of the self-driving info gleaned by types like green were built up from the first generation of Model S cars where the 'self driving' HW was much less defensible and it was much easier to gain access to it.
  - pas 1y ago
    what does locked down mean here? this is almost the same situation that happened with DRM stuff like HDCP and the BluRay (?) encryption key (that was then posted all over the net), right? at best the decryption key is somehow custom to each car, not reproducible (eg. it's made by some random manufacturing process), and then Tesla reads this and encrypts everything in a way so that only that key can open it. but then do they keep every bit of decrypted data "on die"? (or they encrypt RAM too?)
    - bdamm 1y ago
      It is now sort of common for embedded chips to generate on-die encryption keys for external processes (flash) and there could even be a one-time encryption key for the ROM (pushed to the on-die ROM and then wiped from manufacturing). Encryption RAM is basically free because the chip can generate a key internally at each boot. There can even be deeper lock-downs although obviously the deeper you go the less common it is. Getting to the on-die key can be pretty much impossible unless you can find some bootloader attacks, and then you're very much into dangerous territory. In some cases even looking for a bootloader attack can be paramount to disruption of international arms treaties, legally. I'd expect them to also have fleet keys for stuff like navigation data. And of course, public-key based firmware signing. That's just table stakes these days.

normie3000 1y ago

> a glimpse of the previous owners life... ...and potentially death?

clipclopflop 1y ago
I tried to dig up news articles in the area and could not find any reported fatalities - but yea, maybe?
- js2 1y ago
  https://roadway.report/ https://roadway.report/ HN submission: https://news.ycombinator.com/item?id=41012443 https://news.ycombinator.com/item?id=41012443

Shocka1 1y ago

This doesn't just apply to Tesla of course. You've discovered what is in most modern Infotainment systems. The car no longer belongs to the customer and is a source of continuous revenue for the manufacturer - at least that's the way the C-suite sees it. Early in my career I worked for one of the most popular car companies on the Infotainment team, and I argued for customer privacy and data on a daily basis with managers and other engineers. I was always the minority.