lainchan / sec
Car Tuning / ECU Hacking / Black Box Hacking
Aristóteles Amadópulus · 2021-11-13 05:55
>This is not a /sec/ topic
Yes, it is. Cars and IT are now the same.
>What is car tuning?
>>Modern car engines are controlled by an ECU, or EEC (Engine Control Unit, Electronic Engine Control, etc).
>>The ECU controls nearly every aspect of a vehicle's operation in modern and semi-modern vehicles. Think ABS, oxygen flow, individual wheel tracking, suspension on expensive cars, antitheft, transmission shift points, and everything else. Don't like it? Buy classic.
>>Many types of user modifications to a vehicle are done using the ECU.
>Why would someone want to tune their car?
>>In modern cars, most of the time, you don't. Modern cars already have "sport, eco, comfort, offroad, etc" modes. The ECU already has your presets ready to go.
>>Messing with the ECU by altering characteristics such as shift points and fuel ratio can yield extra horsepower or MPG, but will usually just break your engine. Many dumb kids love to do this, to try to turn their ordinary Civic a little faster.
>>When changing certain engine, EVAP, or exhaust components, the ECU has to be interacted with. For example, cat delete.
>>The ECU is your enemy when your car gets inspected. In modern cars, a single code read by the ECU on any diagnostic pin is enough to make your car illegal. "Fooling" the ECU into clearing errors is thus highly sought after.
>>There is a black box module in your car used to spy on you, connected to the airbag system
>>Interacting with a car's computer usually requires a very expensive scanner tool. These can cost tens of thousands USD.
>How do I tune [X YEAR MAKE&MODEL]?
>>Find software, plug USB-->OBD2 cable into computer and car. Some cables only work with some cars.
>>This is what this thread is about. Forget about FOSS, this is all proprietary soykaf.
>>You will probably need a Windows laptop
>>The older your car, the older the Windows VM or version. Certain software is only compatible on older Windows
>>If this is done properly, you will be able to read live diagnostic data as if you have the expensive scan tool
>Where do I get this tuning software and what's it called?
This is where I need your help as a noob. Tuning differs based on ECU. Find your car's ECU, and the software that goes with it. But how? Also, please correct me if I am wrong anywhere. Unfortunately, all the software is highly protected and paid for, which means car modders have to either pirate it, or pay for a scanner.
Nell · 2021-11-13 10:38
>>17967
Here is a book to get you started on the theory
http://www.opengarages.org/handbook/
>Find your car's ECU, and the software that goes with it.
I think it's more comprehensive than that. The point of tuning the ECU is to change settings like ignition timing and fuel/air ratio and stuff so it depends on the whole engine not just the ECU.
>all the software is highly protected and paid for
There are open source tools like Kayak for talking the CAN protocol with the ECU. But figuring out what messages to send to tune your specific engine is the secret part.
Nobody special · 2021-11-13 12:55
Google?
>too short message
Lady Jessica · 2021-11-13 20:41
>>17979
>>17974
I shall research on Google and come back to post what I find. This is a good topic.
Turner · 2021-11-15 00:53
>>17974
>>17979
>>17982
My friend once showed me the data from my O2 sensors in real time. He had an early 2000's RAV-4. What software do you think he was using? He had a Windows laptop and an OBD2 to USB cable
Shogun · 2021-11-15 02:46
Certainly one of the more pressing matters of Free Software today- the fact that, increasingly, rich malicious actors could simply hack your car and assassinate your remotely if you say anything remotely out of line. It doesn't matter who you are- dissident, politcian, oligarch who pissed off other oligarchs, a hacker, a troll, a rival- proprietary software is now going to make it easy for people to be murdered while driving their multi-ton death machines.
Sorry I have nothing to offer except a thread bump, OP.
Molly Millions · 2021-11-15 03:02
>>17967
I'm looking to buy something that doesn't have any computers in it.
Computers are evil by default, now you want me to get inside a computer that can fly down the road at 100MPH? fuarrrk that noise. I want a gas powered truck from the 1960s.
Roger Pollack · 2021-11-15 03:56
closed source software that enables key car functionality to be connected to the internet in any way whatsoever will be used to murder people. i have a plan to force congress's hand, so spread this far and wide
so long as source-unavailable non-free software that cannot be altered or replaced remains legal in the united states, we ought to hold all three-hundred-sixty million americans hostage for a ransom. if no law is passed to protect americans from car-computer-based murders, i implore every one who reads this message to hack any car, any where. use said car to kill at least one person, and cite this hostage situation as your reasoning. if legislators refuse to acknowledge this problem, they will have blood on their hands.
Unknown · 2021-11-16 02:22
>>17988
>I'm looking to buy something that doesn't have any computers in it.
I recommend a 1980's classic. Trucks of that era still have basic analog electronics but nothing so fancy as an actual computer. Just a few relays, and they're all "open source" if you read the schematics. All you need is a multimeter. Late 80's vehicles tend to have fuel injected systems, whereas early 80's and earlier will likely still be carburated. Also remember that OBD2 plugs are different from OBD1 plugs.
Don't get me wrong though. Any classic will work, but finding parts for your classic is going to be a bit of a pain. Also, keeping a 30+ year old car on the road does require IQ.
Here are some cool retro options with style from the USA. Nothing beats a classic American Muscle Car:
>Old Stang
>Old Camaro
>Old 'Vette
>Old Town Car
>Old Grand Marquis
>any other old US muscle car
Here are some Japanese options with style and reliability:
>Old Nissan Maxima
>Old Subaru Impreza or Legacy
>Old school Camry or Corolla
>Lexus such as SC300 or SC400
If you're the rough and tough swamp n' mountains kinda guy, and you need something off-roady:
>Old Land Cruiser
>Old 4Runner
>Old F-150 4x4, or Bronco 4x4
>Old Chevy Pickup 4x4
>Old ranger or tacoma
And finally for the discerning taste, the finest in European luxury, fit for a true mob boss:
>Any Mercedes Turbo Diesels
>Literally any old Volvo, the older the better
Nearly each car listed here can actually be owned and driven daily, but it has "open source" electronics and is DIY friendly. The only difficult thing is finding the parts, and they can actually still be very expensive if you choose the Mercedes or another luxury brand. Careful buying sports cars too. Kids will usually fuarrrk them up and sell them.
John Doe · 2021-11-16 03:35
I years back saw a video that some cars you can do a diagnostic by turning the keys in a specific pattern and it makes lights on the dashboard blink out a diagnostic code which you have to decypher depending on the maker. Was this an actual thing? It wasnt some youtube video it was some video i think i saw in a high school electronics class or something.
Guthrie · 2021-11-16 03:55
>>18002
Early 2000's cars tend to do this. Older cars (OBD1) usually have you use this special plug to short the diagnostic connector and it's a similar mechanism.
>key sequence
New transponder keys can be programmed using this key sequence. I had a 2006 Cadillac CTS where if you already had a working transponder key, you could program one easily however if you didn't have any transponder key then it was very difficult. But possible still. All sorts of magic is possible to the right expert.
Roger Pollack · 2021-11-16 04:33
>>18003
Funny enough it was just a normal key demonstrated where it was turned on and off a specific way.
Hiro Protagonist · 2021-11-16 04:57
>>18003
>Older cars (OBD1) usually have you use this special plug to short the diagnostic connector and it's a similar mechanism
The purpose of that is diagnostics. It works like you described but don't confuse it with a transponder-based system. For security, you can also upgrade an old-school ignition system to use transponder key.
>>18004
From what I understand, every car has its own way of doing it so your owner manual is your friend, and so is your repair manual. Chilton ones are good, but full service manuals are better.
Cereal Killer · 2021-11-16 05:05
I drive a 2000 Jeep XJ (Sport). It has an ODBII connection. I bought one of those cheap readers off Ebay. Via Bluetooth the scanner can pair with my Android phone. Using the app "Torque Lite" I can at least get diagnostic codes, clear them, and setup various displays for O2, fuel presser, etc.
This doesn't allow me to go into tuning exact specifications but it's an easy way to diagnose issues before you take it to a mechanic/ask a friend for help.
Lord Nikon · 2021-11-16 06:54
>>18006
$15 bluetooth OBD2 diagnostics tools are sold at every AutoZone. They're handy but no one says they're powerful. What would be powerful is if you could interact with the OBD2 system using your computer or better yet your cell phone. And by interact I mean pull deep data out of the ECU.
Hitomi · 2021-11-16 06:55
>>18007
>pull deep data out of the ECU
That's only part of it of course
Technician · 2021-11-28 22:33
>>17989
I assure you people are very aware of this issue. I just wonder what kind of solution they try and sell the sheep so they’ll buy it.
Random · 2021-11-29 00:59
>>17989
Kind of edgy. People like you are all talk and tough until your back's against the wall. Then, you're the biggest bitch ever. However, I agree with your viewpoint.
>People need to become aware of car hax through death
I don't think killing people is right, because each life is a person. The victims probably won't even know anything about the systems that they falsely entrusted their doomed lives to. They would be completely innocent, though you could also argue that they deserve doom for entrusting their very lives to the botnet. The problem is, we are talking about sheep who don't understand the botnet, FOSS, or hacking. As usual in affairs like these, the sheep entrust these matters to experts above their skill level. These same experts are paid to enslave the sheep.
>Open Source
R&D departments are probably working hard right now to figure out how to keep hackers out. They insist the best thing they've come up with so far is making the car's electronics a black box, nearly impossible for someone to figure out. They'll sell that security together with live network monitoring of each car and the sheep will buy it. Also, open source won't even save you so much because open source can be hacked too. The problem gets worse because car OEMs will attempt complete control over the vehicle ECU, but will likely give the user very limited tools. It's what the 'experts' are paid to recommend.
>What can you do?
Depends on the law for the minimum botnet requirements to drive. Installing a custom open source ECU might be a good start. Getting a classic car is a better option.
>What's the problem in the end?
Implementing these systems securely will make them very expensive and restrictive, while only encouraging hackers due to the reward from increased dependence on the safety systems due to their supposed security. On the other hand, cheap car-botnet implementation is DIY-friendly but comes with the open risk of hacks everywhere. If you were a sheep, what would you choose?
Hitomi · 2021-12-13 02:53
>>17989
>I have a plan
>do all the work for me and work out the details and logistics yourselves
>also spend however long it takes to exploit and alter current ECU firmware which uses cutting edge tamper-resistance technology
>also throw away your lives by committing mass murder and getting the electric chair
>in the end this incident will be used by the government to justify more state surveillance
Gee anon, count me in sounds like a rock solid plan! Or you know just physically find and destroy the car's wifi/radio capabilities and call it a day.
anon · 2021-12-13 07:06
High Performance Academy is an AU based online school. Their EFI tuning course is ~$400USD and the intro course is a few hours of content for free. Goes for 50% off on sales. This will teach you everything you need to know to start tuning. There are a lot of different softwares to use depending on how you're interfacing with the ECU. Cobb is a company in TX that makes "Access Ports" to bridge between the ECU and your computer and have their own proprietary software. Hondata is a piggy-back chip for honda ECU's. Haltech makes a completely aftermarket ECU that is completely customizable and is compatible with lots of software. There isn't a lot of short answers to anything car related. It's all very application specific.
Jean Dupont · 2021-12-13 09:27
>>17989
>I committed a murder
>But I told you I would beforehand, so it's your fault instead somehow
Maybe I'm just autistic, but I've never understood hostage-takers logic in these terms. No dude, you're the one throwing the hissy fit and pulling the trigger, it's not my fault you're deranged.
Donna Hawthorne · 2021-12-14 01:32
>>18297
They convince themselves that the murder is the other person's fault for not complying with the demands as if they aren't pulling the trigger of their own volition.
Roger Pollack · 2021-12-14 01:41
>>18297
>>18311
this is exactly how police justify their own bullshit to themselves.
Wintermute · 2021-12-14 01:54
>>18312
What the police do is different, they're giving a violent criminal a chance to surrender rather than justly putting them down to protect others from further harm. If you live somewhere with good cops that is, there have been many examples of excessive force in America, especially with the SWAT.