Resistor Swap Gives Honda Insights More Power

A common complaint around modern passenger vehicles is that they are over-reliant on electronics, from overly complex infotainment systems to engines that can’t be fixed on one’s own due to the proprietary computer control systems. But even still, when following the circuits to their ends you’ll still ultimately find a physical piece of hardware. A group of Honda Insight owners are taking advantage of this fact to trick the computers in their cars into higher performance with little more than a handful of resistors.

The relatively simple modification to the first-generation Insight involves a shunt resistor, which lets the computer sense the amount of current being drawn from the hybrid battery and delivered to the electric motor. By changing the resistance of this passive component, the computer thinks that the motor is drawing less current and allows more power to be delivered to the drivetrain than originally intended. With the shunt resistor modified, which can be done with either a bypass resistor or a custom circuit board, the only other change is to upgrade the 100 A fuse near the battery for a larger size.

With these two modifications in place, the electric motor gets an additional 40% power boost, which is around five horsepower. But for an electric motor which can output full torque at zero RPM, this is a significant boost especially for a relatively lightweight car that’s often considered under-powered. It’s a relatively easy, inexpensive modification though which means the boost is a good value, although since these older hybrids are getting along in years the next upgrade might be a new traction battery like we’ve seen in the older Priuses.

Thanks to [Aut0l0g1c] for the tip!

A line art schematic of a bicycle CVT drive. Two large green circles at the bottom have the text "1. Increases speed" where the crank arm would enter the system. A series of cam arms highlighted in red say "2. Converts from rotary to reciprocating motion." Finally, a blue highlighted bearing says "3. Converts from reciprocating back to rotary motion."

A Look Inside Bicycle Gearboxes

While bicycle gearboxes date back to at least the 1920s, they’re relatively unseen in bike racing. One exception is Honda’s race-winning mid-drive gearboxes, and [Alee Denham] gives us a look at what makes these unique drives tick.

Honda has developed three generations of bicycle gearbox as part of their company’s R&D efforts, but none have ever been released as a commercial product. Designed as a way for their engineers to stretch their mental muscles, the gearboxes were only used in bike races and seen at a few trade shows. In 2004, the third gen “derailleur in a box” led to the first gearbox victory in the Downhill World Cup Circuit.

The third gen gearbox differs significantly from the CVT drivetrains in the first and second generation gearboxes, but it is unclear why Honda abandoned the CVT. [Denham] has a nice animation detailing the inner workings of these CVTs based on information from the original patents for these rarely seen gearboxes.

Derailleurs remain the primary drivetrain in racing due to their lighter weight and higher overall efficiency. While still expensive, the decreased maintenance of gearbox drivetrains make a lot of sense for more mundane cycling tasks like commuting or hauling cargo, but only time will tell if the derailleur can be supplanted on the track and trail.

For more on bicycle drivetrains, check out this chainless digital drivetrain or the pros and cons of e-bike conversions.

Continue reading “A Look Inside Bicycle Gearboxes”

A Honda car behind a gate, with its turn signals shown blinking as it's being unlocked by a portable device implementing the hack in question. Text under the car says "Rolling Pwned".

Unlock Any (Honda) Car

Honda cars have been found to be severely  vulnerable to a newly published Rolling PWN attack, letting you remotely open the car doors or even start the engine. So far it’s only been proven on Hondas, but ten out of ten models that [kevin2600] tested were vulnerable, leading him to conclude that all Honda vehicles on the market can probably be opened in this way. We simply don’t know yet if it affects other vendors, but in principle it could. This vulnerability has been assigned the CVE-2021-46145.

[kevin2600] goes in depth on the implications of the attack but doesn’t publish many details. [Wesley Li], who discovered the same flaw independently, goes into more technical detail. The hack appears to replay a series of previously valid codes that resets the internal PRNG counter to an older state, allowing the attacker to reuse the known prior keys. Thus, it requires some eavesdropping on previous keyfob-car communication, but this should be easy to set up with a cheap SDR and an SBC of your choice.

If you have one of the models affected, that’s bad news, because Honda probably won’t respond anyway. The researcher contacted Honda customer support weeks ago, and hasn’t received a reply yet. Why customer support? Because Honda doesn’t have a security department to submit such an issue to. And even if they did, just a few months ago, Honda has said they will not be doing any kind of mitigation for “car unlock” vulnerabilities.

As it stands, all these Honda cars affected might just be out there for the taking. This is not the first time Honda is found botching a rolling code implementation – in fact, it’s the second time this year. Perhaps, this string of vulnerabilities is just karma for Honda striking down all those replacement part 3D models, but one thing is for sure – they had better create a proper department for handling security issues.

The Honda Takedown: How A Global Brand Failed To Read The Room

Perhaps the story of the moment in the world of 3D printing concerns a Japanese manufacturer of cars and motorcycles. Honda has sent a takedown notice requesting the removal of models starting with the word “Honda” to the popular 3D printing model repository site Printables. It’s left in its wake puzzlement, disappointment, and some anger, but what’s really going on? Perhaps it’s time to examine what has happened and to ponder what it means for those who put online printable parts and accessories for cars or any other item manufactured by a large corporation.

If You Make Something, What Rights Do You Have?

Soichiro Honda with his 1964 Formula 1 car
Soichiro Honda, famous for being an engineer rather than a serial litigator. Roderick Eime, CC BY 2.0.

The story is that as far as we can glean from reports online, the takedown notice was sent only to Printables by the European arm of Honda, and was pretty wide-ranging with any Honda-related model in its scope. Printables complied with it, but as this is being written there are plenty of such models available from Thingiverse and other model repository sites.

Anyone who makes a career in content creation has by necessity to have a working knowledge of copyright and intellectual property law as it’s easy for the unwary to end up the subject of a nasty letter, so here at Hackaday while we’re not lawyers this is a subject on which we have some professional experience. What follows then is our take based on that experience, our view on Honda’s motivation, and whether those of you who put up 3D models have anything to worry about. Continue reading “The Honda Takedown: How A Global Brand Failed To Read The Room”

Hackaday Links Column Banner

Hackaday Links: April 17, 2022

There are plenty of stories floating around about the war in Ukraine, and it can be difficult to sort out which ones are fact-based, and which are fabrications. Stories about the technology of the war seem to be a little easier to judge, and so stories about an inside look at a purported Russian drone reveal a lot of interesting technical details. The fixed-wing UAV, reported to be a Russian-made “Orlan,” looks quite the worse for wear as it’s given a good teardown by someone wearing Ukraine military fatigues. In fact, it looks downright homemade, with a fuel tank made from what looks like an old water bottle, liberal use of duct tape to hold things together, and plenty of hot glue sprinkled around — field-expedient repairs, perhaps? The big find, though, is that the surveillance drone carried a rather commonplace — and cheap — Canon EOS Rebel camera. What’s more, the camera is nestled into a 3D printed cradle, strapped in with some hook-and-loop tape, and its controls are staked in place with globs of glue. It’s an interesting collection of hardware for a vehicle said to cost the Russian military something like $100,000 to field. The video below shows a teardown of a different Orlan with similar results, plus a lot of dunking on the Russians by a cheery bunch of Ukrainians.

Continue reading “Hackaday Links: April 17, 2022”

Hacker Claims Honda And Acura Vehicles Vulnerable To Simple Replay Attack

Keyless entry has become a standard feature on virtually all cars, where once it was a luxury option. However, it’s also changed the way that thieves approach the process of breaking into a car. After recent research, [HackingIntoYourHeart] claims that many modern Honda and Acura vehicles can be accessed with a simple replay attack using cheap hardware. 

It’s a bold claim, and one that we’d love to see confirmed by a third party. The crux of the allegations are that simply recording signals from a Honda or Acura keyfob is enough to compromise the vehicle. Reportedly, no rolling code system is implemented and commands can easily be replayed.

Given these commands control features like unlocking the doors, opening the trunk, and even remote starting the vehicle, it’s a concerning situation. However, it’s also somewhat surprising. Rolling code technology has been around for decades, and makes basic replay attacks more difficult. Range extender attacks that target keyfobs sitting inside homes or gas stations are more common these days.

Whether Honda has made a security faux pas, or if there’s something more at play here, remains to be seen. If you’ve got more information, or have been able to recreate the same hack on your own Honda, be sure to let us know. 

Empty Parking Lot

Pandemic Chip Shortages Are Shutting Down Automotive Production

Once upon a time, the automobile was a mostly mechanical beast, but no longer. Advanced electronics have weaved their way into the modern car, from engine to infotainment and climate control to the buttons now sprinkled throughout the passenger cabin. The gains in amenity and efficiency can’t be sniffed at, but it leaves manufacturers reliant on semiconductor suppliers to get cars out the door. Over the past year, it’s become much more complicated — with many automakers having to slow production in the face of integrated circuit shortages that can be traced back to Spring of 2020. Continue reading “Pandemic Chip Shortages Are Shutting Down Automotive Production”