• Truscape@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    7
    ·
    7 hours ago

    Couldn’t a savvy user just find an exploitable firmware revision, never connect the vehicle to the internet, and install aftermarket software or hardware to bypass the authentication checks? It would be more of a pain in the ass than the previous drop in system, but I’d imagine it’s possible.

    • RvTV95XBeo@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      7
      ·
      4 hours ago

      The vehicle comes from the factory connected to the internet.

      You’d have to find the exploit before they do, and it would be hard to replicate because once they find out, the only cars vulnerable to your exploit are ones manufactured before the patch who have been disconnected from the internet (which is like 2 cars).

      It’s theoretically possible but very hard to replicate. And on top of that theres always the risk of the car manufacturer voiding the warranty on your $50k vehicle and/or cozying up to your insurance company and convincing them any damage is a result of you preventing their systems from running as intended.

      It’s a messy high risk low reward game to play. Better option is to just buy a different car if you can.

    • hayvan@piefed.world
      link
      fedilink
      English
      arrow-up
      17
      ·
      7 hours ago

      Depends on how heavily things are locked down, and how much money this tech-savvy person is willing to risk on a bricked automobile.

      • errer@lemmy.world
        link
        fedilink
        English
        arrow-up
        11
        ·
        5 hours ago

        If the auto industry successfully locks 99.9% of their buyers into their walled garden by making it such a pain in the ass to bypass it, they’ve already won.