inahga · HackerTrans

Tesla https://www.tesla.com/support/vehicle-firmware-prevent-autos...

Ford https://www.caranddriver.com/news/a70513450/ford-4-million-v...

GM https://www.themanual.com/auto/gm-brake-fluid-warning-recall...

I think Chrysler does it too, but I only find mention of the time they bricked a bunch of Wranglers with a bad OTA update.

Broadly I don't think it's hard to imagine a software update being safety critical if the software is used in a safety critical system.

inahga

2 mesi fadiscuss

Has anyone experienced a case where they needed an over-the-air safety update/recall performed, but weren't able to because they removed the cellular modem?

I'd like to think failure to apply an OTA safety update would trigger a mail-out notification requesting you bring the vehicle into the dealer. But that's probably optimistic...

inahga

4 mesi fadiscuss

The ciphers used by WireGuard are not FIPS 140-3 certified. So you have to also change the ciphers, as is done in this project.

inahga

4 mesi fadiscuss

On the contrary, GP's warning saved my time and attention. For that I thank them.

inahga

5 mesi fadiscuss

You should persist certs somewhere. Otherwise your availability is heavily tied to LE’s uptime.

inahga

6 mesi fadiscuss

Mostly, if not entirely due to intentionally poor breeding practices. Who betrayed who?

inahga

8 mesi fadiscuss

Watching this classic channel may be safer https://youtube.com/playlist?list=PLU4IMu04MIlJgB6Aaj07q-5iX...

inahga

8 mesi fadiscuss

Sure, I don't mean this to arouse anger. I point it out for the Democratic primaries in March. https://ballotpedia.org/Illinois_gubernatorial_and_lieutenan...

inahga

8 mesi fadiscuss

If he doesn't, he needs to be forthright about it in his speeches and podcasts. "The ISP is disobeying my direct orders."

Until then, he bears responsibility for their actions.

inahga

9 mesi fadiscuss

I don't think the software hacking side of Wrangler mods is barren. e.g. https://www.jlwranglerforums.com/forum/threads/jeep-hacking-..., which IIUC has been commercialized into https://www.zautomotive.com/products/z_tzr_jlm.

I don't know that anyone has broken the head unit firmware though.

inahga

10 mesi fadiscuss

For those (i.e. me) who were concerned that the cert wasn't actually revoked, it is.

https://crt.sh/?id=20924740030

    $ curl -s http://r13.c.lencr.org/105.crl | openssl crl -noout -text | grep -A1 899DE8
        Serial Number: 055B8B1F23D5BCF09DD8E9CAF8798F899DE8
            Revocation Date: Sep 10 16:00:16 2025 GMT

comments