On: Fiat Chrysler recalls 1.4M cars after Jeep hack

[SEJeff]

Perhaps a small proxy application that is fully vetted and tested code. This doesn't seem too dissimilar from the "I need a small suid root app to do $root_thing for an unprivileged user". As you said, unrestricted access is the problem. This just is typical "principle of least privilege" kind of stuff.

Totally doable, but it is unbelievable to me the lack of forethought in things like this.

[fnordfnordfnord → SEJeff]

CAN has been around for a long time. I don't think we can blame Bosch that they didn't see from 1985 the pitfalls of someone possibly adding global internet connectivity, nor can we assume they would have advised interconnecting CAN systems with the internet.

[gherkin0 → SEJeff]

> Perhaps a small proxy application that is fully vetted and tested code.

I think that's a good idea, but I think it would be better if it was a small hardware firewall than a program in the infotainment system.

I would think something like that could even be entirely formally verified.

[SEJeff → gherkin0]

I was referring to an application/hardware that sat directly on the CAN bus, not a part of the infotainment system whatsoever. Something totally separate that had only 1 small function, to authorize access to CAN communications for "unprivileged" things such as the infotainment system.

So we're in complete agreement.