News for hackers. Stuff that matters.

A comment on Remotely unlock/start/locate/flash/honk any remotely connected Honda/Nissan. Parent comment

Re:Remotely unlock/start/locate/flash/honk any remotely conn... by zuppy on Friday December 02, 2022 @12:10PM (#33833306)
most probably, because of CAN bus, which is the system that most of the cars use to connect their systems.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7219335/

how CAN bus works: https://payatu.com/blog/kartheek.lade/automotive-security-pa...

i’m aware that on this case there was something even dumber, an unsecured api endpoint, but as far as i know, if you’ve managed to reach the system you can do anything with any other connected device. there should not be a way to be able to do whatever you want just because you have access to the network.

[ Parent | on HN ]
Re:Remotely unlock/start/locate/flash/honk any remotely conn... by nicholasjarnold on Friday December 02, 2022 @12:20PM (#33833493)
I recall reading that some cars are now using TCP/IP for connecting some of their systems. A _super_ quick search on this topic yields some results speaking to this [0].

[0] - https://www.techrepublic.com/resource-library/whitepapers/tc...

[ Parent | on HN ]