3 ms·
I was simply correcting your authoritative statement: However, steering and brakes are mechanical systems in Hastings' 2013 Mercedes C250 (like almost every oth
by dsl 13y ago
I was simply correcting your authoritative statement: However, steering and brakes are mechanical systems in Hastings' 2013 Mercedes C250 (like almost every other car)
You are dismissing it as unlikely, because you keep assuming that some subsystems would work as designed or intended.
I'm not comfortable discussing details on this point, but "just use the brakes" might not have been an option had the malicious payload been properly designed. I have maybe a basic to mid level of experience reverse engineering automotive firmware, and it would not be hard for me to pull off. God only knows what a state actor could come up with.
- dredge 13y agoCan you recommend any automotive firmware reversing resources or published work? Thanks.
- dsl 13y agoThis is a good intro and overview of security issues: http://embedded.communities.intel.com/community/en/applications/blog/2013/02/27/roving-reporter-security-issues-in-the-connected-car http://embedded.communities.intel.com/community/en/applicati... If you want to just hack around on CAN bus, check this project out: http://www.gadgetgangster.com/news/54/556 http://www.gadgetgangster.com/news/54/556 To get at actual firmware, you'll want to identify the ROM chips and wire up an appropriate reader. You might be able to get by with a bus pirate. Once you have the actual firmware, you should be able to identify the processor (get ready to learn old obscure Motorola instruction sets) and you're off to the races. If you luck out with an x86 or ARM processor I highly recommend the Hex Rays Decompiler. I was working as a generalist on the team, so the HN expert collective may be able to give you better pointers on specific items.