this post was submitted on 26 Sep 2024
529 points (98.2% liked)

Technology

59405 readers
2531 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 13 points 1 month ago* (last edited 1 month ago) (1 children)

Why does a car need to be connected to the internet? A reliable rule of conduct in aeronautics is that systems which are deemed critical to safety are air gapped from the systems which are connected to the internet, so in the event that those systems are compromised by malware or hackers, the safety critical systems won't also be compromised.

Why is it seemingly taking automotive manufacturers so long to catch on to this principle? Before anyone mentions downloadable features, I do not see that as a means of justification. Like with videogames, if you're paying good money for a product, that product should already be finished by release. Hiding content that should already exist on a car is egregious and the normalisation of it incentivizes manufacturers to release vehicles that are incomplete and should not have been released in their current state.

[–] [email protected] 5 points 1 month ago (1 children)

This is my car, I have a stereo with entertainment features. My mileage, drive time, fuel economy, and anything related to the systems of the car, shows up on a separate display strip. To the best of my knowledge, the stereo cannot control the car in any way. Its just there to play music for me. I dread the day I have to replace this car. I may just buy an old pre-telemetry 4x4. The roads around here have gotten too bad for a hatchback anyway.

[–] [email protected] 5 points 1 month ago

Yup, that's how it should be across the board. That's how it is with modern airliners. The redundancy of having each system be controlled by multiple computers is nullified if a hacker can get to control all of them, including the ones which are safety critical, just by hacking one. I honestly don't blame you, I love the internet but there really are situations where something really doesn't need to be connected to the internet.

[–] [email protected] 18 points 1 month ago (1 children)

This is why you have to install the latest software updates on your license plate. One time I let my gas cap firmware get outdated and someone downloaded my car.

[–] [email protected] 2 points 1 month ago* (last edited 1 month ago)

$ wget kiasorrento. sh

...looks like it's my car now. 😈😆

[–] [email protected] 6 points 1 month ago (1 children)

smiles contentedly in 2003 1.8T Jetta 5MT

[–] [email protected] 1 points 1 month ago (1 children)

Agreed. But I am getting more and more concerned we won't always be able to keep or buy an old car and avoid these pitfalls

I'm likely 3 to 6 years away from having to buy a new/used car and I don't think il be able to (or actually want) a 20 year old car

[–] [email protected] 3 points 1 month ago

Yeah I have to replace the suction side AC line on mine and the OE part alone is about 350-400 and absolutely impossible to find 💀

[–] [email protected] 21 points 1 month ago (1 children)

This is the problem with digital serfdom, those lording it over us aren't perfect either. Not only should we be able to connect our cars to our own server, we should be able inspect provided server implementation to see if it's a bag of nails.

[–] [email protected] 7 points 1 month ago

aren't perfect either

You misspelled "are fucking morons" :)

[–] [email protected] 41 points 1 month ago (1 children)

FYI: From the article: “These vulnerabilities have since been fixed, this tool was never released, and the Kia team has validated this was never exploited maliciously.

[–] [email protected] 1 points 1 month ago

Well I wouldn't really trust kia, who released these gaping vulnerabilities and benefit the most from pretending ain't no big thing, with these statements

load more comments
view more: next ›