For stock APA, yes thats the control flow. All I need to do is isolate the PSCM, spoof the speed to 0mph, handshake, and send angle commands.Sure. The park assist has set parameters in order to work. I program for a living. And with the safety protocol, and I’m just guessing but I would program it something like this in order to access the steering control for park assist. I don’t know what all requirements may be so this would be a minimum.
I do something like this all the time when programming PLCs when they are running safety critical systems. If the code is running, no on line edits. If the code is running all non-program inputs are ignored for safety systems. Outside intrusion of the code commands detected, ignore all outside command and set a fault alarm or immediately e-stop the program. The PLC network and processor are locked down by software and hardware key, MAC address or all of these. Or other security protocols.
- Verify the operational status of the park assist sensors. Any sensor marked bad, no park assist
- the vehicle would have to be stopped
- Once stopped, It must be placed in reverse
- The front and rear sensor on the parking side must see an opening the vehicle will fit in. This would probably be at the start of the code along with all status checks.
- Once these conditions, at a minimum are met, allow steering commands to steering into the opening detected.
- Only allow vehicle to accelerate to 2 mph. If speed over this limit is detected terminate park assist and immediately stop.
- if any of the conditions are false, do not allow steering commands. And immediately terminate park assist and steering commands.
- And most importantly do not allow non-OEM identified devices to access the system while the key is on and the engine is on. If this is detected, immediately put the vehicle into limp mode and slow to stop.
Forscan can not access all the modules. some modules require the IDS in order at access them.
attempting to access the park assist will require modifying the code to disable the safety features that allow it do what it does.
I sure it’s possible, but you will have to fool so many inputs and multiple on/off, and/or and safety protocol statements. So fool the computer into think the vehicle is stopped. What else will that affect? Fool the vehicle to think it’s in reverse. That could be exciting. Fool it into thinking it’s going slow enough at access the steering, that could get really fun.
There was a recent post on the UK Kuga forums where a new 2020 model Kuga decided to emergency brake to a stop by itself on a freeway/ highway. It was rear ended by the following vehicle. There was nothing ahead of it or any reason for it to brake. Apparently the rear brake lights didn't come on either (I think it was caught on dash cam they hadn't.)Just look at what has happened with some of the self-driving test vehicles. Tesla may be able to defend themselves against a multi-million injury dollar lawsuit, most people can’t.
Yes. The pscm is intercepted and the hardware sends the apa commands as if it was the Pam.I'm very interested in this as well. I'd be willing to test it. Can the angle commands be sent directly to the PSCM, without the PAM?