Editing On-board diagnostics (section)

==Security issues==
Researchers at the [[University of Washington]] and [[University of California]] examined the security around OBD and found that they were able to gain control over many vehicle components via the interface. Furthermore, they were able to upload new [[firmware]] into the [[engine control unit]]s. Their conclusion is that vehicle [[embedded system]]s are not designed with security in mind.<ref>{{cite news |url=http://arstechnica.com/security/2010/05/car-hacks-could-turn-commutes-into-a-scene-from-speed/ |title=Car hacks could turn commutes into a scene from Speed |first=Peter |last=Bright |work=[[Ars Technica]] |date=15 May 2010 |access-date=23 Aug 2012}}</ref><ref>{{cite web|url=http://users.cis.fiu.edu/~carbunar/teaching/cis5374/slides/autosec.g.mastakar.pptx|access-date=23 Aug 2012|date=6 Apr 2012|first=Gaurav|last=Mastakar|title=Experimental Security Analysis of a Modern Automobile|publisher=[[University of Washington]] and [[University of California San Diego]]|archive-url=https://web.archive.org/web/20120920195607/http://users.cis.fiu.edu/~carbunar/teaching/cis5374/slides/autosec.g.mastakar.pptx|archive-date=September 20, 2012|url-status=dead}}</ref><ref>{{cite web |url=http://www.newscientist.com/article/mg21929266.500-25-gadget-lets-hackers-seize-control-of-a-car.html |title=$25 gadget lets hackers seize control of a car |first=Paul |last=Marks |work=New Scientist |date=17 July 2013 |access-date=5 November 2013}}</ref>

There have been reports of thieves using specialist OBD reprogramming devices to enable them to steal cars without the use of a key.<ref>{{cite web|title=Video: Key fob reprogrammers steal BMW in 3 mins|url=https://www.pistonheads.com/news/general-pistonheads/video-key-fob-reprogrammers-steal-bmw-in-3-mins/25953|date=2 July 2012|last=Riggers|publisher=PistonHeads|access-date=9 July 2020}}</ref> The primary causes of this vulnerability lie in the tendency for vehicle manufacturers to extend the [[Bus (computing)|bus]] for purposes other than those for which it was designed, and the lack of [[authentication]] and [[authorization]] in the OBD specifications, which instead rely largely on [[security through obscurity]].<ref>{{cite web|url=https://isc.sans.edu/presentations/sansfire2012-Rob_Vandenbrink-obd-preso.pdf|title=Dude, Your Car is Pwnd|first=Rob|last=Van den Brink|publisher=[[SANS Institute]]|date=10 July 2012|url-status=dead|archive-url=https://web.archive.org/web/20130223105754/https://isc.sans.edu/presentations/sansfire2012-Rob_Vandenbrink-obd-preso.pdf|archive-date=23 February 2013}}</ref>