How To Hack a BMW: Details On the Security Flaw That Affected 2.2 Million Cars 83
0x2A (548071) writes BMW recently fixed a security hole in their ConnectedDrive software, which left 2.2 million cars open to remote attacks. Security expert Dieter Spaar reverse engineered the system and found some serious flaws [note: if you'd prefer English to German, try this translation], including using the same symmetric keys in all vehicles, not encrypting messages between the car and the BMW backend or using the outdated DES.
Definition of "Remote Attack" (Score:5, Insightful)
Somehow I don't think the definition of "remote attack" is "disassemble the computer, attach all kinds of expensive hardware to analyze communications and firmware, hack into the firmware to retrieve the encryption keys, so only then you can use a base station emulator to trick the car into thinking your remote machine is a BMW firmware server."
The "remote attack" requires physical access, specialized skills, and intense hardware interaction. It is not something that some Romanian skript kiddie can pull off from their mom's basement.
Re: Definition of "Remote Attack" (Score:5, Informative)
Re: (Score:2, Informative)
I recall this whole BMW research started when BMWs were getting stolen off the drives of their owners with what appeared to be a box
This video perhaps?:
https://www.youtube.com/watch?v=HxVO5OVaCkA
But this was a long time ago, 2012... and BMW still has major security flaws?!
Re: Definition of "Remote Attack" (Score:4, Informative)
And it's not just BMW, it's for all kinds of makes and models. Hell, you can go to Dealextreme and buy many unlocking tools, just by searching for unlocking tools. And I'm not talking about the kit of stamped spring steel pieces, either.
Re: Definition of "Remote Attack" (Score:5, Interesting)
One of the most common attacks is actually the simplest. The thief waits in the car park with a jammer. Most cars use 433MHz in Europe, penalty 915 in the US. The victim walks away and presses the lock button on their key fob and doesn't notice that the car didn't actually respond. Once inside the thief can use the OBD-II port to steal the car.
I prefer keyless entry as you press a button on the car to lock it, and even if jammed it will always lock.
Re: (Score:3)
My car honks when you hit the remote lock button
In VAG cars, and possibly many others, that honk is an option which can be changed by twiddling an option code which can be looked up in the dealer's service data (which comes on DVD.)
Re: (Score:2)
In VAG cars, and possibly many others, that honk is an option which can be changed by twiddling an option code which can be looked up in the dealer's service data (which comes on DVD.)
What's your point? Most alarms give an indication that the system is armed and most people that I know look for that indication as they walk away. If the horn doesn't sound or the lights don't flash when I arm the alarm, I check to see why not.
Re: (Score:2)
What's your point? Most alarms give an indication that the system is armed
But they don't all, and even some of the ones which do by default have been changed by the dealer at customer request. That's the point. Was not complicated.
Re: (Score:2)
A patient thief would just wait for someone to walk off and not notice. In a busy car park, it probably wouldn't take long. An impatient one could just club you in the back of the head with a tire iron while you're busy trying to figure out why the remote isn't working.
Re: (Score:2)
One of the most common attacks is actually the simplest. The thief waits in the car park with a jammer. Most cars use 433MHz in Europe, penalty 915 in the US. The victim walks away and presses the lock button on their key fob and doesn't notice that the car didn't actually respond. Once inside the thief can use the OBD-II port to steal the car.
I prefer keyless entry as you press a button on the car to lock it, and even if jammed it will always lock.
I dont walk away from my car until I hear the poorly synchronised clunks of the door locks.
Not that I'm worried about jammers and MITM attacks (they haven't quite made it to Australia just yet), rather I'm yet to find a key fob that works perfectly every single time. If you're pointing a little bit too far in the wrong direction or your body is in they way enough that it blocks the signal your car fails to lock.
Almost all cars have a visual signal (normally the indicators flashing) and most cars have
Re: (Score:2)
Like that time I gave the Libyans a shoddy bomb casing full of used pinball machine parts?
Re: (Score:1)
What I want to know is: Since this is a 'trend' a lot of car manufacturers are headed to, in another couple years where am I going to be able to buy a car that doesn't have all this crap in it? CAN bus is ok to a degree, but I don't want (or need) a bluetooth/wi-fi enabled integrated digital everything car. Give me the old 'needle' speedometer, flipping number manual odometer, etc - I don't want a 'digital display' where everything breaks at once if it dies, I don't need or want my stereo integrating into
Re: (Score:1)
You won't be able to. Because you aren't paying enough up front for the vehicle, the manufacturer also needs ongoing revenue for as long as the car is being driven. They will get this money by selling your driving habits and vehicle problems to whomever will give them money.
Hell, the federal gov't will happily go along with this because they want to be able to track your movements in real-time. Because you are a terrorist.
Re: (Score:2)
Re: Definition of "Remote Attack" (Score:4, Informative)
You only need physical access to the Commbox from to a single car to extract encryption keys that can be used to steal many cars. That's the flaw. The cellular base station emulators are readily available.
Re: (Score:2)
Somehow I don't think
You could have stopped right there. FTFY
Re: (Score:2)
Somehow I don't think the definition of "remote attack" is "disassemble the computer, attach all kinds of expensive hardware to analyze communications and firmware, hack into the firmware to retrieve the encryption keys, so only then you can use a base station emulator to trick the car into thinking your remote machine is a BMW firmware server."
The "remote attack" requires physical access, specialized skills, and intense hardware interaction. It is not something that some Romanian skript kiddie can pull off from their mom's basement.
The "disassemble the computer" part was only for the initial analysis of how the whole system works. Only one person needs to do this and can then sell the information. With the information from that one single disassembled box, it is possible to remote attack (without physical access other than standing within a couple hundred feet) any other BMW car with the same "connected drive" feature. That is (as described in the article), walk around with the cellular network emulator to trick vulnerable cars to con
This is why I quit web programming (Score:5, Interesting)
A company as big as BMW should be able to hire some security experts, so this should be a bit embarrassing for them.
But the truth of the matter is, doing security is not easy. Take web programming, for instance. Back when I first learned PHP, I found over and over that whatever design or coding approach seemed most straightforward and intuitive was inherently unsecure. All sorts of escaping and manual insertion of encryption functions are required, and that clutters up the code to the point of making it hard to maintain. I did manage to implement most of it in a common PHP file that I reused over and over again, but there was a huge learning curve, and it was a pain. Since then, people tell me that it's gotten a LITTLE better. For instance, database wrappers generate the SQL queries for you and automatically escape strings. But for the most part, it still sucks.
If there were a single best book to read on cyber security, then perhaps we'd have fewer problems like what BMW had. But in reality, to get good at it, you have to have a vast familiarity with the literature and tools. You do that much reading, you might as well get a PhD. And my friends with PhDs focusing on security are in academia, not industry, so we get more security papers but not more secure devices.
Re:This is why I quit web programming (Score:5, Informative)
A company as big as BMW should be able to hire some security experts, so this should be a bit embarrassing for them.
But the truth of the matter is, doing security is not easy.
No, the truth of the matter is in your first paragraph. Designing and building a car is not easy. Not making complete fucking moron decisions about security is easy, if you hire someone vaguely competent. BMW decided to skip that step to save a few bucks to ensure nice corporate bonuses, and customers suffered. BMW should be on the hook for each car stolen in this fashion, and have to pay complete replacement value, because they failed to make a good-faith effort at security.
Re: (Score:3)
But isn't connecting a car to the internet inherently stupid (for the consumer, not the vendor)? The risk of theft and car crashes via hacking are inherent in such a design decision whereas there are few benefits, such as getting updates without visiting the dealer.
By connecting your car to the internet, billions of people and a few thousands of hackers and govt agents can now gain control of your car,
Re: (Score:2)
But isn't connecting a car to the internet inherently stupid (for the consumer, not the vendor)?
Yes, it's both stupid and unnecessary. If I must have a network in my car, then why not just let me download an ISO, burn a CD, and slip it into my CD player? The factory stereo is probably already an MP3 player, and already on the CAN bus, so all the necessary hardware ought to be there. Many cars have a USB port for music now too, so obviously putting the image on a flash drive would be even better. Many Blu-ray players update using this model, and it seems to work fine there.
But with that said, these guy
Re: (Score:2)
It's like connecting your toaster to the internet -- pointless and not very useful.
Not useful? With this toaster running NetBSD [embeddedarm.com] you can program all the toaster's features remotely.
Re: (Score:2)
At some point, you still have to walk over to the toaster to put the bread in it. While you're there, it's not a big deal to program the toaster by twiddling a few knobs or pushing a button or two. You also have to be there to remove the toast when its down. A toaster running NetBSD is still a cool project, but that doesn't mean it's really useful.
Re: (Score:2)
At some point, you still have to walk over to the toaster to put the bread in it. While you're there, it's not a big deal to program the toaster by twiddling a few knobs or pushing a button or two. You also have to be there to remove the toast when its down. A toaster running NetBSD is still a cool project, but that doesn't mean it's really useful.
Good points all, though, I was actually being sarcastic - sorry. Personally, I never run anything in the kitchen, or at home in general, that can easily catch itself or something else on fire w/o supervision.
Re: (Score:2)
But isn't connecting a car to the internet inherently stupid (for the consumer, not the vendor)? The risk of theft and car crashes via hacking are inherent in such a design decision whereas there are few benefits, such as getting updates without visiting the dealer.
It's like connecting your toaster to the internet -- pointless and not very useful.
Right. There is no conceivable use case to connect a car to the internet. Current traffic conditions and best route information for current conditions? What use is there for that? Streaming music? Who would want that? Automated reporting of accidents when the occupants are non-responsive? What a dumb idea, right?
Re: (Score:2)
Right. There is no conceivable use case to connect a car to the internet. Current traffic conditions and best route information for current conditions? What use is there for that? Streaming music? Who would want that? Automated reporting of accidents when the occupants are non-responsive? What a dumb idea, right?
The only part of that which requires communications with the rest of the car is the accident reporting, and that can be one-way. But that's not how automakers have implemented their infotainment systems. They're just now beginning to use ethernet between the purely entertainment modules, and steering wheel controls are overwhelmingly still carried over a bus that has more important jobs to do.
It's not that it doesn't make sense to have an internet-connected system in the car, it's that it doesn't make sense
Re: (Score:2)
But isn't connecting a car to the internet inherently stupid
Not at all, as long as the functionality of said connection is limited. My Nissan has internet connectivity but it is only used to allow me to control non-critical stuff like the aircon and battery charging, or for the sat-nav to update its list of POIs. Nissan seem to have a clue when it comes to security - there are actually two OBD-II ports, and the one accessible from the cabin is read-only so can only be used for diagnostics and data logging.
At least there's a reasonable market factor (Score:3)
BMWs are expensive, BMW drivers tend to be affluent, affluent people can afford good insurance, replacing a stolen car is expensive, insurance companies will charge a higher premium on easily stolen models, affluent people might choose other cars because of high premiums and reduced sales and bad PR will force BMW to improve their security.
In theory, at least, the market response to easily stolen cars puts pressure on the carmaker to improve security.
Re: (Score:2)
I read somewhere that people in London can't even get insurance for certain models of BMW any more.
Re: (Score:2)
I was under the impression that most people purcahsed cars every 3-5 years. So I'm not sure why you think that market pressures will force them to fix the problem on existing models. On future models, sure...
they used encryption, hmacs, thought they knew (Score:5, Informative)
>. Not making complete fucking moron decisions about security is easy, if you hire someone vaguely competent. BMW decided to skip that step to save a few bucks to ensure nice corporate bonuses, and customers suffered.
Their developers encrypted the relevant text messages and used hmac to ensure their authenticity, so they thought it was reasonably secure. It's not that they were INCOMPETENT developers, the issue that none of them were security experts. Because true security, security that can't be broken fairly easily by an expert who then publishes a tool for script kiddies to use, IS hard. BMW's programmers did as much as I'd expect any application programmer to do. It's then time for the security audit, by a truly qualified security person, to catch the kinds of mistakes that the author caught. I work with some very good programmers. Some of them are really good at UI design, some are good at managing large projects, some are very versatile. It's a really good team of professional programmers. I catch security errors they make all the time because I'm the security guy. On the other hand, they have to fix my GUIs to look nice because I'm not good at designing attractive GUIs.
ps more than 20 years experience, still screw up (Score:3)
PS, though I've been focused on computer security for twenty years, and before that worked as a locksmith and a private investigator, I STILL make mistakes. I STILL looks and things I've done and say "well that was dumb". I'm still learning, even still taking formal classes while I also serve as an expert consultant for build new courses in security.
My IQ tested as - let's just say "well above average" - so if it were easy you'd think I would have figured it out by now.
Re: (Score:3)
Clearly, you are the only person commenting on Slashdot that makes programming mistakes.
Re: (Score:3)
It's not that they were INCOMPETENT developers, the issue that none of them were security experts, and didn't bother to consult any.
FTFY.
exactly, and consulting can be only ~$1,000 IF (Score:3)
Agreed, 100%. Further, IF you know what to look for when choosing your expert, rather than hiring them through three levels of middlemen, for a relatively small project you can pay him $500 to have a phone call early in the design phase and show up at a later planning meeting to review the design, then $500 more to review the final code and make adjustments that are minor to do, but have major impact. Of course you can also pay HP $10,000 to send him out. HP will pay TCML $3,000, and TCML will pay the ex
Re: (Score:2)
If a major car manufacturer spent only $10k, let alone went with the budget $1,200 option, I think we would be criticising them for being cheap and not valuing security enough. For a system that will be deployed world wide in hundreds of thousands of vehicles they should be setting up a security department and hiring a team of experts to work full time on implementing it right.
Re: (Score:2)
If the security was present, well designed, and well implemented, I don't think most would care how they necessarily did it.
Re: (Score:2)
BMW's programmers did as much as I'd expect any application programmer to do. It's then time for the security audit, by a truly qualified security person, to catch the kinds of mistakes that the author caught.
No. Security is not an afterthought or something do be approached at the end. It needs to be an integral part of the software development lifecycle from soup to nuts. Anything else results in "ship it now, we'll fix it later" decisions and we end up where BMW is today.
good point, mentioned in my other post (Score:2)
That's a good point, and one that I mentioned in my post which appears just above yours, but not my GP post.
Depending on the complexity of the project, budget, and impact, it sometimes make sense to engage the expert at three points:
Early planning (might be a conference call)
Late planning (to validate the design/architecture prior to much coding)
Pre-release (to check for any oversights in the actual coding)
Re: (Score:2)
Using the same key for each car is a pretty obvious flaw that's bitten a few companies. Having your car compromised by a motivated expert is pretty much unavoidable. Having all your cars compromised by one motivated expert, once, and anybody with a passing familiarity with Google afterwards, is really something that shouldn't happen anymore.
Re: (Score:3)
"No, the truth of the matter is in your first paragraph. Designing and building a car is not easy."
Maybe to dumb people it's not easy. to the rest of us... yes it really is easy. It's a well defined and massively repeated process. An engine is trivial, a car suspension is trivial. a whole car is trivial.
When you add shit to it for the sake of adding shit.. That is when it get's complex. No I dont need a computer on my brakes. a computer to the side of my brakes looking for slipping and trigger a modu
Re: (Score:3)
An engine is trivial, a car suspension is trivial. a whole car is trivial.
Bull, followed by shit. Making a car that will function as well as a Model T is pretty easy, any dick with a little machining and welding experience can probably manage that. Making a car that will function as well as the lamest BMW, let alone something as complex as the i8, is a massive engineering challenge just to execute, let alone to do well.
No I dont need a computer on my brakes. a computer to the side of my brakes looking for slipping and trigger a modulation piston to give me anti-lock? Sure. but if the computer fails, I will have brakes.
It's sad that you think you know so much about cars, but you don't know that this is how ABS works. When the system isn't doing anything, the valving permits pedal
Re: (Score:2)
Ahh I wondered when the resident Slashdot moron would come back out to troll me.
How you been?
Re: (Score:2)
Pretty sure the "brake by wire"is a reference to the Prius's problems.
Re: (Score:2)
Do you know how stupidly complex the Model T's controls were? Whatever Henry Ford was smoking when he released that I would like some of.
But I agree with your post. Anyone who thinks designing a car with off the shelf engine and suspension parts is delusional and has clearly never tried to modify a car. You cant simply buy bits off
Re: (Score:2)
A company as big as BMW should be able to hire some security experts, so this should be a bit embarrassing for them.
But the truth of the matter is, doing security is not easy. Take web programming, for instance. Back when I first learned PHP, I found over and over that whatever design or coding approach seemed most straightforward and intuitive was inherently unsecure. All sorts of escaping and manual insertion of encryption functions are required, and that clutters up the code to the point of making it hard to maintain. I did manage to implement most of it in a common PHP file that I reused over and over again, but there was a huge learning curve, and it was a pain. Since then, people tell me that it's gotten a LITTLE better. For instance, database wrappers generate the SQL queries for you and automatically escape strings. But for the most part, it still sucks.
If there were a single best book to read on cyber security, then perhaps we'd have fewer problems like what BMW had. But in reality, to get good at it, you have to have a vast familiarity with the literature and tools. You do that much reading, you might as well get a PhD. And my friends with PhDs focusing on security are in academia, not industry, so we get more security papers but not more secure devices.
Problem is, you are not a security professional/expert, nor should you be as a web programmer.
In similar fashion, people doing security for BMW should be security professionals and not engineers that just got tasked with also developing security.
It happens way too often, in almost every industry.
Usually to "save money". Pretty ironic.
Re: You know, im fine with a car that doesnt have (Score:2)
Isn't anti-lock braking accomplished with a CPU between the brake pedal and the brakes?
Re: (Score:2)
Not originally. Originally ABS was all mechanical. Nowadays they have a ECU fo do a "better job" at it (things like detecting slippage/lock on a per wheel basis).
And even then, if the ABS electrics fail, you still have full brake power, just no anti-lock. So even then, there is no "CPU between the brake pedal and the brakes". At least on every car pre 2005 (I stay away from any car that is newer, so I don't know about new ones, but I would be amazed if the brakes are fly-by-wire even now)
Re: (Score:2)
Definitely not. The ABS is alongside and can influence the applied braking force, but even with power off, the brakes still brake.
Re: (Score:3)
Early ABS: can only reduce brake force. very dumb.
Slightly later ABS: gets the ability to pump. still very dumb. But now it can be used by traction control systems. First yaw control systems implemented on production vehicles in the late 1990s, using this functionality.
Modern ABS: increased sampling speed permits determining how fast the wheel locks up, which lets you take a good stab at detecting snow/gravel. Wheel is permitted to stay locked up longer under these conditions to build up something to stop w
Re: (Score:2)
A friend of mine mentioned her courtesy car at the mechanic was an audi with a button to apply the emergency brake. I didn't believe her. These things really do exist?
Re: (Score:2)
A friend of mine mentioned her courtesy car at the mechanic was an audi with a button to apply the emergency brake. I didn't believe her. These things really do exist?
Yep. They are now common on luxury cars. You need a scan tool which speaks non-standard (vendor-specific) OBD-II commands in order to even change the brake pads, because sending a command to the ABS computer is how you retract the EPB. For an Audi, that means $250 for K-line cars, and $350 for CAN-bus cars.
Re: (Score:2)
So do they fail on or off? If you're driving along and your battery cable falls off, does you e-brake immediately go full on, or not work at all?
Re: (Score:2, Troll)
So do they fail on or off? If you're driving along and your battery cable falls off, does you e-brake immediately go full on, or not work at all?
It doesn't work. People don't believe in e-brakes any more, so now they're just parking brakes. Seriously, if I post about a paragraph rant about how there's no such thing as an e-brake, I'll bet you a dollar that some asshole will come along and claim that they were never anything more than a parking brake. But as the owner of a car whose e-brake system is actually capable of making a (one (1), that is) full-speed panic stop, that is to say a W126 Mercedes-Benz, I find this notion ridiculous.
EPBs are bad,
So; it was a move to HTTPS... (Score:2)
So; it was a move to HTTPS...
http://grahamcluley.com/2015/0... [grahamcluley.com]
Did they bother to fix heartbleed and POODLE while they were in there, or are they using an old stack, and it's still perfectly posible to implement the attack with a single additional step? In other words is this a "We must take some action!" fix, or is it a "We must take effective action!" fix?
BMW software sucks big time. (Score:4, Interesting)
Root cause of the problem seems to be some rigid adherence to specs and dim-witted error recovery process. If one mp3 file has a mismatch between its header declaration and its data section, that mp3 can misbehave. OK I will concede that. But the default action on seeing this mismatch should not be the whole entertainment module to crash, reboot and rescan the 8 GB memory stick all over again for media files. When it crashes and rescans, bluetooth does not work.It reminds me of Digital workstations where none of the the IEEE exception handler I install would work. Their default handler, which is to crash the process and write a coredump would kick-in no matter what I declare as error handler. BMW seems to be using an even more extreme version of this mode.
BMW is our customer, and they buy some engineering design analysis suites that we make in my place of work. I wonder how they will behave if I crash the entire computer every time a BMW engineer feeds an incorrect data to our suites.
I am not surprised it has so much of vulnerabilities. Anything that crashes this much will fall back to single user super user mode and present a console to the attacker sooner or later.
Re: (Score:2)
Which is funny because my 2007 BMW X3 connected with everything including nexus 4 HTC M8 etc...
The problem is BMW is pulling a GM and having their own people make the electronics now and they suck at it. the older Telematics modules were far better, same as the becker/alpine radio systems.
Re: (Score:3)
Re: (Score:2)
Serious question: Am I alone in the thought that modern "infotainment" systems built into new cars are generally not useful items to have?
My own horror story involved borrowing a friend's Ford Flex to make a delivery of communications gear that wouldn't fit in my old BMW 325i: I tried, eyes-off-road, to get my then-current Droid 4 to sync with the Ford Sync, only to find that I had to stop the car first. I tried for a total of about 40 minutes. It should've just said "Hey, asshole: Stop the car and try
Re: (Score:2)
Re: (Score:2)
The main application for piping your phone through your car audio is that phone calls are clearer, and you get access to your audio books, music, or online newspapers that have an audio stream. In other words, making sure that your car system isn't obsolete 3 years after you buy it requires a tethering mechanism. And bluetooth is the simplest one out there.
I worked on the ConnectedDrive system (Score:5, Interesting)
To be precise, for the 'old' version of the app (My BMW Remote App) for non-i models we started off with this black box library (CD lib) which handled all the communication with the BMW servers.
While I didn't do any protocol analysis or looked at the communication between car and servers, even for this iOS app it was pretty clear to me and my colleagues what the security implications would be if someone were to be able to obtain log-in data just for that part of the communication.
Depending on the market (America, Europe, Japan, etc.) there are some limitations to what one can do with the app (based on the type of account, IIRC), such as from what range one can see where the car is on a map and whether one can unlock doors with the app or not (not allowed in the US market, from what I recall). Where these limitations are enforced I'm not sure. It might be based on the server, in which case this hack would bypass such limitations as well.
At any rate, this security leak does demonstrate quite succinctly how important it is to properly security audit such systems before releasing it into the wild. Even for the current project I do for BMW (related to the headunits), having an active internet connection means that security is essential, including plugging buffer overruns and similar.
Nobody wants to have one's headunit go blank during navigation, in a constant reset cycle or be turned into a spying device, after all
Note that I'm still under NDA for all of these projects, so I can't go into much detail.
Looks like they never considered security (Score:2)
Re: (Score:3)
Like most companies security is considered a cost, an inconvenience or an after thought. Looks like there is no one who knows anything about security in the entire chain of designers who came up with this design for the cars. They seem to rely on security by obscurity.
Looks like a sneak preview of the future of the Internet of Things.
Who ever thought we would have to worry about the security of our toasters?
Re: (Score:2)
Who ever thought we would have to worry about the security of our toasters?
Just wait until your toaster is sitting in the garage trying to warm up for the morning commute.
And your BMW is in kitchen, trying to make toast.
Moral of the story.... (Score:3)
Everything is hackable... OnStar that has been in millions of GM cars is just as hackable using the EXACT SAME TECHNIQUES.
So if you have a portable cellsite that can spoof a cellular tower the device is looking for, you man in the middle it.
Nothing new here except that a bonehead in programming the whole system is using the same key over and over to make his job easier.
Re: (Score:2)
Yep. Nothing is 100% secured. :(
I am curious which one is more secured. Electronic (modern cars) or physical (old cars).
Re: (Score:2)
Well, if the security was done correctly (like https) they wouldn't be able to man in the middle it. The car would be able to know it's not talking to the proper server, and anyone just passively ease-dropping on the connection would just get see an encrypted data stream. Apparently this is not how it was done.
How exactly is this news ... (Score:3)
In particular, BMW has a history of similar cockups - just search youtube for various "iDrive problems", "Check engine reset" issues, "Engine stalling" issues, etc. Those software problems go back years. The first iDrive implementation from 2002 using Windows CE was a legendary lemon.
It isn't just BMW, though - http://www.edn.com/design/auto... [edn.com]
I had a Renault Clio and Renault's unreliable electronics is legendary too, even though there it was more a poor design than necessarily bad code. But you will never know - nobody has seen the source code of the firmware in many of the control units. Often not even the manufacturer has it - it is outsourced and subcontracted, even for critical systems like ABS or ECU.
And I am pretty sure that this is industry-wide problem - the same control units are in many cars, especially today with all those shared platforms and alliances between manufacturers.
If someone is thinking about drive-by-wire cars (Nissan, uses a safety clutch to be legal atm, but they have publicly announced a push to go fully by wire http://www.caranddriver.com/fe... [caranddriver.com]) or the recent idea about the OTA updates in this sort of cesspit of horrid and unaccountable code, they must be insane.
Re: (Score:1)
If someone is thinking about drive-by-wire cars (Nissan, uses a safety clutch to be legal atm, but they have publicly announced a push to go fully by wire http://www.caranddriver.com/fe... [caranddriver.com])
Wow, I am so looking forward to being able to get one of those steering sensor+wheel packages from a crusher. That's just the thing to use to build a really quality FF wheel on.