[cookiengineer]

> air gapped

Good joke. Have you seen any of the stolen cars because of CAN Bus security flaws lately?

Nothing is air gapped. The Android entertainment system running 4.0 because of 32MB RAM requirements is fully connected to the CAN bus.

It's a safety nightmare.

[Klathmon]

Not even just lately, I remember around 2010 it was found that at least one car model could be exploited through the TPMS (tire pressure sensors)

[hgjbfubv]

Considering they literally had to latch onto the specific canbus to do that it means that you can’t just hack the head unit and expect to cutoff the engine. Not saying it can’t be done, but many manufacturers put in gateways to prevent that kind of thing.

[drtgh]

They are not doing it well then,

https://www.propelex.com/hacking-cars-remotely-with-vin-numb...

[TheLoafOfBread]

Yes but there is more than 1 CAN bus network and they are isolated from each other via gateway. So you can't just take control over infotainment and start poking into brakes. Messages won't get routed through the GW.

[geraldhh]

afaik this is true for some models.