NefMoto

http://www.theregister.co.uk/2016/04/07/karamba_car_security/

Simple answer = both buses == off, easy todo.

So this is another VC backed company cashing in on the latest buzz?
I mean what is their product supposed to do?? sit in line with your immobilizer, tire pressure monitoring system, nav system, parking sensors etc. and be update-able enough to recognize common attacks but not update-able enough to be a vector itself?? ???

Whats the current vecors in General, the HS can is the most important and they  hide it pretty well except in haldex cars.

https://www.technologyreview.com/s/420168/wireless-car-sensors-vulnerable-to-hackers/

Who knows what will happen when you are able to spoof various signals to the various modules with invalid input.

It''s always been the case man, access to h bus and diag protocols you can take over a car.

Some brands diag overrides physical control too, there's IP based CAN routers I see too lol.

I thought about this from a theft point of view and take the ecu with you lol.

You can also overload the bus = bus off stalling car, etc.  From the many lines of ASM invalid inpus are formally handed in Bosch like cmpb r3 0xff.

UDS supports encrypted comms too.  That's the way to defeat it, and other way and I can only imagine that it anti tuner subterfuge.  Look at what Volvo's doing with Polestar e.g., they've beem using CAN since 98.

That link it bollocks, if they tied something like that into the emissions bus, I would not believe it until  seen the diagram lol.