this post was submitted on 14 Jun 2023
11 points (100.0% liked)

World News

1110 readers
2 users here now

Breaking news from around the world.

News that is American but has an international facet may also be posted here.


Guidelines for submissions:

These guidelines will be enforced on a know-it-when-I-see-it basis.


For US News, see the US News community.


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 6 points 1 year ago (3 children)

Title's a little click-baity there. The Massachusetts ballot initiative that passed is a poorly thought out security nightmare, so until those issues can be addressed it would be dangerous to follow it.

Now, according to Reuters, NHTSA has written to automakers to advise them not to comply with the Massachusetts law. Among its problems are the fact that someone "could utilize such open access to remotely command vehicles to operate dangerously, including attacking multiple vehicles concurrently," and that "open access to vehicle manufacturers’ telematics offerings with the ability to remotely send commands allows for manipulation of systems on a vehicle, including safety-critical functions such as steering, acceleration, or braking."

The title isn't wrong, it just doesn't mean what it sounds like it means.

[–] [email protected] 11 points 1 year ago (2 children)

That simply isn't the case. The ballot initiative was meant to stop the wireless diagnostics loophole, either requiring wired diagnostics as in the past or a compliant wireless version. I trust my bank to be able to work securely wirelessly, I have friends with wireless insulin pumps that manage to not get hacked and killed, the car already has these wireless diagnostics protocols built in, they're just not an open standard, and there are a million and one ways to implement a standardized open protocol securely. The NHTSA is simply giving in to corporate lobbying here.

[–] [email protected] 3 points 1 year ago (1 children)

What the ballot initiative was meant to do and what the legal wording of the initiative are are two different things, though.

there are a million and one ways to implement a standardized open protocol securely.

Right, but that work hasn't been done yet, and moving ahead before that exists is a big risk.

[–] twelve 2 points 1 year ago

This kind of laws create incentive to build. No for profit company invests money for losing control on their product in the repair chain