Comment by londons_explore

4 hours ago

Only takes 1 person to make a "safety system faker: Makes car run even with faults" which is a $20 thing you can buy from aliexpress and can be clipped anywhere onto the canbus - just two wires to hook into.

It then runs code which auto detects the car model (fairly easy from the messages on the bus), and has a database of the messages to send/inhibit to change the behaviour in the desired way.

Because so many cars use electronics that are common across a whole manufacturer of cars - ie. all GM cars, or all cars with a Bosche ECU - there won't be awful lot of work making it compatible with hundreds of models of car.

Such devices already exist for faking data for engine tuning, and for faking 'zero faults, all monitors pass' to pass government tests.

You basically get internal faults and cable faults with HV stuff. A box reporting that the AC compressor motor winding isn't shorted isn't going to make the compressor work with a shorted winding. ECU probably wouldn't disengage the powertrain for that though.

And then things like battery temperature warnings will quickly turn into real failures.

And then the next generation or 2 of stuff is going to at least attempt to implement cybersecurity features that greatly complicate tampering at the message level.