<story><title>Insecure vehicles should be banned, not security tools like the Flipper Zero</title><url>https://saveflipper.ca/</url></story><parent_chain><item><author>hoofhearted</author><text>Sooo they have been stealing Infiniti&amp;#x27;s from my area recently with relative ease allegedly by using a Bluetooth obd2 reader connected to an android tablet running a pirated copy of some Nissan service tech software.&lt;p&gt;Nobody from any of the Infiniti groups is 100% certain how they are doing it, but the best theory out there is above.&lt;p&gt;Just the other night, a crew of dudes stole 3 Q50’s from my neighborhood with relative ease.&lt;p&gt;Here is the ring cam video my neighbor posted:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;video.nest.com&amp;#x2F;clip&amp;#x2F;8ef4d060588d4c7289f87cccb00cb55a.mp4&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;video.nest.com&amp;#x2F;clip&amp;#x2F;8ef4d060588d4c7289f87cccb00cb55a...&lt;/a&gt;</text></item></parent_chain><comment><author>aetherspawn</author><text>Well for one thing the OBD port shouldn’t be designed so that it has direct access to any useful CAN bus. It should go to a gateway that requires authentication to do anything except read OBD, and all of the IDs that you are allowed to send should be whitelisted.&lt;p&gt;The issue people are mentioning with the headlights is easily solved by just moving the starter CAN to its own CAN bus between the immobiliser and the ECU (physically isolating the headlights), which costs about $5 total and requires no crypto unless thief is willing to cut the car nearly completely in half.&lt;p&gt;(The problem with crypto is the $10 safety MCUs used all throughout cars are only like 20MHz and they can’t really do the 2000+ crypto ops&amp;#x2F;sec on top of their current workload. Also the tooling support for crypto ATM is really poor in the model based design tools that are used for this safety relevant SW)&lt;p&gt;BTW I personally don’t believe that anything that involves cutting into a vehicle is negligence of anyone. I mean, from my perspective, anyone can just pop the hood and drive the car with their own BYO ECU. It’s just a hunk of metal and once you start cutting it up you can make it do whatever you want.&lt;p&gt;I am an automotive systems engineer.</text></comment>
<story><title>Insecure vehicles should be banned, not security tools like the Flipper Zero</title><url>https://saveflipper.ca/</url></story><parent_chain><item><author>hoofhearted</author><text>Sooo they have been stealing Infiniti&amp;#x27;s from my area recently with relative ease allegedly by using a Bluetooth obd2 reader connected to an android tablet running a pirated copy of some Nissan service tech software.&lt;p&gt;Nobody from any of the Infiniti groups is 100% certain how they are doing it, but the best theory out there is above.&lt;p&gt;Just the other night, a crew of dudes stole 3 Q50’s from my neighborhood with relative ease.&lt;p&gt;Here is the ring cam video my neighbor posted:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;video.nest.com&amp;#x2F;clip&amp;#x2F;8ef4d060588d4c7289f87cccb00cb55a.mp4&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;video.nest.com&amp;#x2F;clip&amp;#x2F;8ef4d060588d4c7289f87cccb00cb55a...&lt;/a&gt;</text></item></parent_chain><comment><author>rasz</author><text>Infinite Infinity car hack, came with two, left with three Q50s.&lt;p&gt;They do crouch an awful lot near front wheel well. Reminds me of this Toyota hack where thieves plug into headlight canbus wiring thru wheel arch &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;kentindell.github.io&amp;#x2F;2023&amp;#x2F;04&amp;#x2F;03&amp;#x2F;can-injection&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;kentindell.github.io&amp;#x2F;2023&amp;#x2F;04&amp;#x2F;03&amp;#x2F;can-injection&amp;#x2F;&lt;/a&gt;</text></comment>