News for hackers. Stuff that matters.
Re:I Hacked My Car Guides: Creating Custom Firmware by CogitoCogito on Tuesday July 19, 2022 @04:15AM (#32148842)
I feel like I'd actually would value the blog author's car _more_ after the modifications. Well at the moment it would be either neutral or slightly positive (the author has demonstrated what's possible), but if any extra functionality would be added, I'd be a happy camper.
Re:I Hacked My Car Guides: Creating Custom Firmware by fake-name on Tuesday July 19, 2022 @05:22AM (#32149288)
The author's car (where you presumably have some assurance the firmware on the device is what is claimed? Sure.

A random car from a 2nd hand car lot with a mystery custom firmware? Oh hellllllll no.

This only add value if you assume there are no bad actors. I'd bet $100 if this becomes common, 2nd hand car lots will sell access to install creepy tracking firmware on all cars that pass through their hands.

Re:I Hacked My Car Guides: Creating Custom Firmware by CogitoCogito on Tuesday July 19, 2022 @06:12AM (#32149569)
I agree I’d like to made aware of any such changes made by previous owners, but I pretty much consider the makers of the OEM Software as bad actors at this point.
Re:I Hacked My Car Guides: Creating Custom Firmware by Nextgrid on Tuesday July 19, 2022 @06:20AM (#32149623)
> A random car from a 2nd hand car lot with a mystery custom firmware? Oh hellllllll no.

Just like any random car can have a $100 GPS tracker or spy microphone hidden which you won't locate without dismantling the entire car.

If someone wants to spy or be nefarious with a car I can think of many easier & cheaper ways than making custom firmware for the radio.

Re:I Hacked My Car Guides: Creating Custom Firmware by tailspin2019 on Tuesday July 19, 2022 @06:35AM (#32149704)
You often connect your phone to this system though, via cable or Bluetooth, so I can see a pretty simple attack vector here to enable being way more nefarious than just GPS tracking…
Re:I Hacked My Car Guides: Creating Custom Firmware by InsomniacL on Wednesday July 20, 2022 @01:55PM (#32169655)
What's stopping me from uploading custom firmware that:

exfiltrates private information like contacts, SMS,etc..

sends premium rate SMS's/spam contacts

trackers

bitcoin miners

virus

adverts

etc...