News for hackers. Stuff that matters.

fmntf

Re:I Also Hacked My Car on Monday February 05, 2024 @12:51AM (#39257801)
Good job! DLT logs are pretty standard in the infotainment industry, the format specification is openly available. I recommend you to download DLTViewer from GitHub and open the log files (if they are not encrypted). You may find good stuff there!
Re:How Netflix Really Uses Java on Tuesday October 10, 2023 @02:59PM (#37836032)
I was thinking of Jira
Re:Why old books smell so good on Saturday August 19, 2023 @07:26PM (#37194377)
You are right. Last year I've got a virus named covid (probably you have heard of it). For a few days I've lost the taste of food. I mostly stopped to eat in such days. Eating food that tasted of nothing was totally unpleasant!
This is not how odometers are scammed. The EEPROM gets rewritten to zero, then you can increment the odometer to your preferred value via OBD/UDS. Please note that you can only increment the odometer without a specialized (authenticated) diagnostic session.

FYI I do not reset odometers, I am on the other side, developing software for instrument clusters.

Deleting the DTCs is really trivial. It's just a standard UDS command. The only way to avoid this kind of scam is buying vehicles that have done the official maintenance/inspection. That will report the odometer to the car maker.
Re:KDE Developers in Germany Planning for Plasma 6.0 on Saturday May 06, 2023 @11:42PM (#35847723)
I feel the same. The widgets/cashew stuff was totally insane.
Re:Taking over a Dead IoT Company on Tuesday January 10, 2023 @03:36PM (#34331105)
Additionally, the composition of certified products does not lead to a certified product. Even adding an enclosure around a certified board implies the recertification.
Re:Modern C for C++ Peeps on Saturday January 07, 2023 @06:29PM (#34294185)
Think of the Linux kernel. That's a huge project, organized in an object oriented fashion. Is there a difference between this->method(arg) and method(this, arg)?
Re:Using Qt 6 under LGPLv3 on Saturday January 07, 2023 @05:48PM (#34293837)
> We must not use [...] Qt Creator [...] to build software using Qt LGPL-3.0 or Qt GPL. It doesn’t matter whether these tools are also available under a non-commercial Qt license.

This is the weirdest part of Qt licensing for me. An IDE is an IDE, you should not care what I develop with it. I don't even understand how is that possible, since Qt Creator is GPL3.

Re:Ask HN: Risk of unsafe software in automobiles? on Wednesday December 28, 2022 @06:35PM (#34167498)
Your comment is pretty accurate. Just remove "probably" from point 2.
Re:Ask HN: Risk of unsafe software in automobiles? on Wednesday December 28, 2022 @06:32PM (#34167470)
OBD is a diagnostic bus. On modern car the access is authenticated on several layers (eg. guest, carmaker, ECU supplier). I would not call that interesting. Accessing a CAN/FlexRay/LIN/Eth bus is better.
Re:Ask HN: Risk of unsafe software in automobiles? on Wednesday December 28, 2022 @06:27PM (#34167437)
Working on a ECU that at some point during the development had to switch to Autosar, I cannot agree more on this.
Re:Tell HN: Otter.ai bot recording meetings without consent on Wednesday September 07, 2022 @01:54PM (#32753839)
That's a nice politically correct statement. Now, would you mind to answer the OP?
Re:Apple expands Self Service Repair to Mac notebooks on Monday August 22, 2022 @03:40PM (#32556198)
It's repair versus buy. If you cut the power cord of your dishwasher, you can buy a new dishwasher from Bosch for 900€, or ask a 3rd party to repair it for 25€. I don't see any "fuck Bosch" logic here.
Re:I hacked my car on Saturday August 13, 2022 @07:41PM (#32454831)
Actually there still are a lot of Windows ECUs in the wild. I analyzed the update packets of newer cars than mine (equipped with Uconnect) finding even sndrec.exe and the default page of IIS! Fortunately my company produces Linux-based ECUs, and we use Windows only for Autosar stuff.
Re:I hacked my car on Saturday August 13, 2022 @07:12PM (#32454667)
I just do not like self promotion. My employer does not care of my posts, they were published before signing my current contract. I have stopped writing posts by myself since I have now access to tons of documents and specifications.
Re:I hacked my car on Saturday August 13, 2022 @07:04PM (#32454625)
The infotainment of the car maker had some oddities: * the binaries were signed with a certificate emitted by a big certification company, repacking an update package could be challenging * the system ran a fork of Windows CE and was co-developed with Microsoft * the SoC documentation was only available under NDA (I was able to find only a one page datasheet)

For those reasons, instead of trying to repack the software for the original ECU, I started to sniff the CAN traffic and analyzing the binaries contained in the software update packages found online. That allowed me to reimplement the communication with other ECUs on a Linux SBC.

Re:I hacked my car on Saturday August 13, 2022 @04:24PM (#32453451)
Kudos to the author! I did some research in my car a few years ago. Unfortunately, the update packages were properly signed. So I reversed the CAN traffic and replaced the infotainment ECU with my own reimplementation. I published my work and findings on medium thinking that nobody could notice them... I have got a job in the automotive industry instead.
Re:Who is collecting data from your car? on Saturday July 30, 2022 @05:59PM (#32290777)
Frequencies among radio/gps/cellular/bt are different, you need separate antennas.
Re:Working in the software industry, circa 1989 on Monday July 11, 2022 @07:14PM (#32063397)
This old trick is still in use nowadays. However, instead of shipping a tape I have seen a colleague uploading a zip corrupted by hand, just two gain a couple of days of bug fixing.
Re:Sunsetting Atom on Wednesday June 08, 2022 @01:38PM (#31671088)
I work on the linux kernel using CLion and the IDE is still fast. I would not be interested in a non-Java IDE for the performance.
Even cheap cars have a dedicated powertrain/brake/ABS CAN bus. Separate buses are then interconnected via a gateway.
"sono intollerante al lattosio"
Could you please elaborate what script is injected, that reason and why it is that out of your control? Thank you
Re:PlayDate Fulfillment Delayed on Thursday November 11, 2021 @05:04PM (#29193798)
My 2011 car has ECUs for: engine, brakes, ABS, air bag, air conditioning, alarm. All of those are connected to a gateway, that is another ECU. Do you want parking sensors? That's another ECU. Multimedia? That's one or two. Cars of 2000 have not much less ECUs. Consider also that components to build such ECUs are now totally obsolete and out of production.
Re:The Linux Kernel Module Programming Guide on Monday August 02, 2021 @02:55PM (#28041099)
In my opinion the best way to do kernel development is to just look at device drivers in kernel sources, study what current drivers do and write your own driver. The kernel supports su much heterogeneous devices and its APIs change continuously that it is practically impossible to write a complete guide on this topic.
Re:LinuxBoot: Linux as Firmware (2018) on Monday June 21, 2021 @01:38PM (#27581522)
For which platform? It is really hard to boot an x86 board without using a commercial UEFI.
Re:Software is eating the car on Thursday June 10, 2021 @02:47PM (#27464090)
I work in the automotive. I think that this is the trend. At the begin, smartphone projection was just calls, music and navigation. Now such systems are interested in signals coming from the car.. guess why!
Re:Submarine Cable Map 2021 on Sunday June 06, 2021 @05:28PM (#27416500)
Well, it includes shipping :)
That's unrealistic. A car contains several ECUs. Each ECU has one or more MCU/CPU. Every core runs its software, 99% of the time documentation is available only under NDA. Reimplementing the software for just one MCU/CPU is challenging even for who is part of the industry.

Older »