Software Updates and Lock-in Track Modes

[DGthe3]

Originally Posted by h422694

I agree that if there is no wireless connection, the hack attempt would fail. However the other control modules (ECM, TCM, BCM, etc) would still be connected to a common bus that would allow them to communicate with each other. It would be no different than if you had 4 PCs connected behind a router and then disconnected the router. The PCs could still talk to each other but not the outside world. While Nav gets outside info, I don't think that Nav has the capability to control other driving/control functions(yet).

I'm not a computer or security expert. But I know enough to understand that that the only thing that computers ever do is follow instructions. If there is any link whatsover between Nav and Control 'bad' instructions could be sent from Nav to Control. I don't know how integrated car systems are, and I'm sure it varies from manufacturer to manufacturer, but as long as they share more than a powersource a vulnerability exists.

To go back to your network analogy ... why not have only 3 of the 4 computers on the network. Keep a 4th (which contains all your important data) air-gapped from the rest of the network. Vulnerability still exists, but is restricted to non-important things. And with no means of communication between the networked and non, the important bits remain safe. Locking control of the doors out is an annoyance. Locking control of the brakes out is life threatening.

[Dethsupp0rt]

Originally Posted by samsumon

Tesla seems to be doing fine

https://www.infosecurity-magazine.co...s-the-hacking/
https://www.usatoday.com/story/tech/...ow/518430001/#

[PinHead]

Originally Posted by Dethsupp0rt

https://www.infosecurity-magazine.co...s-the-hacking/
https://www.usatoday.com/story/tech/...ow/518430001/#

+1

But some people still won't get it and they'll tether their phones to the car.

That's why I'd hard deleting(removing) the Car's wifi and cell connections.

Going in excess of 150mph on a track doesn't need Nav in your Ear saying, "Turn Left, Turn Left, Turn Left....."

Btw, this is the exact reason while public service vehicles are ordered with "OnStar DELETE" from the factory.

[Norm Peterson]

Originally Posted by samsumon

Tesla seems to be doing fine

Tesla also took away a possibly undocumented way of turning off stability control. You might not want any wifi-update capability enabled if you autocross, do HPDE, or have an aftermarket tune loaded.


Norm