cross-posted from: https://feddit.online/c/tech@feddit.online/p/2110045/class-action-lawsuit-claims-honda-keyless-entry-systems-leave-certain-cars-especially-v
A larger attack surface is detrimental to security? Added complexity increases the odds of exploitation? No shit?
One of the advantages of having a 13yo car. Another advantage is nobody would steal it anyway.
Oh.
{Look in my garage}
Damn.
Does anyone know an article which discusses this exploit in depth? I have an older Honda with remote start and keyless entry and I would like to check if I need to be worried. This affects 22-24 and mine is older than that.
The linked article mentions the class action is for model years 2015 forward, so I would assume that’s the start of the current exploit
It does mention the Rolling-PWN attack but that’s been out there for a while and is not easy to perform. I have used my Flipper to explore this attack so this may be nothing new but the class action for this attack. Weird other auto makers are not included as this attack is pretty common using the rolling codes.
We really need to stop and ask drivers what things they actually want in their cars. I bet most need nothing electronic except for maybe a musical screecher…
The key is nice. Electro-mechanical buttons are nice. The only thing that benefits from cpu is that modern substitute for a carburetor (no idea how it is called in English).
The only thing that benefits from cpu is that modern substitute for a carburetor
There are several things in modern cars that benefit from having CPUs in them, safety features like ABS, ESP and AEB comes to mind off the top of my head.
We call it Fuel Injection.
Catalytic converter requires a computer too. Kinda because it requires fuel injection.
Cars have been run by computer for 40 years. practically all cars have been for 30 years.
We really need to stop and ask drivers what things they actually want in their cars.
You won’t get consistent answers—that’s part of the problem. Some people want to be able to connect their phone, some want the car to be a self-contained system with no connectivity. Some people want power windows, some would prefer unpowered crank windows. And so on.
That’s where polls/statistics come in and do their magic. Powerful stuff, actually.
Designing by committee rarely works out well.
Do you think car companies don’t do market research because they don’t have what you prefer?
I think they don’t care about customers’ demands and shovel whatever they can into the cars to increase the price.
Except how well does that play out?
Cars are far from a monopoly. Tesla proved that by poping up and having real sales that ate real market share. To a lesser extent rivian has done the same.
The struggles behind the Nazi cars and rivian are another conversation.
What I’m saying is cars are probably one of the last industries that bad decisions lead to lower sales/profit.
It’s why were slowly seeing a return to physical buttons, because people will buy those cars.
The move to touch screen was a response to seeing Tesla sales.
Theyre not quick to respond, but they do respond.
Yeah they’re greedy as fuck, but there are practical limits to what will actually sell.
What you want just isn’t always what’s popular.
I’m going to give an example for the car key. It’s great for parents who are carrying bags and kids at the same time.
Just because you don’t use it, doesn’t mean people don’t buy cars for it.
Listening to customers demands is what got us into this mess. Everyone wants a big touchscreen. I don’t, but I buy my cars used for 70-95% off the original price so I’m not even a customer.
‘Fuel injection.’
