Cops can extract data from 10k different car models’ infotainment systems
forbes.com
forbes.com
I've owned or rented about four cars of different make and different software bases that would occasionally freeze up when you switch out of reverse into forward, but the cam would still be up, preventing you from accessing important car functions (and distracting the driver).
I've had to look up how to reset infotainment systems on youtube because it just wouldn't turn on at all.
There was also a report of an infotainment system which would glitch out if a radio broadcasted certain characters in their station or track info, causing it to stay stuck on that radio station, even across reboots (IIRC this was traced to an ancient js lib, I may be wrong though). How much help do you think the car manufacturer offered? It was likely asymptotic with 0.
But even if infotainment systems didn't suck for all these reasons, I still wouldn't want one. They seriously just suck ass by their very nature. Just give me a vehicle.
This is interesting and not something I was aware of. Since when does DOT require that?
0: https://www.theautochannel.com/vehicles/new/reviews/wk9415.1...
1: https://en.wikipedia.org/wiki/Saturn_S_series#/media/File:1s...
https://www.ecfr.gov/current/title-49/subtitle-B/chapter-V/p...
This is a FAR BIGGER threat even in national security terms because an unpatched vulnerability might allow acting on ALL cars in a nation, for instance blocking them in some crucial intersections paralyzing the entire traffic, or push them to consume too much all at once (EVs/plug-in hybrid) from the grid to make mass blackouts and so on.
They're a decade late knee jerk reaction to the huge rear blind spots the Ford Expeditions and Chevy Suburbans that white collar types thought were the cool hot thing to own in 2004ish and characteristically refused to take responsibility for occasionally backing over their kids with them.
The fat pillars came a tad later with side curtain airbags.
I don't agree with the backup camera take (I love mine), but I otherwise generally agree with the dumb car comment. I want my vehicle to be understandable and hackable, so I can work on it without needing access to its computer as much as possible. I don't want aspects of my vehicle to be made available on the public internet. I don't want a touch screen that eliminates tactile controls.
Backup cams are mount lower and have a wider field of view than people do. They are really effective at keeping drivers from running over children. They are incredibly effective at this. Even in my low to the ground compact car, my backup cam sees things I cannot out my back window.
Drive a car from the 80s and 90s with a big greenhouse. The vehicle brochures back then had visibility as a feature of the car. Car reviewers who cover retro cars talk about this a lot. They are always amazed at how much you can see out of older cars.
Visibility was a lot better, but little timmy on a tricycle was still hidden behind the rear trunk.
That said, the number of collision avoidance systems needed in modern cars to make up for the giant pillars has gotten out of hand.
Oh man! I recently rented a car after a very long time; really loved CarPlay experience.
Most cars will have the infotainment in a CAN or flexray network with a bunch of other stuff in the cockpit.
Theoretically unless other systems are tightly integrating with the infotainment (using their GPS localization data for example) you could theoretical just snif the network through your OBD connector and find out what messages your infotainment sends (i.e. whatever messages dissapear when you power the infotainment off).
Most of the time the Body Control Module (the master of ceremonies in the cockpit) is just checking that a particular range of message IDs are being sent to 'assume' that the infotainment is 'online'. So sending those messages on the OBD port as a man-in-the-middle of sorts would theoretically keep all the other systems happy.
So I suppose it really depends on how far you are willing to go. Also I think it would be difficult to make the trim look any good after removing the central infotainment system.
I lost a 2018 Bolt EV this year after my insurance company decided it wasn't worth repairing. My car might not be the perfect candidate for this, but I know there will be parts worth scavenging off of it in the next life for the carcass.
I sure hope to be able to perform one of these conversions myself in the future once the broader "swap infrastructure" and knowledge bases expand to better support individuals like myself (similar to how you can find a wealth of knowledge and aftermarket support for Honda K-series engine swaps into many cars beyond even Honda models).
Forgive me if I don't feel reassured, given Honda's response to Rolling-PWN.
> Previous reports claimed that Tesla infotainment systems stored Wi-Fi and Spotify passwords.
Like... how else is the car supposed to connect to wifi? And the new OS just has you sign into music services through a qr code.
0: https://www.carscoops.com/2022/11/this-shop-in-gibraltar-mod...
> Ah, megasquirt! If it wasn't for budget, and my utter inability to work with, or get to work, anything electronic (PCs are plug and play and some drivers, that doesn't count) I would have it or something similar on my '82 Rover V8 by now.
Damn I thought that's a cheap option but I've looked at assembled ones and is near the price of Ecumaster...
I once saw someone put a Bosch (?) EFI from a VW Golf GTI on a 3.5 Rover V8, should almost be cheap, if you onow what you do, so not for me. Either way, I can quite literally rebuild those dual Zenith carbs in the desert (don't ask...), if parts are there. So for overall reliability I take that over a cobled together EFI. At least for now, who knows what the future brings.
Ah, and to answer your question, yes, I think a screw driver counts as a hack!
You think of a Honda Civic as a "model". But Honda has the Civic Sedan, the Civic Sedan Si, the Civic Hatchback, and the Civic Type R. All-in-all, Honda has 13 different "models" listed on their US page. We can assume most other major manufacturers follow suit.
Then some of them may be broken down even further into more ultimately meaningless categories. Yes, the Civic Type R STX Bayonetta Dragon Hyper Ultimate Vroom Vroom edition may be a different "model", but all I see is Civic with too many fucking qualifiers.
And all of them will be using the same base infotainment package. Which isn't ultimately a big deal. You'd want some sort of consistency between your vehicles. Except when there's an issue like this. Then not one model, but every model has an issue.
Possibly software version than hardware. Still high to me. How many different Android phone systems are there?
isn’t there some law about trading stolen passwords?
I’m a fan of easy to type passphrases designed to spark a riot if ever read in open court since this seems to be a common pivot from the “look the other way when the user types” model I followed when I worked a help desk. We were told when I moved on to Hci research it’s unethical to collect the passwords, there’s a whole cottage industry of academics analyzing leaked data sets since they aren’t allowed to… just ask.
(I’m not Irb certified and not a professor, so I get to do whatever I want.)
>James Comey is watching me poop.
>James Comey is watching me poop in 4K.
(Context is everything, you probably don’t want me to explain the joke.)
I'm intrigued. Example?
Remotely unlock/start/locate any remotely connected Honda/Nissan [resolved] - https://news.ycombinator.com/item?id=33831127 - Dec 2022 (223 comments)
Even if they can’t run full forensics might be able to just browse through the call log or recent trips.
Call data and other data from devices tethered to it, and for connected infotainment systems also wifi and cellular data which can provide a secondary source of location data in case the location history has been purged.
It wouldn’t surprise me if there are some more rich logs there including CANBUS data from other car systems on some of the newer models.
Overall if you have a late model car especially towards the upper end of the spectrum I would assume the infotainment system has about as much information as a cellphone you carry because they are basically phones stuck to the console at this point.
I've heard tale of all sorts of data that are broadcast back to the manufacturers' servers from your car for later sale to data brokers for advertising, etc. information. Not exactly surprising to hear that that information is available if you connect to the car directly using LE tools.
This info would not be useful to LE, because they don't keep timestamps on the data. But it is a big tell to the dealership how hard you have been driving your car.
"I'll never buy a modern car with all the surveillance tech, just something with no electronics that I can fix myself!".
instead of motorcycles which are licensed, registered and insured, i now see more electric bicycles, which actually look like motorcycles, cost as much as motorcycles, and just ride around willy nilly.
Any small time manufactuer should be allowed to produce road legal vehicles for intracity use, and be allowed to skip most regulations that are onerous. Lighting, fine, brakes fine, but does it need a reverse camera or onstar or lane departure? no probably not.
I also doubt any market for what you're describing exists beyond "15 year old Honda Civic/Toyota Camry"
Reverse cameras are definitely helpful, if not a necessity when driving a behemoth vehicle. This is much less of a concern for a golf cart.
Works OK on a course... would not work so well on a noisy street.
US legislators just decided to not fight the "how small car needs to be to not require backup camera" and required it to be in all of them.
So, no, it isn't only a "giant Canyanero hurr durr" issue
Of course manufacturers immediately saw that they could just make trucks more like cars than make cars more fuel efficient so they started putting modern interiors and such into trucks and modernizing the platforms to create SUVs. Thus the station wagon died and the SUV became the standard family vehicle for a lot of people.
I think we have plently of lessons of how badly things go when the federal government sticks its nose into anything that we can no longer call these as unintended consequences. They are very much intended
We need to stop having the government pick winners and losers, or try to influence the market in any way be favoring one thing over another
regulatory capture tells us these consequences are intended. Intended to keep out upstarts without Musk's cash to back it. There's no reason we couldn't have bespoke car manufacturers producing city-cars for a low total cost.
How do you view the relationship between government-owned, built, and maintained roads and private vehicle manufacturers that use those roads?
Yes
> Regardless of how well it is manufactured and how safe it is for those inside and outside of it?
No. Should have cat, compliant lighting that's not too brigth/dim, working brakes and suspension, ABS and some common sense (like no spikes protruding from it). You know, the stuff proper MOT inspection would fail you for anyway. And maybe pay few hundred to professional mechanic to get thru it and make sure you ain't doing something stupid and get you nice custom VIN for it.
If it is (say) 100+ production yeah probably should have some actual crash testing and rest of the compliance, but if it is one off ? Won't be worse than 20 years old F150 or someone's restored 70's/80's car and we aren't taking those off the roads.
Well, turns out you are in luck because this is all already possible in the US. Pretty much everywhere there are provisions for one-off custom vehicles and getting them inspected. Sure, the paperwork is daunting and the process isn't always easy, but it is definitely possible. See article about an engineer who registered a jet turbine powered VW bug that shot 15 foot flames out of the back of it in CA that surfaced on HN a few years ago.
But we aren't necessarily talking about one-off cars that hobbyists who care about their craft create. We are talking about Walmart popping out $1,100 golf carts without airbags because it's a "city car".
Could the government, by taking no action, implicitly support the current "winner" because that's the status quo?
What do you think would happen to the prices of gasoline, electricity, etc. if the government stopped regulating any and all of it?
What's your view on government regulation around things like worksite safety, meat inspections and other food safety, drug safety?
Should the government prevent your neighbor from installing a radio signal jammer that prevents you from using your cell phone on your property? Or is that picking a winner/loser?
Like the fact only in near future it will be legal for US cars to have adaptive lights. Or how for years [1] near every car light was same ineffective design.
Over-regulation is as dangerous as under-regulation. If car manufacturers have to squeeze fleet averages (which is on its own retarded idea, just tax every model separately ffs) for normal cars. Or how apparently 20MPG sportscar is "gas guzzler" but 15MPG SUV is not
My point exactly. Correct regulation is correct. People who take the absolutist approach on either side of this tend to quickly run into either "now I have to learn to do my own meat inspections" or "I can't buy meat because a cow needs to be exactly 7'11" tall or it isn't legally a cow".
Governments serve a very real and necessary task of regulating markets to prevent abuse by bad actors. Bad actors seeking out loopholes and skirting regs is not an argument for less regulation but rather an argument for more regulation.
Subarus are probably most plug and play but that's because they are small company that build same car for last 20 years... and not exactly super reliable. For example those [1] crazy bastards swapped whole manual gearbox and engine to a different model (that's auto-only) of Subaru and it even had pre-made holes for stuff that automatic gearbox car doesn't have in the first place, cos they used same subframe parts.
You bet your bottom dollar I'm going for the "gas guzzler" - I hate these massive corporations more than I love the earth because they're the ones trying to force me into their ecosystem I can't back out of.
Too bad the barrier to entry for car manufacturing is so high due to the tech involved, the "back-door" deals, etc. etc. - I'm sure a cheaper company selling a well made equivalent of the GNU/CAR meme would be popular if marketed correctly.
You just cannot compete as "not huge" company with other big companies making cheap cars.
They are making their money on service and replacement components, not on new economy car sales (well, pre-pandemic at least)
So you're not getting "cheaper company" nor "well made" because making something well and cheap requires that scale in the first place.
The issue is really that not that many come to dealership and want cheapest radio from the 90s in their new car. People do want at least android auto/carplay and that usually comes with whole rest of entertainment, and as we are in cheap economy car segment, well, the shit that cost few bucks in knobs also get moved to that entertainment.
You can only really start talking about old cars being generally 'gas guzzlers' if you go back to the malaise era in the 70s.
The production of a car produces about 40k gallons of hazardous waste, removing that water permanently from the water supply.
https://www.automotiveworld.com/articles/water-water-everywh...