HNHacker News
TopNewBestAskShowJobs

fmntf

190 karma · joined September 18, 2012

submissionscomments
fmntf··on I also hacked my car
Good job! DLT logs are pretty standard in the infotainment industry, the format specification is openly available. I recommend you to download DLTViewer from GitHub and open the log files (if they are not encrypted). You may find good stuff there!
fmntf··on How Netflix uses Java
I was thinking of Jira
fmntf··on Why do old books smell so good?
You are right. Last year I've got a virus named covid (probably you have heard of it). For a few days I've lost the taste of food. I mostly stopped to eat in such days. Eating food that tasted of nothing was totally unpleasant!
fmntf··on FedEx Accused of Largest Odometer Rollback Fraud in History with Used Vans
This is not how odometers are scammed. The EEPROM gets rewritten to zero, then you can increment the odometer to your preferred value via OBD/UDS. Please note that you can only increment the odometer without a specialized (authenticated) diagnostic session.

FYI I do not reset odometers, I am on the other side, developing software for instrument clusters.

fmntf··on FedEx Accused of Largest Odometer Rollback Fraud in History with Used Vans
Deleting the DTCs is really trivial. It's just a standard UDS command. The only way to avoid this kind of scam is buying vehicles that have done the official maintenance/inspection. That will report the odometer to the car maker.
fmntf··on KDE Developers in Germany Planning for Plasma 6.0
I feel the same. The widgets/cashew stuff was totally insane.
fmntf··on Taking over a Dead IoT Company
Additionally, the composition of certified products does not lead to a certified product. Even adding an enclosure around a certified board implies the recertification.
fmntf··on Modern C for C++ peeps (2019)
Think of the Linux kernel. That's a huge project, organized in an object oriented fashion. Is there a difference between this->method(arg) and method(this, arg)?
fmntf··on Using Qt 6 under LGPLv3
> We must not use [...] Qt Creator [...] to build software using Qt LGPL-3.0 or Qt GPL. It doesn’t matter whether these tools are also available under a non-commercial Qt license.

This is the weirdest part of Qt licensing for me. An IDE is an IDE, you should not care what I develop with it. I don't even understand how is that possible, since Qt Creator is GPL3.

fmntf··on Ask HN: Risk of unsafe software in automobiles?
Your comment is pretty accurate. Just remove "probably" from point 2.
fmntf··on Ask HN: Risk of unsafe software in automobiles?
OBD is a diagnostic bus. On modern car the access is authenticated on several layers (eg. guest, carmaker, ECU supplier). I would not call that interesting. Accessing a CAN/FlexRay/LIN/Eth bus is better.
fmntf··on Ask HN: Risk of unsafe software in automobiles?
Working on a ECU that at some point during the development had to switch to Autosar, I cannot agree more on this.
fmntf··on Tell HN: Otter.ai bot recording meetings without consent
That's a nice politically correct statement. Now, would you mind to answer the OP?
fmntf··on Apple expands Self Service Repair to Mac notebooks
It's repair versus buy. If you cut the power cord of your dishwasher, you can buy a new dishwasher from Bosch for 900€, or ask a 3rd party to repair it for 25€. I don't see any "fuck Bosch" logic here.
fmntf··on I hacked my car
Actually there still are a lot of Windows ECUs in the wild. I analyzed the update packets of newer cars than mine (equipped with Uconnect) finding even sndrec.exe and the default page of IIS! Fortunately my company produces Linux-based ECUs, and we use Windows only for Autosar stuff.
fmntf··on I hacked my car
I just do not like self promotion. My employer does not care of my posts, they were published before signing my current contract. I have stopped writing posts by myself since I have now access to tons of documents and specifications.
fmntf··on I hacked my car
The infotainment of the car maker had some oddities: * the binaries were signed with a certificate emitted by a big certification company, repacking an update package could be challenging * the system ran a fork of Windows CE and was co-developed with Microsoft * the SoC documentation was only available under NDA (I was able to find only a one page datasheet)

For those reasons, instead of trying to repack the software for the original ECU, I started to sniff the CAN traffic and analyzing the binaries contained in the software update packages found online. That allowed me to reimplement the communication with other ECUs on a Linux SBC.

fmntf··on I hacked my car
Kudos to the author! I did some research in my car a few years ago. Unfortunately, the update packages were properly signed. So I reversed the CAN traffic and replaced the infotainment ECU with my own reimplementation. I published my work and findings on medium thinking that nobody could notice them... I have got a job in the automotive industry instead.
fmntf··on Who is collecting data from your car?
Frequencies among radio/gps/cellular/bt are different, you need separate antennas.
fmntf··on Working in the software industry, circa 1989
This old trick is still in use nowadays. However, instead of shipping a tape I have seen a colleague uploading a zip corrupted by hand, just two gain a couple of days of bug fixing.
fmntf··on Sunsetting Atom
I work on the linux kernel using CLion and the IDE is still fast. I would not be interested in a non-Java IDE for the performance.
fmntf··on A case study of Toyota unintended acceleration and software safety (2014) [pdf]
Even cheap cars have a dedicated powertrain/brake/ABS CAN bus. Separate buses are then interconnected via a gateway.
fmntf··on Italian scientists hacked pizza physics to make dough without yeast
"sono intollerante al lattosio"
fmntf··on SingleFile: Save a complete web page into a single HTML file
Could you please elaborate what script is injected, that reason and why it is that out of your control? Thank you
fmntf··on PlayDate Fulfillment Delayed
My 2011 car has ECUs for: engine, brakes, ABS, air bag, air conditioning, alarm. All of those are connected to a gateway, that is another ECU. Do you want parking sensors? That's another ECU. Multimedia? That's one or two. Cars of 2000 have not much less ECUs. Consider also that components to build such ECUs are now totally obsolete and out of production.
fmntf··on The Linux Kernel Module Programming Guide
In my opinion the best way to do kernel development is to just look at device drivers in kernel sources, study what current drivers do and write your own driver. The kernel supports su much heterogeneous devices and its APIs change continuously that it is practically impossible to write a complete guide on this topic.
fmntf··on LinuxBoot: Linux as Firmware (2018)
For which platform? It is really hard to boot an x86 board without using a commercial UEFI.
fmntf··on Software is eating the car
I work in the automotive. I think that this is the trend. At the begin, smartphone projection was just calls, music and navigation. Now such systems are interested in signals coming from the car.. guess why!
fmntf··on Submarine Cable Map 2021
Well, it includes shipping :)
fmntf··on Cars are about to be a software platform, subscriptions and all
That's unrealistic. A car contains several ECUs. Each ECU has one or more MCU/CPU. Every core runs its software, 99% of the time documentation is available only under NDA. Reimplementing the software for just one MCU/CPU is challenging even for who is part of the industry.
Page 1 of 3Next →