Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Would you feel the same way if we're talking about your car's driver-assistance ECU? If you can change its contents, then so can a remote attacker.


"remote"? No. I want my driver-assistance ECU to be air-gapped but fully reprogrammable locally. After all, even with a totally tivoized ECU, a physically present attacker could still make my car kill me by cutting my brake lines.


> Open source === RCEs/vulnerabilities

Welcome back 2005 bill gates


When it open source, it can be patched to fix RCE. Binary blobs are much harder to patch, so just buy a brand new car with brand new RCE.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: