logoalt Hacker News

hauntertoday at 11:52 AM4 repliesview on HN

Huh intersting that that they don't support any of the european Stellantis brands at all, wonder what they do differently that makes them incompatible.


Replies

numpad0today at 2:14 PM

Probably because they use a bus that's harder to on-the-fly rewrite or because they sign commands.

comma openpilot do its thing by faking stock self driving unit talking to actuators over the in-vehicle network; a modern car is like a bunch of Pi on a LAN hosting microservices, but on a car specific network standard, usually the one called CAN bus, instead of the 802.3 we're familiar with. The manufacturer stock units is usually a camera unit integrated CPU sitting behind a hump behind the rearview mirror. comma devices tap into the cable going in there, sending out fake commands to other computers handling cruise control, brake, steering, blinker... etc.

This can break two ways: some communication standards like FlexRay are harder to tamper and fake, or some newer cars have tightened security clearly in response to comma doing its thing too well, many following the new EU cybersecurity standards which require commands to be signed and/or each of those Pi-like modules to be crypto paired against each others.

I think Stellantis car always had the first of those two issues of having something difficult that are not strictly anti-hacker hostile architecture. But could be both or I could be wrong altogether. The comma devteam seem to like 2015-2019ish hybrids from such brands as Honda, Subaru, Hyundai and Toyota for the presence of the remote control features in the actuator modules && lack of security getting in the way.

Gystoday at 12:27 PM

From what I understood, when I looked into it a while ago, some car makers use an encrypted ODB2 (needed by Comma.ai to communicate driving instructions).

See for example: https://autel.us/security-gateways/, 'Automakers with security gateways installed include Stellantis (Dodge, Chrysler, Ram, Alfa Romeo, FIAT, and Maserati), Nissan and Infinity, Mercedes-Benz, and Volkswagen and Audi.'

show 1 reply
reliablereasontoday at 12:22 PM

Presumably it is just that no one has tried to do it all the way yet.

But i know there is some experimental work out there.

https://x.com/comma_ai/status/1956879764829995394

hnbadtoday at 12:53 PM

They boast a "one year hardware warranty" (EU mandatory minimum is two) so I don't think they're targeting the European market directly right now.

show 1 reply