Hacker News Reader

I also work in the industry and tend to agree. Right now if you get an official replacement ECU on a secured CAN network the device comes from the OEM already set up with the matching SecOC (AES-128) key that the OEM recorded in their backend database at time of manufacturing.

But how would this work with a 3rd party ECU?

View on HN

I suspect that auto makers are fully aware of this and are salivating at the idea of extra income with upgrade and repair fees.

So far this has eluded public consciousness, but I expect it will hit the users hard at some point in the near future.

"Authorized parts" and "Authorized repair centers only" would be allow them to extract massive profits while providing no consumer benefit. That then incentivizes them to create even more fragile, unreliable vehicles.

like this; an ECU is an ECU. match unit to make and model. gap the ECU from remote modifications. an ECU doesnt require keys, they are not part of the required properties of an ECU.

Reply on news.ycombinator.com