A field manual on contextualizing cyber threats, vulnerabilities, and risks to connected cars through penetration testing and risk assessment

Analyze risk levels surrounding vulnerabilities and threats that impact confidentiality, integrity, and availabilityStart the engine and idle the engine in drive for two and half minutes, with the A/C and rear defroster on if equipped. The universal OBD-II drive cycle begins with a cold start (coolant temperature below 50 C /122 F, and the coolant and air temperature sensors within 11 degrees of one another). This condition is easily achieved by letting the car to sit overnight.

Today, many vehicle manufacturers include these drive cycles in the vehicle owner’s manual. Typically, a few days of normal driving, both city and highway, will make the monitors ready. The following generic drive cycle can be used as a guideline if a specific drive cycle is not known. It will assist with resetting monitors when a car specific drive cycle is not available. However, it may not work for all cars and monitors. OBDII reader should be able to tell you when you have satisfied all of the required monitors. You should also be able to see any faults that are pending but cannot be confirmed because the monitor is not complete.

George Hotz pulled a similar stunt with Bloomberg putting a self-driving car on I-280 in San Francisco. Yes, the self-made self-driving car worked as intended, but George did put a relatively untested system on the open road, with idiots texting and driving in the next lane. means, electronic or mechanical, including photocopying, recording, or by any information storage or The two most technically complex things I own are my car and my computer, and there is much more information available on how to fix or modify any part of my computer. If I had a desire to modify my car so I could read the value of the tire pressure monitors, instead of only being notified when one of them is too low, there’s nowhere for me to turn. Still seems a moronic way of doing things though, I mean, why can’t they just make the centre console display “Cam sensor failure” instead of “ECN 036504”, it’s almost as if Microsoft wrote the software ! That way you (and anyone interested in fixing cars) must either spend money on special software that decodes OBD2 codes, including ones that are manufacturer-specific, or spend money in authorized car service center. I’m expecting that in the future people won’t be able to fix or even sell their cars o their own because everything will be DRMed “for our safety”. I imagine car industry will operate the same way games industry is working, ie. selling used car will be the same as selling used game and will require buyer to pay 40% of cars value to the manufacturer for making him authorized to start the engine…

shall have any liability to any person or entity with respect to any loss or damage caused or alleged to

Please enable javascript on your browser to continue.

I just went through this, with a wifi enabled OBDII reader. You can’t just clear the codes. All but 2 monitors must be in the ready state for a <=2000 car in NY. Had the typical high idle & cyl1 misfire on Saturns SOHC. (supposedly a robot F'd up the gasket at the factory on MANY cars) precaution has been taken in the preparation of this work, neither the author nor No Starch Press, Inc. Craig Smith falls on the safer side of garnering media attention. All of his modifications are on a test bench. From a Reddit AMA, he avoids demonstrating his exploits on real cars at all costs. This, by the way, is the standard way of doing things. No, vehicle exploits done in a controlled, non-public environment are not the most widely reported – that’s just a function of how much attention illegal and unethical vehicle exploits receive. Temporary faults can clear themselves given enough time so if your light has been on for a while then clearing the stored codes won’t help, they will just reappear as soon as the monitor is set which is exactly why its required to pass an inspection.