Home
What's new
Latest activity
Authors
Store
Latest reviews
Search products
Forums
New posts
Search forums
What's new
New posts
New listings
New products
New profile posts
Latest activity
Members
Current visitors
New profile posts
Search profile posts
Log in
Register
Cart
Cart
Loading…
What's new
Search
Search
Search titles only
By:
New posts
Search forums
Search titles only
By:
Menu
Log in
Register
Navigation
Install the app
Install
More options
Change style
Contact us
Close Menu
Forums
SVTPerformance's Chain of Restaurants
Road Side Pub
C8 Wont be tunable any time soon
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Reply to thread
Message
<blockquote data-quote="SirShaun" data-source="post: 16254624" data-attributes="member: 163618"><p>Sounds like they made the ECU a certificate authority, and the modules are signed from it, at the most basic level. If at any point that trust chain differs, you got problems. GM could potentially have a root CA, with all the private keys of every one made. Revoke your cert, your car becomes unusable.</p><p></p><p>Depending on the hashing algorithm used and if adhering to modern standards, it could very well never be cracked, or at least not for a very very long time.</p><p></p><p>GM clearly has a method for recerting everything. Unlocking sounds like it will take a serious amount of unauthorized hands on time with whatever GM is planning to use in a replace module scenario to recert. I'm thinking some sort of authentication to a central keystore where the VIN is associated with a cert.</p><p></p><p>You get your own certs in place and a device to manage them, your car is unlocked, and you are to never return to the dealership again.</p><p></p><p>This is a double edged sword in reality. On one side it is good to see this amount of security being introduced as cars become self driving. On the other hand for enthusiasts and hobbyist, it sucks having a car you cannot modify.</p><p></p><p>Do you even own the car at that point?</p><p>I believe there was a recent legal case, which mandated that the software the car utilizes is intellectual property, and we as consumers can be denied access.</p><p></p><p>Next step is get sued for tampering with it. EPA cracking down is just the start, wait until auto manufacturers start going after major tuners.</p><p></p><p>The 3-4k for a tune is going to a standalone, bypassing the stock ECU altogether, because it couldn't be cracked. We now have this problem, plus the fact modules will no longer work. Not only now do we have to crack or bypass the ECU, we have to crack or bypass all the modules as well.</p></blockquote><p></p>
[QUOTE="SirShaun, post: 16254624, member: 163618"] Sounds like they made the ECU a certificate authority, and the modules are signed from it, at the most basic level. If at any point that trust chain differs, you got problems. GM could potentially have a root CA, with all the private keys of every one made. Revoke your cert, your car becomes unusable. Depending on the hashing algorithm used and if adhering to modern standards, it could very well never be cracked, or at least not for a very very long time. GM clearly has a method for recerting everything. Unlocking sounds like it will take a serious amount of unauthorized hands on time with whatever GM is planning to use in a replace module scenario to recert. I'm thinking some sort of authentication to a central keystore where the VIN is associated with a cert. You get your own certs in place and a device to manage them, your car is unlocked, and you are to never return to the dealership again. This is a double edged sword in reality. On one side it is good to see this amount of security being introduced as cars become self driving. On the other hand for enthusiasts and hobbyist, it sucks having a car you cannot modify. Do you even own the car at that point? I believe there was a recent legal case, which mandated that the software the car utilizes is intellectual property, and we as consumers can be denied access. Next step is get sued for tampering with it. EPA cracking down is just the start, wait until auto manufacturers start going after major tuners. The 3-4k for a tune is going to a standalone, bypassing the stock ECU altogether, because it couldn't be cracked. We now have this problem, plus the fact modules will no longer work. Not only now do we have to crack or bypass the ECU, we have to crack or bypass all the modules as well. [/QUOTE]
Insert quotes…
Verification
Post reply
Forums
SVTPerformance's Chain of Restaurants
Road Side Pub
C8 Wont be tunable any time soon
Top