Comment

Comment on Why don’t EVs have standard diagnostic ports—and when will that change? | OBD-II was implemented to monitor emissions, but EVs don't have tailpipes.

<- View Parent

frezik@midwest.social ⁨1⁩ ⁨year⁩ ago

It’s not that simple. The CAN bus isn’t just about unlocking doors and rolling down windows. It also controls airbags and other systems that are time-sensitive. If you’re rolling down in the window at the same time you get in a crash, the airbag message has to override the window rolling message and inflate those bags in right-the-fuck-now time.

Adding encryption to the mix greatly increases the engineering required, even if it’s not used for every kind of message.

source

Sort:hotnew top

isVeryLoud@lemmy.ca ⁨1⁩ ⁨year⁩ ago
Decent encryption can be pretty quick and transparent these days.

Besides, things related to windows, doors, ignition, etc. could be required to be encrypted, while split-second things like air bags could be unencrypted.

This means an attacker who, e.g. bashes your fancy LED headlight to get to the CAN bus within can only do things like trigger your air bags, which isn’t very productive for them.

source
tankplanker@lemmy.world ⁨1⁩ ⁨year⁩ ago
Yes I am aware of that, however the current way that is being looked at addressing the problem is moving the cabling to further within the car, which is just pathetic, like thieves wont just adapt to that.

Encryption really isnt as big a performance impact if it is done correctly, sure it is not cost neutral but ask Range Rover how much reputational damage they had with their piss poor security. They are still having 1 in a 300 brand new defenders stolen after adding what is pretty a traditional immobiliser and tracker.

As an example: iopscience.iop.org/article/10.1088/…/012071

source
- frezik@midwest.social ⁨1⁩ ⁨year⁩ ago
  
  Encryption really isnt as big a performance impact if it is done correctly
  
  “Done correctly” is the trick. This takes careful analysis and design. You don’t just pour on encryption and hope everything will be fine.
  
  source