News for hackers. Stuff that matters.

A comment on Hacker shows he can locate, unlock and remote start GM vehicles. Parent comment

Re:Hacker shows he can locate, unlock and remote start GM ve... by mratzloff on Wednesday August 05, 2015 @09:45AM (#10009630)
Maybe I don't understand the difficulty. This is a standard services problem that standard software architecture practices would solve. You just need a gateway sitting in front of the CAN bus and any externally exposed services must go through the gateway. Only "safe" services or commands are exposed in this case. Maybe an entire service here, maybe a specific info command to an essential driving service there. The gateway inspects all incoming requests from these external services. All internal commands continue talking through the bus directly. Problem solved.
[ Parent | on HN ]
Re:Hacker shows he can locate, unlock and remote start GM ve... by joezydeco on Wednesday August 05, 2015 @09:51AM (#10009666)
Yes, a gateway is a common solution. Or having two busses (one for engine control and the second for aux functions like HVAC, radio, lighting etc) with a system to pass critical messages between the two.

But it's cheaper to use a single bus and just slap everything on there. Or in the case of something like OnStar, realize you can add extra capabilities through firmware and not fully think about the impact when your radio can send unfiltered messages to your ECM.

[ Parent | on HN ]
Re:Hacker shows he can locate, unlock and remote start GM ve... by mzs on Wednesday August 05, 2015 @11:56AM (#10010678)
You do have that gateway, it's likely the radio too. That thing has the most complicated and feature-full code of anything in the car and humans make mistakes when writing even simple software.
[ Parent | on HN ]