The power train (and other vital components) of a car should be air-gapped from the internet. It’s crazy car manufacturers are even able to brick a car like this.
Is your car going to get security updates 5-10-20 years from now? No. The power train should be air-gapped from the internet.
Apparently it was supposed to be. They have the core functions in a “can’t OTA” container, with less important functions like AV/etc in a “can OTA” model.
This update was pushed to the “can update” side and fucked the “can’t update” side, which is its own can of worms. Another can? Jeep pushed a silent, emergency update “to all Jeeps even those who have automatic updates disabled.”
So the issue is not that they have no security model, it’s that it clearly doesn’t work and they can and will push secret updates even when you decline all updates.
https://www.reddit.com/r/Jeep/comments/194cbbj/turn_offdisconnect_remote_access_to_my_2021_gcth/
I just got a text from my dealership saying my oil light was on. Super pissed off about it… When I got the Jeep 2 years ago I asked Jeep to turn off ALL remote access/phone home capabilities to the vehicle. I was on the phone for a couple hours with them until I finally got someone who said they did it.
Weather alerts, contextual ads on my console, distant recording of my travels, whatever, I wanted everything off.
It has a 4G cellular module in the head unit, which connects to a separate 4G antenna via a port on the back of the head unit. Unplug the antenna from the head unit and it cannot communicate to anything. Obviously you have to remove a bunch of trim and the unit.
Now, it’s possible that during maintenance, the process might involve uploading or downloading data to/from the manufacturer. That’s hard to avoid.
Companies dont even give a shit about cybersecurity with their internal systems why would they dare put a cent into thinking about security for systems their customers use
This just keeps happening until we decide our governments work for us and not for corporations.
https://en.wikipedia.org/wiki/Gig_Car_Share
I worked for AAA during this program and literally every single weekend someone would take a car up into the mountains or down the coast and lose cell service…which would then brick the car and leave them stranded in the woods with a Prius they couldn’t even open to get inside. Add fires (thanks PG&E) and mudslides and it was a massive clusterfuck just getting a tow truck to them, which could take hours or days
Yeah, but how else would you be able to pay for power upgrades? I’m keeping my old cars for as long as possible.
Don’t buy American. Don’t buy Stellantis vehicles no matter what!
Can confirm; used to indirectly work for them. Stellantis holds nothing but contempt for their employees, suppliers, and customers. Their products are inferior and overpriced.
Um…Ford isn’t as bad. Def not in the same shittyiness as Stellantis.
deleted by creator
Charge whoever pushed this “telematic update” for reckless endangerment or something.
They’re lucky there were no accidents related to this (as far as we know).
Calling it, next update includes forced arbitration clause for accidental bricking.
Click here to agree, contact car disposal services otherwise.
LOL we had rented a jeep like 3 weeks ago. I had never seated in a less roomy car, and I used to drive a mini coop. We returned it just a few days ago. I wonder if that thing is broken now. The screen looks similar to the one on the post.
Again, WHY in the actual FUCK does a car need software updates?
Apart from maybe a stereo software? Infotainment? Make a good powertrain and leave it alone. Absolute insanity.
This was an update to the entertainment system that somehow had the side effect of disabling the power train while driving. You’d think these would be two entirely separate computer systems, but they must be sharing something.
