| ▲ | dzdt 6 hours ago |
| There are a lot of cars out there where the head unit has connection to the CAN bus. Which means this malware vector could be used to directly cause crashes. E.g. https://news.ycombinator.com/item?id=19751872 |
|
| ▲ | Ccecil 4 hours ago | parent | next [-] |
| The car hacker's handbook [1] has a chapter on just using the infotainment system to access the CAN. Specifically mentions "attacking through the update system". [1]https://opengarages.org/handbook/ebook/ (chapter 9) |
|
| ▲ | 01100011 5 hours ago | parent | prev | next [-] |
| An aftermarket head unit connects to the CAN bus? The aftermarket head unit I installed certainly doesn't. Are you sure what you are saying, which is true for OEM units, applies to aftermarket ones? |
| |
| ▲ | RealityVoid 5 hours ago | parent | next [-] | | Can't vouch for all car architectures, but in most cases the head unit is QM and safety domains are usually segmented from each other. So even if the head unit talks CAN (it needs to get car data somehow) it will only communicate with the rest of the car through a gateway that will not allow it to take any dangerous actions. | |
| ▲ | karlshea 5 hours ago | parent | prev | next [-] | | Mine does. Its dashboard shows fuel level and a bunch of other things and I can bring up a speedometer/rpm app. I believe the connection exists because the steering wheel buttons/iDrive talk to the original head unit over CAN. | | |
| ▲ | rootusrootus 3 hours ago | parent | next [-] | | That’s wild, I’ve never run across a head unit that had me connect OBD2. I think I would just ignore that bit of the install instructions. | |
| ▲ | kanbankaren 2 hours ago | parent | prev [-] | | > speedometer/rpm This is available on standard OBD-II. Maybe, it is accessible over CAN? | | |
| ▲ | dx4100 2 hours ago | parent [-] | | My OBD-II connector has CAN-C (500kbit) and CAN-B (50kbit) - I use CAN-B primarily because I can control windows, doors, etc + get the speed & rpm. |
|
| |
| ▲ | dx4100 2 hours ago | parent | prev [-] | | Many do - the one I was looking at for my vehicle in particular uses it to restore the steering wheel controls (which are broadcast over the CAN-B low speed bus) |
|
|
| ▲ | jiaosdjf 5 hours ago | parent | prev [-] |
| Manufacturers should be sued to absolute oblivion for doing what any developer would tell you is a security hole. |
