Hacker News new | past | comments | ask | show | jobs | submit
ryukoposting | on: Unlocking any car from X brand in most of the world
Blue car in the background is a facelifted fifth gen RAV4. Obvious from the shape of the mirrors and headlight. Toyota/Lexus would align with the "both brands" remark.

White one is harder to tell obviously, but the shape of the mirror looks the same, and you can see the top of the dash has a chamfered shape that looks an awful lot like this pic: https://media.ed.edmunds-media.com/toyota/rav4/2022/oem/2022...

Posting a video demo probably isn't a great idea for this kind of thing. I'm sure some sicko could have figured this out just from the sound the locks make.

winny314 | parent | next
Keeping information under wraps just encourages more security theater, like people believing that locks actually work to deter skilled attackers, whatsoever. They really don't. They deter casual attackers at best.
loading story #50428757
pmontra | root | parent | next
Better locks also increase the time to break them. More time == more chances to be disturbed and have to go away and also an incentive to move on to the next house, bike, etc. In the case of bicycles I also advice to lock them close to much better bikes with similar locks: chances are that the thief will invest those 30 seconds to break the lock of the better looking bike.
stagg | root | parent | next
Best bike security advice I every had was to spray paint my bike pink all over.
tedggh | root | parent | next
The best advice I’ve seen is to use a chain or cable tightly tied to the bike, no slack, so that using a large cutter becomes very difficult.
robner | root | parent
Giving a high quality bike lock to your neighbors is a great gift idea!
rogerrogerr | root | parent | next
This is probably less security theater and more not-getting-sued theater.
warrantisall | root | parent
Sued for what? It's rather the manufacturer should be sued for selling insecure vehicles. And slapped by authorities too.
michaelt | root | parent | next
Many countries have very broad cybercrime laws - like prohibitions on "gaining unauthorised access to a computer system". And in some countries, even when you're in the right going to court can be a costly and time-consuming endeavour.

I know it seems like no such laws exist, as almost all serious cyber-crime is cross-border and done anonymously, making it nigh-impossible to prosecute.

But when you're an honest cybersecurity researcher, posting your findings openly under your own name? You're one of the few people who can be prosecuted.

steve1977 | root | parent | next
Humanity has a long tradition of shooting the messenger.
loading story #50424044
shrubby | root | parent | next
But the practice is far too commonly to sue the discloser rather than the manufacturer of the software.
loading story #50422797
monster_truck | root | parent
Based on my experience in this industry, every brand does this, has done this, and is currently building out a replacement for their current system that does this in a slightly different way.

It's almost like something is happening to make sure this happens endlessly. It's probably nothing

loading story #50427221
aschla | parent | next
I was trying to figure out which make/model, based off of "I bought a new four wheel drive/SUV from them", specifically the "four wheel drive" part.

I'm assuming he means AWD.

schiffern | root | parent | next
This distinction (although I know it) has never made logical sense to me.

I only have four wheels. If all the wheels are driving, and I only have four wheels, then...

Again, I do know what the conventional difference is. But it's just that: convention. Unless you memorized the convention beforehand, there's really no way to decipher why 4WD/AWD has any meaningful distinction, nor which of the two specific names maps to which mechanism.

steve_taylor | root | parent | next
4WD: Distribution of power to the wheels is static. AWD: Distribution is dynamic.

4WD vehicles are often part-time 4WD, meaning they can be switched between 4WD and RWD or FWD.

AWD vehicles are full-time AWD because part-time AWD is unnecessary given that the drivetrain delivers power where it's most needed.

loading story #50424502
wil421 | root | parent | next
4wd - locking transfer case in the middle. Best for off road.

AWD - clutch packs. Best for nasty conditions on road, IMHO.

loading story #50427307
jacquesm | root | parent | next
It's more of an industry wide thing:AWD means all wheel drive even when the vehicle has more than 4 wheels. So in the case of a vehicle with more than 4 wheels, 4 wheel drive would indicate four of the wheels are driven and the remainder are idlers. For instance 6x4 would indicate six wheels with four driven wheels.

https://en.wikipedia.org/wiki/Six-wheel_drive

So nwheels x n driven wheels.

loading story #50424951
jurgenburgen | root | parent
What’s the distinction?
loading story #50423487
loading story #50423394
loading story #50423091
loading story #50423059
loading story #50424105
michaelt | root | parent | next
Country differences (the writer seems to be Australian), plus some subtle technical differences few people know or care about.

Suffice to say, in British parlance any vehicle with four driven wheels can be called a "4×4"

wolvoleo | root | parent
Yes this, very common here too, nobody says AWD.
chakintosh | root | parent
My first guess was a RAV4 as well from that description
eecks | parent | next
> Posting a video demo probably isn't a great idea for this kind of thing. I'm sure some sicko could have figured this out just from the sound the locks make.

What does this mean?

buran77 | root | parent
They mean someone who's extremely passionate about this could identify the car brand or exact model in question just by listening to the sound the lock makes from the posted video. You know, like the experts who can identify a wine by smelling it, or a violin just by listening to it.
drcongo | root | parent | next
Or a car brand by the door mirror shape.
loading story #50427287
NooneAtAll5 | root | parent
he*
loading story #50423893
belorn | parent | next
I am more concerned with the use of automatic video blurring of the text outputs on the computer.
tylergetsay | parent | next
Toyota also uses flutter for their infotainment
lifeisloving | parent | next
Why its been disclosed and patched....
IshKebab | parent | next
Yeah they also did a video on YouTube about how they used Flutter in the RAV 4, and the first code snippet he posted... `dartExecutor`. lol
NamlchakKhandro | parent | next
hah. protip... it's not a 2022 rav4. the bonnet gives it away
dudeinhawaii | parent
I was just going to comment about how GPT-Astra, Claude, and Gemini Argon all pointed to Toyota/Lexus based on context cluses, API markers, Lexus RX in the video, and deduction based on the author's previous posts and these being the remaining manufacturers to not be explored by them.

All the secrecy seems pointless in the age of AI.