4 ms·
I think a basic idea should be: panic stops disconnect all wireless access. Which will probably result in lots of calls from people after they avoid hitting a
by a3n 11y ago
I think a basic idea should be: panic stops disconnect all wireless access.
Which will probably result in lots of calls from people after they avoid hitting a dog. But still.
- alandarev 11y agoDisconnecting will not restore corrupted firmware. Once virus is there, disconnecting just prevents data transfer.
- a3n 11y agoExactly. But at least you'd break the current control link and possibly/hopefully be able to stop and steer. Maybe in addition to breaking a link on a panic stop, stopping and steering would be set to a non-commanded mode that relies less or not at all (maybe impossible with current design?) on software commands.
- maxerickson 11y agoThe malicious firmware could just omit all that stuff. I guess the disconnect could be physical/mechanical and require physical intervention to reconnect (but cost, etc.).
- mojoB 11y agoIsn't the car calling their service center / 911 one of the major selling points of the service? The root problem is that they were able to flash an ECU with custom code. From there they are 'trusted' on the vehicle network and can trigger or emulate any other component. Requiring the firmware image to be signed, or not accepting a bootload from the physical interface that's connected to the internet would be a more comprehensive solution.