Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Kufotokozera mwachidule:

Kwa ambiri aife, galimoto ndi imodzi mwazinthu zodula kwambiri zomwe tingagulepo. M'dziko limene chilichonse chili cholumikizidwa, n'kwachibadwa kufuna kuwongolera galimoto yathu tili kutali: kupeza zikumbutso za komwe tinayimitsa, fufuzani kuti muwonetsetse kuti tayiwala kutseka zitseko, kapena kuyatsa injini kuti itenthetse kapena kuziziritsa mkati. malingana ndi nthawi ya chaka.

Pali opanga ambiri omwe amapereka ma alarm omwe angasankhe omwe amapereka izi mosavuta komanso mtendere wamalingaliro. Koma kodi tingadalire bwanji opereka machitidwewa kuti ateteze mwayi wa magalimoto athu pa digito? Munkhani iyi, Jmaxxz alankhula zomwe adapeza atayang'ana imodzi mwamakinawa.

Jmaxxz amadziwika ndi ntchito yake ndi August Smart Lock smart home systems (zowonetsera pa DEFCON 24 "Backdooring The Frontdoor"). M'zaka zaposachedwa, chidwi chake chakhala pazida za IoT. Adatenga nawo gawo pagawo la "IoT village zero day" la DEFCON 24 ndi DEFCON 25 ndipo pomaliza adaganiza kuti inali nthawi yoti afufuze zomwe zidapezeka pamsika wamagalimoto apamtunda - choyambira chakutali (chomwe chimatchedwa RS).

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Chifukwa chake, dzina langa ndine J-Max, ndine wopanga mapulogalamu mwaukadaulo komanso wobera mwantchito. Ndimachita nawo zinthu zonse zokhudzana ndi loko, ndipo pazokambirana izi mudzamva mawu ambiri omwe amafotokoza malingaliro anga okha ndipo alibe mgwirizano ndi malingaliro anga akale, apano komanso amtsogolo. Monga momwe mukumvera, tidzakambirana za magalimoto, omwe ndi oyambira akutali ndi ma alarm. Tiyeni tiyambe ndi mfundo zina, zimene zili zofunika kwambiri m’nkhani ino chifukwa ambiri amaona kuti madongosolo oterowo ndi zinthu zamtengo wapatali zosafunikira.
Ndiye kumene ndimakhala kukuzizira kwambiri ndipo mnzanga akudwala matenda otchedwa Raynaud's syndrome. Kuzizira kumayambitsa kupindika kwa mitsempha yamagazi m'manja, kutuluka kwa magazi ku zala kumachepa kwambiri, ndipo zizindikiro za frostbite zimawonekera, kuphatikizapo necrosis ya minofu. Slide ikuwonetsa momwe zimawonekera nthawi zambiri.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

November watha, ndinali ndisanasankhebe zomwe ndimupatse pa Khrisimasi. Choncho akubwerera kwawo kuchokera ku bwalo la ndege ali wokhumudwa chifukwa galimoto yake sinatenthedwe pobwerera kunyumba. Panthawiyo, ndinazindikira kuti ndimupatsa injini yoyambira yakutali ndikuyamba kufunafuna njira yabwino kwambiri. Zikuoneka kuti msika woyambira kutali ndi waukulu kwambiri, opanga ambiri sapereka chidziwitso chokwanira pazamalonda awo.

Sakuwuzani momwe mungayikitsire dongosolo kapena zida zomwe mungagwiritse ntchito pokonza chipangizocho. Ili ndi vuto kwa ine chifukwa iyi ndi galimoto yanga, chiyambi changa chakutali, ndipo ndikuyenera kukhala ndi zida izi. Chifukwa chake ndidafufuzanso pang'ono ndikupeza kampani yaku Canada, Fortin, yomwe imapanga zoyambira zotere ndipo mofunitsitsa imapereka zolemba zonse zofunika. Ndinakhazikika pa mankhwalawa ndikuyamba kufunafuna chowongolera chakutali. Chowonadi ndi chakuti ngati mugwiritsa ntchito chiwongolero chokhazikika chakutali ndi choyambira chakutali, ndiye kuti machitidwe ake azikhala ochepa pamlingo wokhazikika wakutali. Ma remote a Aftermarket amaperekedwa omwe amagwira ntchito pamtunda wa theka la mailo mpaka mailosi imodzi ndi theka. Malinga ndi ndemanga za ogula, izi ndizodziwika bwino, chifukwa kwenikweni mtunda ndi wamfupi kwambiri. Ili ndilo vuto, chifukwa mnzanga ayenera kuyatsa injini ya galimoto yake pamalo oimikapo magalimoto pabwalo la ndege atangotsika ndege, yomwe ili pafupi theka la kilomita.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Chifukwa chake zingakhale zabwino ngati angotulutsa foni yake, kutsegula pulogalamuyo, ndikudina Start. Ndidapeza chinthu chachitatu chotchedwa MyCar chomwe chimagwirizana kwathunthu ndi choyambira cha Fortin. Ichi ndi fob yaying'ono ya kiyi yokhala ndi SIM khadi ndi cholandila GPS chomwe mutha kuyiyika mgalimoto yanu ndikuchilumikiza ku choyambira chakutali. Kenako, pogwiritsa ntchito pulogalamu yam'manja, mutha kuyambitsa injini, kutsegula maloko, ndi zina zotero.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Ndinaganiza kuti izi zingakhale zabwino: ndegeyo itangotera, mnzanga akhoza kuyatsa injini, ndipo pofika pagalimoto, kanyumba kamakhala kotentha kale.

Ndiye tiyeni tikambirane pang'ono za mmene oyambira kutali ntchito. Kuti muchite izi, choyamba muyenera kumvetsetsa momwe injini yamagalimoto imayambira. Mpaka chakumapeto kwa zaka za m'ma nineties, choyatsira galimoto chinali lokoka kwamakina kophatikiza makiyi. Munayenera kuyika kiyi ndikuyitembenuza kuti mumalize kuzungulira kwamagetsi. Kenako maloko olembedwa kuti “immobilizer” anayamba kutchuka ku United States. Zikumveka zovuta, koma ndi loko yamagetsi. Chifukwa chake, muli ndi loko yamakina, yomwe ndi kiyi ya loko yamagetsi, yomwe, nayonso, ndi transponder ndipo ili ndi chidziwitso chomwe chingawerengedwe. Ndipo mpaka mutatsegula loko yamagetsi, galimoto yanu sidzayamba. Kumanja kwa slide mukuwona makiyi a 2: kumanzere ndi kwa immobilizer, ndipo kumanja ndi kosinthira nthawi zonse. Imangogwiritsa ntchito zida zamakina za loko, pomwe kiyi yakumanzere imatsegula loko yamagetsi, yomwe imayambitsa injini yagalimoto.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

N’chifukwa chiyani ndikukuuzani zimenezi? Kuyambira kwakutali kumagwira ntchito ndi immobilizer. Pa slide yotsatira mukuwona chithunzi cholumikizira chipangizo cha Fortin EVO One ndi chowongolera - pansi kumanzere mukuwona olumikizana omwe atchulidwa kuti IMO. Pamwamba kumanja kwa chithunzichi mukuwona mizere iwiri: CAN LOW ndi CAN HIGH. Awa ndi maulalo olumikizirana ndi basi yamagalimoto a CAN. Chifukwa chomwe oyambira akutali amalumikizidwa ndi basi ya CAN ndikuchepetsa mtengo woyika chifukwa maulumikizidwe ochepera amagwiritsidwa ntchito pakuyika. Ngati choyambira chakutali chingathe kuwerenga zambiri kuchokera ku basi ya CAN kapena kutumiza malamulo kudzera mu basi ya CAN, izi zimachepetsa nthawi yoyika makina oyambira akutali.

Pamwamba kumanzere kwa chithunzicho pali gulu lonse la ma GPIO omwe amagwirizanitsidwa ndi kulamulira kapena kuwerenga zambiri za makina. Mwachitsanzo, mukufuna kuti magetsi azing'anima kapena lipenga limveke mukadina batani lokhoma. Zinthu ngati izi zitha kuwongoleredwa pogwiritsa ntchito ma GPIO awa. Pansi kumanzere kwa chithunzichi mutha kuwona cholumikizira chachikulu, cholumikizira - ichi ndi mawonekedwe omwe amadutsa loko yamakina. Ndiko kuti, simuyenera kuyika ndi kutembenuza fungulo mu kuyatsa chifukwa mawonekedwewa amalola kuti pulogalamu yoyambira yakutali kuti ilankhule mwachindunji ndi loko yamagetsi.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Zithunzi zotsatirazi zikuwonetsa magawo oyika choyambira chakutali. Zimakhala ndi kuchotsa chivundikiro cha chiwongolero, kukhazikitsa ndi kulumikiza gawo la DS. Zikuwoneka zowopsa, koma ndizosavuta kuchita.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Zowongolera zakutali zimalumikizana ndi zomwe Fortin amatcha ulalo wa data. Dongosolo limagwiritsa ntchito protocol yakuthupi yotengera data ya UART - cholumikizira chapadziko lonse lapansi chomwe chimasinthanitsa deta pa liwiro la 9600 baud. Choyambira chakutali cha Fortin chimangolumikizana kudzera pa basi ya UART kupita kumayendedwe awiri akutali omwe mumawona pa slide.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Nditaika DS, ndinaganizira mmene zipangizo zoterezi zingakhudzire chitetezo cha galimotoyo. Mwachiwonekere, DS iyenera kulambalala chowongolera, ndiye kuti izi ndi zotetezeka bwanji ponena za kuthekera kwa kuba kapena kutsekereza kuwongolera kwagalimoto? Izi sizikugwiranso ntchito pakutumiza kwa data pamaneti am'manja, komanso chizindikiro choyambira chakutali chokha. Kotero ndinayamba kufufuza pa intaneti kuti ndipeze zambiri za opanga pa protocol yotengera deta yomwe imagwiritsidwa ntchito ndipo ndinathera pa mabwalo omwe anthu analemba kuti Fortin anakana kupereka ndondomekoyi. Chimodzi mwazifukwa: “Sitigawira zidziwitso zotere chifukwa EVO si choseweretsa cha anthu osachita masewera, chimapangidwa kuti chigwiritsidwe ntchito ndi akatswiri.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Pokhala katswiri, ndinaganiza zopanga makina anga pakompyuta. Ndidagwira gawo lachiwiri la EVO system, ndidasonkhanitsa bolodi loyimira galimotoyo, ndikuwonjezera masiwichi kuti ndiyesere kuyatsa, batani la chopondapo, ndi ma LED ambiri kuti awonetse mayiko osiyanasiyana.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Kuyika zonsezi, ndidalumikiza chipangizo chowunikira ulalo wa data wa FTI ndikuyamba kusonkhanitsa deta iyi. Poyamba zikuwoneka ngati slide, ndipo sizikudziwika bwino zomwe zikuchitika pano. Koma ngati muyang'anitsitsa, mukhoza kunena kuti pali mtundu wina wa dongosolo pano.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Chonde dziwani kuti nthawi zonse ndikadina batani lakutali, uthenga womwe mlongoti umatumiza ku DS wanga nthawi zonse umayamba ndi 0C ndikutha ndi 0D. Chifukwa chake ngati tingogawa zomwe timapeza, poganiza kuti 0C ndiye poyambira ndipo 0D ndiye mathero, tikhala ndi chonchi.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Pali kale mtundu wina wa mapangidwe omwe akuwoneka bwino apa, kotero mutha kudziwa zomwe zikuchitika. Pokhala ndi nthawi yofufuza uthenga womwe udawonekera pambuyo poti batani linalake lisindikizidwe, ndinatha kupanga tebulo la malamulo, lomwe limagwirizana ndi zochitika zinazake. Ndiye kuti, mukasindikiza batani pa chowongolera chakutali, mlongotiyo umatumiza lamulo ku gawo loyambira lakutali lomwe limawoneka chonchi.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Izi ndi momwe gulu lamagulu limawonekera.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Mukadina batani pa chowongolera chakutali, mlongotiyo umatumiza lamulo lotero ku choyambira chakutali. Imadzutsidwa ndi byte 0C, kutsatiridwa ndi ma byte 2, omwe ndikuganiza kuti amayimira njira yopatsira. Izi ndizosangalatsa chifukwa UART ili ndi njira yolowera kale, chifukwa chake ndidalemba ma byte ngati "zinyalala", ingowatenga ngati osasintha. Izi zimatsatiridwa ndi baiti imodzi yomwe ikuwonetsa lamulo lomwe wogwiritsa ntchito angafune kuchita. Izi zitha kukhala kutseka zitseko kapena kuzitsegula, kuzimitsa alamu, ndi zina. Nthawi zambiri, chilichonse chomwe mukufuna kuchita patali chikugwirizana ndi lamulo ili. Malipiro a FF FF F1 ndi adilesi, kapena chizindikiritso, chomwe chimazindikiritsa mlongoti wakutali komwe uthengawo unachokera. Ngati gawo la DS silizindikira chizindikiritso, lamuloli silinanyalanyazidwe. Ngati DS ivomereza chizindikiritso, njira yamitundu yambiri imayamba, yomwe imaphatikizapo kuyang'ana kukhalapo kwa kiyi poyatsira, kuyatsa kapena kuyimitsa injini, kukanikiza chopondapo, etc. M'malo mwake, njirayi ilibe tanthauzo lalikulu, kungoti chipangizochi chikuphunzira ID pakadali pano.

Pamapeto pa uthenga pali byte yokhala ndi checksum ndi byte yosonyeza mapeto a lamulo. Tsopano popeza tamvetsetsa momwe protocol imagwirira ntchito, tingatani nazo? Ndili ndi makanema angapo pamutuwu. Tsoka ilo, pazifukwa zina kanemayo ilibe mawu, kotero ndikuwuzani zomwe zikuchitika pazenera. Kumanzere kwa chiwongolero cha zida zopangira zida pali bokosi loyera lomwe lili ndi zamagetsi okhala ndi Particle.IO firmware yomwe imamvetsetsa protocol ya Fortin. Waya wokhala ndi nsonga ya buluu ndi mlongoti. Izi zimandilola kuti ndizilumikizana ndi choyambira chakutali kuchokera mkati mwagalimoto ndikuwona zomwe zikuchitika pakompyuta ya laputopu.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Chifukwa chake ndimatumiza lamulo lotsegula loko kugalimoto koma silikugwira ntchito chifukwa DS sadziwa za mlongoti uwu. Monga ndanenera kale, iyi ndi UART chabe, yomwe ili ndi chithandizo chotchedwa njira ziwiri zoyankhulirana, zomwe mungathe kupeza zambiri zokhudza momwe galimotoyo ilili. Mwachitsanzo, ngati injiniyo idayambitsidwa kapena kuyimitsidwa, gawo la DS limatumiza uthenga wofananira ndi mlongoti wakutali. Pankhaniyi, uthengawo ukhala ndi adilesi ya mlongoti womwewu.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Vuto ndilakuti kuyankhulana kumachitika pogwiritsa ntchito protocol ya UART, ndipo aliyense amene amalumikizana ndi basi ya UART amatha kuwona adilesi yomwe uthenga womwe watumizidwa, ndiye kuti firmware yanga imatha kupanga adilesi ya antenna yomwe ilipo, zomwe ndimachita. ndi lamulo loyenera.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Kuti mupange uthenga, muyenera kungotsegula chitseko chagalimoto. Monga mukuonera, DS imatumiza uthenga ku mlongoti kuti chitseko chatseguka, ndipo alamu imayatsidwa nthawi yomweyo.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Kuti ndizimitsa alamu, ndimatumiza lamulo la "kutsegula", pambuyo pake phokoso la alamu limatsekedwa ndipo galimoto imatsegulidwa. Muyenera kumvera mawu anga chifukwa sitinathe kuti vidiyoyi tiyimbe ndi mawu. Tiyeni tiyesenso kusewera kanemayo.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Chabwino, phokoso lidawoneka (zolemba za womasulira: kanema yemweyo wokhala ndi mawu akuseweredwa pazenera). Chifukwa chake, mudawona momwe ndidatumizira lamulo la DS ndikuyatsa alamu, zonse popanda kiyi. Tsopano tiyeni tiyese kuyambitsa galimoto chimodzimodzi; kuti tichite izi, onerani kanema wotsatira.

Nthawi zambiri, ngati mungolemba "kuyamba" ndikuyesa kuyambitsa injini, sizigwira ntchito. Chifukwa chake ndi chakuti iyi ndi galimoto yotumiza mabuku ndi makina oyambira akutali ali ndi njira yapadera yamagalimoto otere. Pankhaniyi, muyenera kukanikiza batani loyambira kutali pomwe kiyi ili pakuyatsa ndipo injini ikuyenda. Kenako mutha kutulutsa kiyi, kutuluka mgalimoto, kutseka chitseko, kenako a DS azimitsa injini ndikutseka chitseko. Izi zimachitidwa kuti galimoto isayankhe kuyambika kwa injini yakutali ndikuyendetsa, chifukwa izi ndizowopsa. Komabe, izi sizinthu zonse zachitetezo. Izi ndizosavuta kutsimikizira poyang'ana gawo lakutali la EVO. Mukuwona waya wachikasu uwu womwe wapangidwa kuti uzigwira ntchito ndi ma transmission pamanja. Ngati wadulidwa, chipikachi chitha kugwiritsidwa ntchito ngati galimoto yokhala ndi ma automatic transmission. Mapangidwe awa a unit amakulolani kuti musagwiritse ntchito zoikamo zapadera pakuyika DS m'magalimoto okhala ndi mitundu yosiyanasiyana yotumizira.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Chifukwa chake dongosololi silinayankhe lamulo la "kuyamba", ndiye ndikubweza chipikachi m'malo mwake ndikudula waya uwu kuti ndiswe kulumikizana. Tsopano, ngati mubwereza lamulo la "kuyamba", chizindikiro cha phokoso chidzamveka ndipo zizindikiro za machitidwe a galimoto zidzawunikira pazitsulo zazitsulo, monga momwe zimakhalira pamene kiyi ikulowetsedwa mu loko.

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 1

Pakalipano tili ndi galimoto yomwe tingayambe patali popanda fungulo mu kuyatsa, koma gawo la DS sizomwe timafunikira. M'mikhalidwe yabwino, simungathebe kuyendetsa galimoto yomwe idayambika patali, koma tiyeni tiyese.

Kuti mulepheretse loko yowongolera, muyenera kuyika kiyi yokhazikika mu loko yoyatsira, yomwe ilibe transponder. Monga mukuonera, ndi zokwanira kusuntha fungulo malo musanayambe injini, ndi Subaru Impreza chiwongolero akuyamba atembenuza momasuka kwathunthu.

Komabe, ngati mulibe makiyi aliwonse, ndiye mukanikizira chopondapo chopondapo galimotoyo imayima. Ndikosavuta kupitilira malire awa. Muyenera kudziwa momwe galimoto imawuzira choyambira chakutali kuti brake imayikidwa. Mukuwona madoko angapo amitundu yambiri kumbuyo kwa nyumba ya module ya EVO - chingwe chochokera ku basi ya CAN chidzalumikizidwa pano. Ndikokwanira kungochotsa chingwechi pagawo la DS galimoto itayambika patali, ndipo sichingayankhe kukanikiza chopondapo. Popeza chipangizochi chili pansi pa chivundikiro chowongolera, ndimapereka lamulo la "kuyamba" kudzera pa laputopu yanga, galimoto imayamba, ndikutsegula chitseko, ndikutuluka m'galimoto ndikuchotsa cholumikizira cha basi cha CAN kuchokera ku unit EVO. Monga mukuwonera, injini yamagalimoto ikugwira ntchito, koma tilibe makiyi aliwonse pakuyatsa.

Tsopano ngati musindikiza chopondapo cha brake palibe chomwe chingachitike chifukwa EVO sikudziwa kuti idapanikizidwa. Pambuyo pake, ndimatha kupita kumbuyo kwa gudumu, kukanikiza brake, kusuntha ndodo ya gear ku malo a "Drive", ndipo galimotoyo imayamba kuyenda. Zonsezi zimachitika popanda kiyi iliyonse.

21:40

Msonkhano DEFCON 27. Galimoto yanu ndi galimoto yanga. Gawo 2

Zotsatsa zina 🙂

Zikomo chifukwa chokhala nafe. Kodi mumakonda zolemba zathu? Mukufuna kuwona zambiri zosangalatsa? Tithandizeni potipatsa oda kapena kulimbikitsa anzathu, mtambo VPS kwa opanga kuchokera ku $ 4.99, ma analogi apadera a ma seva olowera, omwe adakupangirani inu: Chowonadi chonse chokhudza VPS (KVM) E5-2697 v3 (6 Cores) 10GB DDR4 480GB SSD 1Gbps kuchokera $19 kapena momwe mungagawire seva? (ikupezeka ndi RAID1 ndi RAID10, mpaka 24 cores mpaka 40GB DDR4).

Dell R730xd 2x yotsika mtengo ku Equinix Tier IV data center ku Amsterdam? Pokhapokha 2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TV kuchokera $199 ku Netherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - kuchokera $99! Werengani za Momwe mungamangire Infrastructure Corp. kalasi pogwiritsa ntchito ma seva a Dell R730xd E5-2650 v4 ofunika ma euro 9000 pa khobiri?

Source: www.habr.com

Kuwonjezera ndemanga