Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Would you feel the same way if we're talking about your car's driver-assistance ECU? If you can change its contents, then so can a remote attacker.




"remote"? No. I want my driver-assistance ECU to be air-gapped but fully reprogrammable locally. After all, even with a totally tivoized ECU, a physically present attacker could still make my car kill me by cutting my brake lines.

When it open source, it can be patched to fix RCE. Binary blobs are much harder to patch, so just buy a brand new car with brand new RCE.

> Open source === RCEs/vulnerabilities

Welcome back 2005 bill gates




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: