Would love to see this being used to add keys to cars. A lot of cars now have tablets and screens that could be used to do this, but for some reason (money) I have to take my VW to the dealer...
I think the whole market for aftermarket keys could be completely eradicated with good software UX (and low pricing).
Not these days. It won't even look at my projects for security flaws any longer. Has a little pop-up that says "This output cannot be viewed." or some such.
You fall back on having to use Chinese models. In theory the Chinese models could also be trained to sneak in new security flaws while Claude and Codex would avoid looking for them.
Claude and codex could also be trained to sneak security flaws. They could even target specific people. Not to mention that all their data goes through NSA headquarters so you don’t even have the option to run it locally in any shape or form.
The US companies are doing this to not get export restricted by the US government which in turn can end up with companies using Chinese models to get around those restrictions.
Its not really a matter of who's good and bad (neither the US or China has the best track record), but creating a scenario where the other party can use your own policies against you.
[−]catlifeonmars · 2026-11-15 Sun 18:20 UTC ·
link
Get the Chinese one to jailbreak the proprietary one. Best of both worlds.
It's crazy. Reverse engineering a protocol/interface is something LLMs are surprisingly good at, and these show a promise of unlocking sooo much proprietary crapware that's hidden behind obfuscation, accounts, subscriptions, lazy vendors who only write crappy windows programs, and so on.
But of course, the major US labs are going to get pressure from these vendors whose business models depend on obfuscation, and you know they're going to bend the knee and nerf the LLMs.
[−]terribleperson · 2026-11-15 Sun 17:47 UTC ·
link
I had this same thought the other day. For a lot of cars you can buy aftermarket programmers, but the Dorman ones are limited to 3 uses. 3 uses for like eighty dollars is terrible, and surely it's not a technical limitation.
[−]catlifeonmars · 2026-11-15 Sun 18:18 UTC ·
link
Heh, maybe instead of circuit boards they are using wheat crackers.
The whole aftermarket key ecosystem, even vehicles going back 20 years, is messy, horrible thing.
It's dominated by Chinese manufacturers of specialty tools (Autel, Xhorse, ...), which inevitably mandate bundled accounts, subscriptions, mandatory cloud features, etc. Even the older cars, you have either cheap Chinese tools, where you never know wheather it'll really work, or the manufacturer's tool which needs a dealer code, which of course the dealer won't have after 20 years.
I wrote about my 20 year old car-key-adding adventure here: https://jonas.bike/low-cost-diy-key-/-transponder-for-my-200... - it requires desoldering an eeprom, two pieces of hardware from aliexpress which come with pirated copies of software, and lots of hope that it'll work...
An open source community curated collection of scripts, which works with a cheap OBD dongle (which is all the chinese devices are: OBD hardware + per-car software), would be amazing.
[−]londons_explore · 2026-11-15 Sun 19:07 UTC ·
link
Frustratingly those cheap OBD dongles (ELM327 clones) seem to be mostly designed for diagnostics. They effectively run a regex over all the canbus data and tell the computer what matches.
However they can't match and forward everything (not enough RAM) and miss loads of packets, which makes them useless for things like reflashing firmware or interfacing with OEM tooling.
Keys in European and newer American cars reliably have Some Kind of real-ish crypto scheme applied, as this is fairly regulated in Europe. It’s an anti theft measure driven by the real stolen auto trafficking issue faced especially in Europe. Most of the aftermarket tools vendors use some kind of exploit (code exec, arbitrary read, update signature bypass, etc.) to extract the crypto material from a control module participating in the immobilizer - it’s neither a weird conspiracy nor as simple as it seems to bypass.
I think the whole market for aftermarket keys could be completely eradicated with good software UX (and low pricing).
Have to make the Chinese one do it.
You fall back on having to use Chinese models. In theory the Chinese models could also be trained to sneak in new security flaws while Claude and Codex would avoid looking for them.
Its not really a matter of who's good and bad (neither the US or China has the best track record), but creating a scenario where the other party can use your own policies against you.
I told it 'Let's find the limitations of this Linux system' then it made a benchmarking set of tools for disk i/o, RAM, etc
When using Gemini on my phone it also told me it'll be 'human reviewed.' when asking it about car prices.
Also when saying 'let's use best security practices'
o_O
But of course, the major US labs are going to get pressure from these vendors whose business models depend on obfuscation, and you know they're going to bend the knee and nerf the LLMs.
It's dominated by Chinese manufacturers of specialty tools (Autel, Xhorse, ...), which inevitably mandate bundled accounts, subscriptions, mandatory cloud features, etc. Even the older cars, you have either cheap Chinese tools, where you never know wheather it'll really work, or the manufacturer's tool which needs a dealer code, which of course the dealer won't have after 20 years.
I wrote about my 20 year old car-key-adding adventure here: https://jonas.bike/low-cost-diy-key-/-transponder-for-my-200... - it requires desoldering an eeprom, two pieces of hardware from aliexpress which come with pirated copies of software, and lots of hope that it'll work...
An open source community curated collection of scripts, which works with a cheap OBD dongle (which is all the chinese devices are: OBD hardware + per-car software), would be amazing.
However they can't match and forward everything (not enough RAM) and miss loads of packets, which makes them useless for things like reflashing firmware or interfacing with OEM tooling.