lol - fair enough :)
...today’s vehicles are a ticking time bomb. There’s zero industry effort to establish a chain of trust regarding all the vendors that provide software being integrated into them. Everyone focuses on things like ‘secure boot’. Brilliant. You’re just guaranteeing you boot the (factory delivered) compromised software.
The XJ6 is an especially fun beast to try to remote hack. It doesn’t even have a CPU - it is EFI, but it doesn’t have a discrete CPU. It has a big box with a boatload of transistors and it’s even partly analog. And it doesn’t have *any* way to talk to anything - the only way to change the mapping, settings or anything else is to take the box apart and break out the soldering iron.
“Everyone focuses on things like ‘secure boot’. Brilliant. You’re just guaranteeing you boot the (factory delivered) compromised software.”
Sadly, we just completed an RCA where we properly, securely, and with the utmost confidence booted a corrupted image, lots of times. No one thought to check the boot images for that corruption.