Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I never owned a car with such a system. Do they at least give you a way to install uBlock and NoScript or will that brick the car?


You're joking, right? The systems are locked up tight. I did manage to hack into my Porsche Macan's system so that I could turn Apple CarPlay on (it's disabled in the Macan, but supported by the system because the unit is shared with the VW Atlas which has CarPlay), but it involved a pretty complicated jailbreak.


What generation had CarPlay disabled? It works very nicely in 95B.2 and .3, and the pre-facelift 95B models with PCM 3 didn't support CarPlay at all without an adapter, did they?

I know full-screen CarPlay isn't supported without a jailbreak, but I don't care about that myself so haven't done it.


You're joking, right?

Only 3.1415% joking. I predict people will eventually get credits for saying things like, "Brought to you by Carl's Jr." in their car, bonus if the kids also repeat it. But seriously I figured someone would have found Easter-eggs by now that allowed some form of super-duper-root similar to windows god-mode.

I am honestly surprised that car manufacturers have not been sued into oblivion for adding distractions.


There's less attack surface on these systems than your typical windows install. The only reason I was able to hack the Macan is because they'd left a debug avenue open such that you could plug an ethernet adapter into one of the USB ports and use it drop a shell, and then exploit a bug with handling of a certificates to get privileged access. I was more surprised they'd left that USB ethernet avenue open than that there was a certificate handling bug.

I believe since I did it, somebody found another way in by inserting a malicious payload into a USB firmware update image.


I had an old Prius with a nav system that disabled all the controls when the car was moving. But it also had a full-screen page of legalese that you had to dismiss every time you started the car.

So Toyota's lawyers were OK with drivers reading a legal contract, but not with drivers pressing a couple buttons to get where they need to go.


Drink verification can to continue journey




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: