logoalt Hacker News

mystralineyesterday at 8:35 PM3 repliesview on HN

Yeah, TPMS and the way its implemented is a BAD idea.

1. Data is not signed.

So data can be easily spoofed and jam up the real sensor's transmissions.

2. Serial number is not obfuscated or in a reduced serial number set.

This allows TPMS trackers to be placed at high vehicle through areas and uniquely track cars. Is dying out due to Flock and ALPRs.

3. Some cars, primarily luxury, will force slow you down to 15mph, honk horns, and go into limp mode.

Note this is trusting unencrypted, unsigned, cleartext data. This is a terrible idea, and you cant turn it off.


Replies

xnxyesterday at 8:37 PM

> 3. Some cars, primarily luxury, will force slow you down to 15mph, honk horns, and go into limp mode.

I'm surprised some company hasn't sold a "gun" to law enforcement that will disable cars remotely this way.

show 1 reply
psunavy03yesterday at 8:46 PM

This is no different than the internet, really. "Hey, we made this thing to operate in a safe environment." Years later: "Oh, crap, what do you mean it needs to be secured?"

henvicyesterday at 10:14 PM

> 3. Some cars, primarily luxury, will force slow you down to 15mph, honk horns, and go into limp mode.

Source? I can't find any reference. It looks like you're hallucinating.

show 1 reply