this post was submitted on 12 Oct 2025
82 points (95.6% liked)

Canada

10551 readers
445 users here now

What's going on Canada?



Related Communities


🍁 Meta


🗺️ Provinces / Territories


🏙️ Cities / Local Communities

Sorted alphabetically by city name.


🏒 SportsHockey

Football (NFL): incomplete

Football (CFL): incomplete

Baseball

Basketball

Soccer


💻 Schools / Universities

Sorted by province, then by total full-time enrolment.


💵 Finance, Shopping, Sales


🗣️ Politics


🍁 Social / Culture


Rules

  1. Keep the original title when submitting an article. You can put your own commentary in the body of the post or in the comment section.

Reminder that the rules for lemmy.ca also apply here. See the sidebar on the homepage: lemmy.ca


founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] PenguinTD@lemmy.ca 3 points 1 day ago (2 children)

It's a serious security hole cause the software can be updated through network, the version gets audit and all the follow up update can be good, but the moment it needs to go rogue you just need 1 malicious update to have serious and wide spread harm/attack on a button.

IMO for any vehicles to allow over the network update is beyond stupid. (yes, that includes Tesla.)

[–] HertzDentalBar@lemmy.blahaj.zone 4 points 11 hours ago (1 children)

Hey kinda like the F-35

It's fine though when the Americans do it do is.

[–] SaveTheTuaHawk@lemmy.ca 3 points 6 hours ago (1 children)

Carney is still buying those lemons the US Navy rejected. I guess elbows out means buying overpriced junk while cutting all services.

"how do I hold all these" meme but instead of his arms it's just elbows

[–] nik282000@lemmy.ca 2 points 1 day ago (2 children)

There are a few good defcon talks where it has been shown that the engine control and body control can be accessed and modified via the "infotainment" system (the one I saw specifically was Jeeps).

[–] Clearwater@lemmy.world 1 points 17 hours ago* (last edited 17 hours ago) (1 children)

Once you're inside a car that's on, there really isn't any security*. The OBD2 port that every remotely modern car has is perfectly capable of accessing all the diagnostics and data streams the car has, and can also control/reconfigure the various computers.

IMO that doesn't really matter, since the system isn't powered until the key is in the ignition and the car turned on. You can't do anything with the key off, and if your passenger wanted to sabotage the car, they'd just yank the wheel as you drive down the highway.

That said, yes OTA updates are a travesty. Specifically because cars have so little security, having any access to their computers from the outside is a massive risk... And if there's a potential that the country the manufacturer is in turns hostile, that risk certainly isn't reduced.

* A handful of manufacturers have "added" security to their systems by... (drumroll pls) restricting access to the systems and requiring a subscription for full access. That's fucking evil and doesn't even do anything (at least for a mechanic or tinkerer like me) since you can just google "FCA bypass cable" and skip right past the firewall.

[–] nik282000@lemmy.ca 1 points 6 hours ago (1 children)

Modern cars expose the engine/body control CAN bus through the fucking headlights. You don't need to be in the car and it doesn't need to be on for you to have the same or more access than the OBDII port.

It doesn't matter what the country of origin is, someone is gonna find a way to break OTA updates, gain access via exposed wireless networks or just pop off a CAN bus controlled light and plug in. How long before someone pushes a malicious update that causes the ABS to disable or degrade braking to near 0%, or just throw the electronic power steering full left whenever the speed exceeds 101km/h?

[–] ProgrammingSocks@pawb.social 1 points 1 hour ago* (last edited 1 hour ago)

But that would be silly, because the easiest way to kill someone without consequence is to get behind the wheel and run them over. People could also be putting bombs in product boxes and poison in medicine. A coherent society doesn't have these problems.