zlacker

>>mikela+(OP)
The article misses to explain why this is an EU problem, not just a BMW problem. Is the problem described caused by a specific EU regulation (which?) or is mentioning the EU just click bait? (Honest question.)

>>Archel+jb
It is a BMW problem and the rest is clickbait. If you own a BMW you know all this as it has been the case for over decades.

It's also not a eu thing as all manufacturers are locking things up, Ford and other US brands are trying as much as all other manufacturers. They just haven't reached BMW levels yet.

>>consp+Zr
UN Regulation No. 155, and 156, and the Cyber Resilience Act (CRA) are requiring car manufacturers to implement cryptographic validation that allows only authorized software from the manufacturer to be run.

>>somera+Ev
This is just signing, nothing cutting edge. Verification of signatures is a fairly old tech. What is the exact problem here? Is it that manufacturers do not publish the signed binaries or is it that you want to run something on your car compiled by you?

>>sublim+Mr2
Authorized software means authorized for that car's VIN number. Basically it's the same issue with parts in Apple products that are serial number locked.

If for instance if you damaged a headlamp, and then went to an authorized BMW dealer, bought the correct brand new OEM BMW head lamp assembly from the parts department of an authorized BMW dealer, and followed the replacement procedure to the letter in the BMW service website... it won't work. The headlamp assembly is not authorized to talk to the rest of the car even though it's OEM, untampered, with stock firmware.

The headlamp has to be reprogrammed with the correct VIN number in order for the rest of the ECU's in that particular car to recognize it as authorized.