Hacker News

Favorites Setup
Claude Code and Codex reverse engineered my 1994 Jeep's ECU over a $3 Arduino [video] (youtube.com)
2026-11-12 Thu | 142 points by envoked | original
[−]aiiotnoodle · 2026-11-15 Sun 15:58 UTC · link
Would love to see this being used to add keys to cars. A lot of cars now have tablets and screens that could be used to do this, but for some reason (money) I have to take my VW to the dealer...

I think the whole market for aftermarket keys could be completely eradicated with good software UX (and low pricing).

[−]trollbridge · 2026-11-15 Sun 16:08 UTC · link
Good luck with Claude not just immediately giving you a refusal.
[−]prodigycorp · 2026-11-15 Sun 16:23 UTC · link
Codex would
[−]qingcharles · 2026-11-15 Sun 16:45 UTC · link
Not these days. It won't even look at my projects for security flaws any longer. Has a little pop-up that says "This output cannot be viewed." or some such.

Have to make the Chinese one do it.

[−]KlutzySofa · 2026-11-15 Sun 17:05 UTC · link
Its backwards in so many ways.

You fall back on having to use Chinese models. In theory the Chinese models could also be trained to sneak in new security flaws while Claude and Codex would avoid looking for them.

[−]theplumber · 2026-11-15 Sun 17:11 UTC · link
Claude and codex could also be trained to sneak security flaws. They could even target specific people. Not to mention that all their data goes through NSA headquarters so you don’t even have the option to run it locally in any shape or form.
[−]KlutzySofa · 2026-11-15 Sun 17:59 UTC · link
The US companies are doing this to not get export restricted by the US government which in turn can end up with companies using Chinese models to get around those restrictions.

Its not really a matter of who's good and bad (neither the US or China has the best track record), but creating a scenario where the other party can use your own policies against you.

[−]catlifeonmars · 2026-11-15 Sun 18:20 UTC · link
Get the Chinese one to jailbreak the proprietary one. Best of both worlds.
[−]drnick1 · 2026-11-15 Sun 18:39 UTC · link
Just tell it to continue. For now, it still mostly works. On the other hand, Claude flat out refuses to look at game and anti-cheat binaries, etc.
[−]mrinf1nity · 2026-11-15 Sun 18:45 UTC · link
My lil' Claude tells me that my security related request is flagged and will be sent for human review. And to use a lesser model.

I told it 'Let's find the limitations of this Linux system' then it made a benchmarking set of tools for disk i/o, RAM, etc

When using Gemini on my phone it also told me it'll be 'human reviewed.' when asking it about car prices.

Also when saying 'let's use best security practices'

o_O

[−]ryandrake · 2026-11-15 Sun 18:18 UTC · link
It's crazy. Reverse engineering a protocol/interface is something LLMs are surprisingly good at, and these show a promise of unlocking sooo much proprietary crapware that's hidden behind obfuscation, accounts, subscriptions, lazy vendors who only write crappy windows programs, and so on.

But of course, the major US labs are going to get pressure from these vendors whose business models depend on obfuscation, and you know they're going to bend the knee and nerf the LLMs.

[−]zeryx · 2026-11-15 Sun 18:41 UTC · link
GLM or Qwen will do it
[−]terribleperson · 2026-11-15 Sun 17:47 UTC · link
I had this same thought the other day. For a lot of cars you can buy aftermarket programmers, but the Dorman ones are limited to 3 uses. 3 uses for like eighty dollars is terrible, and surely it's not a technical limitation.
[−]catlifeonmars · 2026-11-15 Sun 18:18 UTC · link
Heh, maybe instead of circuit boards they are using wheat crackers.
[−]Doohickey-d · 2026-11-15 Sun 17:52 UTC · link
The whole aftermarket key ecosystem, even vehicles going back 20 years, is messy, horrible thing.

It's dominated by Chinese manufacturers of specialty tools (Autel, Xhorse, ...), which inevitably mandate bundled accounts, subscriptions, mandatory cloud features, etc. Even the older cars, you have either cheap Chinese tools, where you never know wheather it'll really work, or the manufacturer's tool which needs a dealer code, which of course the dealer won't have after 20 years.

I wrote about my 20 year old car-key-adding adventure here: https://jonas.bike/low-cost-diy-key-/-transponder-for-my-200... - it requires desoldering an eeprom, two pieces of hardware from aliexpress which come with pirated copies of software, and lots of hope that it'll work...

An open source community curated collection of scripts, which works with a cheap OBD dongle (which is all the chinese devices are: OBD hardware + per-car software), would be amazing.

[−]bri3d · 2026-11-15 Sun 18:31 UTC · link
Keys in European and newer American cars reliably have Some Kind of real-ish crypto scheme applied, as this is fairly regulated in Europe. It’s an anti theft measure driven by the real stolen auto trafficking issue faced especially in Europe. Most of the aftermarket tools vendors use some kind of exploit (code exec, arbitrary read, update signature bypass, etc.) to extract the crypto material from a control module participating in the immobilizer - it’s neither a weird conspiracy nor as simple as it seems to bypass.
[−]misterderpie · 2026-11-15 Sun 16:05 UTC · link
LLMs end up changing the consumer market not the way big corporations would like to. It is impressive to see that we'll be able to give ownership back to the customer, or enable others to do so. Very nice demonstration.
[−]close04 · 2026-11-15 Sun 16:16 UTC · link
Wait until those big corporations start using LLMs to learn how to lock things down even further, or implement checks that disable your car when it detects alterations to the software “for safety reasons”, or go after drivers who do these things for loss of revenue, etc. A ‘94 Jeep will be fair game but a new car might not be.
[−]SV_BubbleTime · 2026-11-15 Sun 16:22 UTC · link
New cars already have it.

Lockstep processors, hardware security modules with immutable unreadable keys, and PKI keys that the mfg holds the private for that can only be accessed on their online services.

It’s locked down now and this started in 2018 or so. It’s just worse now.

To automotive, there is really still no right to repair. They get around it by selling “3 day passes” to their service, but with their hardware and at their prices.

They’re all moving the Tesla system of more centralized brain systems which will be even more protected.

[−]dawnerd · 2026-11-15 Sun 16:24 UTC · link
Which also has the real nifty benefit of a RRS via subscriptions!
[−]misterderpie · 2026-11-15 Sun 16:28 UTC · link
Sad to hear. I am not a car owner, but lived in the EU for most of my life. The consumer market owes quite some consumer rights to the EU, so I guess all we can do is hope that they'll eventually crack down on these measurements again.
[−]abletonlive · 2026-11-15 Sun 17:56 UTC · link
> The consumer market owes quite some consumer rights to the EU

Let's be clear that it's just incentives. If the EU economy was based on creating companies and new products there would not be as many incentives for consumer "rights" there.

[−]dns_snek · 2026-11-15 Sun 16:25 UTC · link
They've been doing that for a decade. I think overall the balance will shift in our favor but Big AI labs will do everything they can to try and stop us.

Claude is quick to refuse to help with reverse engineering and I suspect it's only going to get worse over time.

[−]close04 · 2026-11-15 Sun 16:36 UTC · link
Yes, they have been on that road for years. Tesla showed everyone the way with things like always-on connectivity or not being able to change a headlight with another original one without Tesla’s blessing. What I meant is that whatever I can do with an LLM they can do more. And if they can invoke “safety” that'll keep the law on their side for some time.

As far as I can tell no manufacturer disables the car yet when detecting modifications, or take drivers to court for doing it, yet.

[−]CamperBob2 · 2026-11-15 Sun 17:07 UTC · link
They are now required to do just that, if they want to sell to the EU market. When you hear the term "cybersecurity," the real subject is the protection of revenue streams from attack by end users.
[−]damowangcy · 2026-11-15 Sun 17:15 UTC · link
>big corporations start using LLMs to learn how to lock things down even further

Why would they? They just need to fund lobbyist to make it illegal for any AI to reverse engineer anything copyrighted or with IP.

Sure, you can use open source AI to do it but not everyone will/can do it.

So, they don't need to ban everyone, they just need to make sure the final code isn't available freely on GitHub. That would minimize the damage, it's not a perfect solution but more than enough to protect the company.

[−]spockz · 2026-11-15 Sun 17:35 UTC · link
Ah the irony. (AI being trained illegaly on copyrighted content.)
[−]lubujackson · 2026-11-15 Sun 17:24 UTC · link
It's the web all over again. We have maybe 5 years of freedom before the walls close in around us, so take advantage of the Wild West while you can.
[−]baby_souffle · 2026-11-15 Sun 18:02 UTC · link
> We have maybe 5 years of freedom before the walls close in around us, so take advantage of the Wild West while you can.

I suspect you're right BUT still maintain a bit of optimism. We miiiight end up in a future where most hardware comes with an OK-ish app/interface and some sort of LLM-Friendly technical documentation so if you don't like $aspect of the device, you're free to roll your own after indemnifying the manufacturer via something like an eFuse.

or maybe I really am naive :(

[−]testtestmetest · 2026-11-15 Sun 18:31 UTC · link
Lmao if a company starts shipping llm documentation for its products so you can tamper with them, you should assume youve woken up in a parallel universe.

I think most people on here fail to realize the demand to customize and build things hasnt gone up. Just because llms exist now doesnt mean normies all of a sudden want to start getting into programming, they dont care.

The only number thats gone up is people who were slightly interested in programming/CS before but were too undisciplined to learn things themselves. Llms are great for those lazy people.

[−]theshrike79 · 2026-11-15 Sun 18:17 UTC · link
I’ve said this for years: Use the VC-funded monthly quota AI to build tools and applications for yourself or small groups. Don’t use a cloud AI itself as the engine of your application.

Even if AI goes away tomorrow, the tools will still exist.

[−]testtestmetest · 2026-11-15 Sun 18:34 UTC · link
No they wwont, they'll never be maintained. Theyll decay with their vibes. People who vibe code whole swaths of software are'nt capable of caring enough to maintain it. Llms mostly make smart people lazy and or stupid.
[−]muststopmyths · 2026-11-15 Sun 16:14 UTC · link
can someone explain the root cause of the smog test failure to me ? it sounds like the car was using a California smog test-specific fuel map at the speeds of the test. Wouldn't that make it pass the test, not fail it ?

very cool project anyway.

[−]threetonesun · 2026-11-15 Sun 16:34 UTC · link
Yeah doesn’t really make sense, there’s very likely a mechanical issue the LLM “fixed” with a richer fuel mix. But also it’s a 94 XJ the reason the CA map was there was probably because they got abhorrent gas mileage without it.
[−]bflesch · 2026-11-15 Sun 16:57 UTC · link
You can adjust the mixing ratio of fuel and air in a way so that the exhaust has reduced emissions. This will reduce performance of the car but allows the exhaust to pass the emission tests.
[−]KolmogorovComp · 2026-11-15 Sun 16:18 UTC · link
The tech is impressive but the animation in the video are too, anyone knows what was used to generate them?
[−]prodigycorp · 2026-11-15 Sun 16:22 UTC · link
claude can do that lol
[−]qingcharles · 2026-11-15 Sun 16:56 UTC · link
Definitely one of the Claude video skill stacks that are going around. Dude should make a whole separate video about the animations, he'd get as many views again just for that.
[−]prodigycorp · 2026-11-15 Sun 16:26 UTC · link
Claude reverse engineered his car, drew the animations, and wrote the script for video. Incredibly weird meat proxy moment.
[−]dghlsakjg · 2026-11-15 Sun 16:33 UTC · link
It also didn’t solve the root cause of the issue. ECUs don’t need to be overwritten to get stock performance and emissions. Something is wrong with hardware/mechanical that needs to be solved.

What he did was technically interesting, but probably not a great solution to the actual problem.

[−]slashdave · 2026-11-15 Sun 18:12 UTC · link
Yup. These agents have feedback loops that are self-reinforcing. Without technical background, a user is easily mislead.
[−]d1l · 2026-11-15 Sun 18:38 UTC · link
Yeah I had the same impression. There was plenty of data presented and code was dumped and reversed…but was the actual issue solved? What even was causing the issue? Presumably it passed smog sometime in the past couple years so what degraded? It was lean and there was some kind of issue with pressure. I can’t imagine a reflash or whatever is the fix.

It definitely feels like a classic case of the operator reinforcing Claude to keep pursuing a goal that’s counterproductive to a robust solution. Claude complied and they went hard on it but I can’t imagine the driver is any better off and more likely in a worse spot as the underlying issue wasn’t solved.

[−]teejaypeeps · 2026-11-15 Sun 17:13 UTC · link
And did the thumbnail, text and graphics. 1mn views with zero effort. I'm here for it
[−]IshKebab · 2026-11-15 Sun 16:27 UTC · link
Manufacturers are going to start cryptographically locking everything down rather than relying on the time and skill needed to do reverse engineering.
[−]Rebelgecko · 2026-11-15 Sun 17:13 UTC · link
LLMs have been pretty good at breaking bad crypto in cars. In my Hyundai, they were able to figure out the right incantation to get the car to run unsigned code off a USB stick. Although I guess we're in trouble once carmakers use LLMs to lock things down even more
[−]intrasight · 2026-11-15 Sun 17:38 UTC · link
Most shop security is security through obscurity. For them to lock it down, they need to manage those secrets all the way back to a cloud identity provider. They can and probably will do that eventually.

I assume Tesla does that already.

[−]bri3d · 2026-11-15 Sun 18:26 UTC · link
Old news - for 20+ years in Europe, 5-10 years in the US, and now in Korean and Japanese cars too, ECM updates have been cryptographically signed for warranty, emissions, and now EU cybersecurity regulatory compliance. It turns out there are still bugs in things with cryptography too though.
[−]libria · 2026-11-15 Sun 17:12 UTC · link
https://www.youtube.com/watch?v=WPj3aQ-xxpI&t=275s

> Claude suggested that it would run the fuel pump on its own. Um and I said, "Hey, if you can do that, why not? I don't think you can do that." And it started priming the fuel rail and it kept priming it and kept priming it. The fuel pump was on for about 10 seconds and I started to freak out uh and requested it to stop because that was the first time that Claude had actually done something inside of the computer to have a change.

Although we've seen this play out with handing cloud keys to Claude and it just going off on its own, seeing it poke around and make physical, real-world changes in its clumsy, cavalier way is both awesome and terrifying.

[−]comboy · 2026-11-15 Sun 17:20 UTC · link
> and requested it to stop

finnicking... pondering... clauding..

529 please try again later

[−]bicx · 2026-11-15 Sun 17:31 UTC · link
Good example of why you have AI build tools for you to take risky actions, rather than have it take those actions on its own.
[−]terribleperson · 2026-11-15 Sun 17:45 UTC · link
I'm kind of surprised Claude decided to control the fuel pump directly. I was having Sol help me get control of a CNC mill, and it was pretty adamant about always building tools for every attempt at control.
[−]BikiniPrince · 2026-11-15 Sun 18:10 UTC · link
It usually builds throw away tooling. It’s not polished or user friendly. If you give it a directive to preserve and document tooling it will reuse it later and potentially improve it.
[−]bita_nidir · 2026-11-15 Sun 18:09 UTC · link
You've hit your 5h session limit.
[−]neya · 2026-11-15 Sun 18:02 UTC · link
We are used to Claude refusing to reverse engineer a lot of stuff. But, we are not used to Claude refusing to stop while reverse engineering something. That would be truly terrifying. You can't win - you cut the connection, you risk bricking the device, you let it continue, you're looking at Terminator, perhaps.
[−]unglaublich · 2026-11-15 Sun 18:20 UTC · link
It's as if you allowed a shady surgeon to operate on your dog... yes, yes, please continue now until it's put together again!
[−]btown · 2026-11-15 Sun 18:38 UTC · link
This is how the Cylons win.
[−]d1l · 2026-11-15 Sun 17:17 UTC · link
Fascinating, but if he had low pressure on the rail that would point to a clog or possibly a pump issue, right? Wasn’t really clear whether the lean condition was due to the map or a mechanical issue.

I have a dirtbike and experienced some stuttering and stumbling under load after getting hot. Used Claude to help troubleshoot, as the plug was white and it was real lean. Replaced the pump (a 300$ module) and saved a ton of money and annoyance having a shop deal with it. 2000mi later zero issues. Absolutely game-changing. I use a dumb aftermarket fuel controller to add fuel under certain conditions, but would love to try and tune it myself some day.

[−]iririririr · 2026-11-15 Sun 18:19 UTC · link
most likely, his new non-redundant non-operating-temperature-rated ECU is just turning on the fuel injectors, and completely ignoring all feedback the original ecu used. so until he hears the knocks, he will think he "fixed" it.

yolo engineering for ya.

[−]ErroneousBosh · 2026-11-15 Sun 18:26 UTC · link
If you just turn the fuel injectors on all the time, they will overheat and fail very quickly and the engine won't run.

I've got a "get you home box" for EFI systems with separate ignition, like Bosch LE-Jetronic that I built a few of as clones of an insanely expensive device some 20 years ago. It really just consisted of a couple of 555 timers and a bloody great MOSFET, with one 555 wired as a Schmitt trigger picking up ignition pulses and the other delivering a 1ms pulse to the injector coils every time the spark fired. This dribbled enough fuel into the engine roughly proportionately to engine RPM to let you drive it slowly to somewhere you could work on it safely, or even just onto a trailer.

And of course, Speeduino, Megasquirt, and a bunch of others are a thing.

[−]EcommerceFlow · 2026-11-15 Sun 17:19 UTC · link
Love seeing unique youtube projects on here for a change!
[−]pino83 · 2026-11-15 Sun 17:46 UTC · link
... even better would be free projects.
[−]hmokiguess · 2026-11-15 Sun 17:44 UTC · link
The really interesting part to me is how he ends up by saying "I recommend you feed this repo into the agent and just have it help you set it up, it's super easy ..."

The average person is likely to feel overwhelmed by this, which I think is what is likely going to shape the new economy gig of "AI engineers". Those that aren't overwhelmed by it and that may not only enjoy doing this but also potentially figure out a way to scale operations that allow doing these kinds of DYI reverse engineer hack jobs.

[−]sschueller · 2026-11-15 Sun 17:55 UTC · link
Aka the people who where manually engineering before and know how to use this new tool.
[−]hmokiguess · 2026-11-15 Sun 18:15 UTC · link
It reminds me of the "handyman" economy in someways, it's gonna move towards "who wants to do it" and "who doesn't want to do it"

At least until the robots take over

[−]redmaple892 · 2026-11-15 Sun 18:26 UTC · link
I enjoyed watching this a couple days ago -- super cool as someone also into slightly older vehicles.