Car Hacking

85 readers

1 users here now

Car Hacking - The ECU and protocols like CANbus have become the heart and brain of most modern cars, but it has also become a locked down black box. This is a place for people interested in taking back control of the car they bought. New age hot rodders, ECOmodders, Security researchers, the curious, the paranoid, and the tinkerers are all welcome. We encourage the use of open source solutions and tools like arduino and rasberry pi.

Purpose: While the engine is the heart of the car, the ECU has become the ever-evolving, all-knowing brain. However, this brain is a closed, locked-down black box. This is a place for people interested in taking back control of the car they own or keeping others out. New age hot rodders, ECO modders, security researchers, the curious, the paranoid, and the tinkerer are all welcome. Discussion is not limited to the ECU, post any hacked DIY Aero, powertrain, suspension, or other car topics the community might like.

Goals: The car hacking community is alive but fractured and decentralized, let's start by aggregating all of the many projects, and hackers. We would also like to encourage the use of Open source hardware and software. Our long term goal is to become the most technical car subreddit.

Mod note: Most of my time is taken up building hardware, if a better person for the community comes along I would be willing to hand over the sub. We could also use help with our documentation.

Getting started

Resources

Related Sub Reddits

Tools

Technical Forums

Advocates

Other social media

Originally r/CarHacking

Flairs:

CAN LIN SWCAN J1850 PWM J1850 VPW ISO 9141 KWP 2000 Multiple No Protocol

founded 2 years ago

MODERATORS

WandererLagomorph799@lemmy.ml

hacking a chevy bolt EV (lemm.ee)

submitted 2 days ago by muusemuuse@lemm.ee to c/carhacking@lemmy.ml

3 comments fedilink hide all child comments

I'm fed up with onstar. It's slow. The app is annoying. I'm paying for it now and it's hardly worth it. Additionally I really need a distraction right now and a technical project could be just the thing. I want to build my own board and software that will use LoRa instead of cellular and I have prototype parts ready but I stumbled across a concerning problem. I read somewhere that the Bolt EV just turns off the OBD 2 port after a while. It also ignores commands to wake, unlock doors, start the climate controls, etc unless they occur on a different wire somewhere else in the car, something seperate from the OBD port.

I know nothing about this wire. How can I communicate with this bus? Can I plug in somewhere or do I have to tap an existing wire? Is there any documentation regarding the commands sent? Is this just another can bus or is it something different?

top 3 comments

sorted by: hot top controversial new old

[–] owenfromcanada@lemmy.ca 6 points 2 days ago (1 children)

I work in automotive, and have done a bunch of work on the Bolt.

Unfortunately, vehicles made in the last 5 years or so are protecting CAN bus traffic from exactly the kind of thing you're looking to do. You'd need to know exactly how to calculate certain values on your messages to be able to replicate them, plus you'd need to block out the messages from the actual OnStar ECU. This isn't really feasible, unfortunately.

You can probably still read traffic from the OBDII port, but I don't recommend trying to send traffic (those busses are often pretty loaded up anyways) unless you have an existing tool that you could replicate exactly.

[–] muusemuuse@lemm.ee 3 points 2 days ago* (last edited 2 days ago) (1 children)

Well there’s a lot of documentation out there online about this and other vehicles CAN bus messages. People much smarter than me have already got the bulk of this figured out. I’m just putting the pieces together in a different way. My bolt is a 2017. It’s outside the date range you described.

[–] Mitchie151@lemmy.world 4 points 1 day ago

I also work in automotive, all of the messages related to starting the car (which is required for climate control) or unlocking the vehicle will be encrypted with keys you will not be able to extract. Many have MAC authentication and counters for invalid attempts. Too many wrong hits and you'll trigger a DTC which may need a visit to the mechanic to clear. Furthermore, a lot of the behaviours you want to trigger that are done via the app normally use a telematics unit in the car that will authenticate with the OEM server. You will not be able to get this authentication. Sorry to be the bearer of bad news, but what you're trying to do is exactly what car thieves wish they could do, which is why we put in every effort to make it extremely hard.