Sponsored

What would a battery swap cost?

tigerbalm

Well-Known Member
First Name
Damien
Joined
Oct 11, 2020
Threads
94
Messages
3,514
Reaction score
7,912
Location
Dublin, Ireland
Website
www.targatrips.com
Vehicles
911 Targa 4 GTS, Fiat 500 EV. Sold: Taycan Turbo S, Taycan 4S; Panamera Turbo S
Country flag
Technically, no? 1898 Egger-Lohner C.2 Phaeton, erronously called Porsche P1, is an electric vehicle built by Egger-Lohner. It is the first vehicle that Ferdinand Porsche contributed to.
And is the first vehicle you see on entering the Porsche Museum in Zuffenhausen.

Porsche Taycan What would a battery swap cost? IMG_2197
Sponsored

 

tchavei

Well-Known Member
Joined
Dec 3, 2022
Threads
33
Messages
1,302
Reaction score
1,369
Location
Portugal
Vehicles
Too many to list. Includes a MY23 Taycan RWD
Country flag
Wait a minute...

I saw an electric oldsmobile... Recently at a museum and it wasn't in Zuffenhausen

It was at the science museum in Vienna?

Can't remember the brand though but I thought "Damn what did we do wrong back then"
 
OP
OP
OTPSkipper

OTPSkipper

Well-Known Member
First Name
Scott
Joined
Jan 31, 2022
Threads
2
Messages
199
Reaction score
94
Location
SoCal
Vehicles
Neptune Blue Taycan
Country flag
Nah, just need to add my signing key somewhere*. ;-) Though it'd be interesting to learn whether the integrity of individual components is/can be measured - and at what level (ie is it the full batt pack, or individual modules etc.)

*That's the hard part, figuring out where and how the trust anchors are managed. Somewhere there's always a cert.
Agree. But in peripherals. Which is pretty much the whole car, the certs are distributed. It’s the only what you can boot a car in under a second. If it is a big tree, it takes too long to boot.
 

WasserGKuehlt

Well-Known Member
Joined
Sep 7, 2022
Threads
5
Messages
2,066
Reaction score
2,456
Location
WA
Vehicles
4CT, 996C2, MacanS
Country flag
Agree. But in peripherals. Which is pretty much the whole car, the certs are distributed. It’s the only what you can boot a car in under a second. If it is a big tree, it takes too long to boot.
That's precisely the problem with edge, "things" or peripherals - they are self-sufficient/reliant, in that their state includes all they need to establish trust, or authenticate themselves. Which means, in turn, that the only defense against an attacker with possession is physical/anti-tampering (and obfuscation); a determined entrepreneur could, in principle, make the car accept whichever changes, modules etc. The risk of bricking is substantial, though, and that itself is a deterrent.

I'd imagine the car was engineered to scan itself, and periodically reevaluate its trust status (or trusted certs) against a well-known remote endpoint - so it could "spit out" unwanted changes (a revocation check of sorts, if you will). However, I'd imagine that would have to be weighed against safety concerns - can't brick (any component of) a moving car.

But I didn't mean to argue in seriousness, just to point out that, while far from trivial, hacking a car may be easier than a service; it's just that getting it wrong is very expensive.
 


OP
OP
OTPSkipper

OTPSkipper

Well-Known Member
First Name
Scott
Joined
Jan 31, 2022
Threads
2
Messages
199
Reaction score
94
Location
SoCal
Vehicles
Neptune Blue Taycan
Country flag
That's precisely the problem with edge, "things" or peripherals - they are self-sufficient/reliant, in that their state includes all they need to establish trust, or authenticate themselves. Which means, in turn, that the only defense against an attacker with possession is physical/anti-tampering (and obfuscation); a determined entrepreneur could, in principle, make the car accept whichever changes, modules etc. The risk of bricking is substantial, though, and that itself is a deterrent.

I'd imagine the car was engineered to scan itself, and periodically reevaluate its trust status (or trusted certs) against a well-known remote endpoint - so it could "spit out" unwanted changes (a revocation check of sorts, if you will). However, I'd imagine that would have to be weighed against safety concerns - can't brick (any component of) a moving car.

But I didn't mean to argue in seriousness, just to point out that, while far from trivial, hacking a car may be easier than a service; it's just that getting it wrong is very expensive.
This has been really interesting. I build network controllers and it self certifies the code. It’s a fair amount of HW and technology to do it. I never really thought about the ramifications of doing it in a system this big.

how many mutable code processing systems do you think a Taycan has?
 

Raphie

Well-Known Member
Joined
Dec 15, 2022
Threads
30
Messages
619
Reaction score
611
Location
NL
Vehicles
Porsche Taycan 4s (21)
Country flag
In the settings menu there are about 40 certifcates which can be active or inactive.
all premium functions can be revoked, unless you’ve got a perpetual license.
all licenses have a 2 or 3 year checkout, at which point they need to be renewed (either OTA for free, or renewed via store services) keeping your LTE offline won’t prevent them from timing out.
 
OP
OP
OTPSkipper

OTPSkipper

Well-Known Member
First Name
Scott
Joined
Jan 31, 2022
Threads
2
Messages
199
Reaction score
94
Location
SoCal
Vehicles
Neptune Blue Taycan
Country flag
In the settings menu there are about 40 certifcates which can be active or inactive.
all premium functions can be revoked, unless you’ve got a perpetual license.
all licenses have a 2 or 3 year checkout, at which point they need to be renewed (either OTA for free, or renewed via store services) keeping your LTE offline won’t prevent them from timing out.
Excellent. We haven’t bored the pants off everybody! These are certs that bind the various optional SW pieces to the root of trust cert in the pcm. We were talking about the many other root of trust certs that we think exist in other processors in the car. One in each of those sealed boxes for the chargers, inverters, drive by wire, etc.

They are interesting because we were talking about 3rd party batteries. These roots of trust have to be hacked to make any 3rd party modifications to the chargers, etc.

@WasserGKuehlt pointed out that they could be hacked. And that is certainly possible.

I was of the opinion that 3rd party would stick to refurbishing stock Taycan batteries to avoid these problems. If an improved batter came into existence, it would be Porsche developed or at least approved.
 


WasserGKuehlt

Well-Known Member
Joined
Sep 7, 2022
Threads
5
Messages
2,066
Reaction score
2,456
Location
WA
Vehicles
4CT, 996C2, MacanS
Country flag
Excellent. We haven’t bored the pants off everybody! These are certs that bind the various optional SW pieces to the root of trust cert in the pcm. We were talking about the many other root of trust certs that we think exist in other processors in the car. One in each of those sealed boxes for the chargers, inverters, drive by wire, etc.

They are interesting because we were talking about 3rd party batteries. These roots of trust have to be hacked to make any 3rd party modifications to the chargers, etc.

@WasserGKuehlt pointed out that they could be hacked. And that is certainly possible.

I was of the opinion that 3rd party would stick to refurbishing stock Taycan batteries to avoid these problems. If an improved batter came into existence, it would be Porsche developed or at least approved.
Who's bored? In fact, I think I'll CC @whitex just to make sure he hasn't missed this thread. :)

@OTPSkipper you also wrote: "how many mutable code processing systems do you think a Taycan has?"
I've no idea, but I assume it's in the dozens; in fact, I'd expect the car to have a full "digital twin", with every non-trivial subassembly (as in having a more-than-binary state) to be modeled in software, possibly run code, and likely to have its own identity (the examples you gave above are what I had in mind as well). I'd further expect the car to run 3-4 different "machines" - own OS/core, running independently/on dedicated CPU and bus, and - for our purposes - acting as security boundaries. (In fact, there is very likely a per-car PKI.) The "user experience machine" would not have any privileges in the "running systems machine", there's probably a "system" machine correlating/observing the car's operation, and acting as the trust authority.

So they'd have the means to lock it down tight, to the point where you couldn't, for example, install a Panamera/EMEA-market window regulator. But that'd make servicing extremely difficult, so some degree of intentional relaxation of trust is no doubt traded off for repairability. That is, the car's TA would "know" that a module injected in the system, whether it's code or hardware, is not the original one, and might even know if it's 1P or 3P. But it would have to tolerate it, and I'm guessing that's done simply by registering a key id (which itself would be a highly privileged operation). It's entirely possible that this degree of tolerance varies by component - for instance, I can accept a Panamera/other-market window regulator, but not a motor/battery.

You're definitely right in that refurbishing OE components would be much easier. I was more or less poking at the claim that the car's security would be impenetrable - it's just very difficult to defend against possession, especially in systems that can't afford to enforce strict integrity.
 

tchavei

Well-Known Member
Joined
Dec 3, 2022
Threads
33
Messages
1,302
Reaction score
1,369
Location
Portugal
Vehicles
Too many to list. Includes a MY23 Taycan RWD
Country flag
Who's bored? In fact, I think I'll CC @whitex just to make sure he hasn't missed this thread. :)

@OTPSkipper you also wrote: "how many mutable code processing systems do you think a Taycan has?"
I've no idea, but I assume it's in the dozens; in fact, I'd expect the car to have a full "digital twin", with every non-trivial subassembly (as in having a more-than-binary state) to be modeled in software, possibly run code, and likely to have its own identity (the examples you gave above are what I had in mind as well). I'd further expect the car to run 3-4 different "machines" - own OS/core, running independently/on dedicated CPU and bus, and - for our purposes - acting as security boundaries. (In fact, there is very likely a per-car PKI.) The "user experience machine" would not have any privileges in the "running systems machine", there's probably a "system" machine correlating/observing the car's operation, and acting as the trust authority.

So they'd have the means to lock it down tight, to the point where you couldn't, for example, install a Panamera/EMEA-market window regulator. But that'd make servicing extremely difficult, so some degree of intentional relaxation of trust is no doubt traded off for repairability. That is, the car's TA would "know" that a module injected in the system, whether it's code or hardware, is not the original one, and might even know if it's 1P or 3P. But it would have to tolerate it, and I'm guessing that's done simply by registering a key id (which itself would be a highly privileged operation). It's entirely possible that this degree of tolerance varies by component - for instance, I can accept a Panamera/other-market window regulator, but not a motor/battery.

You're definitely right in that refurbishing OE components would be much easier. I was more or less poking at the claim that the car's security would be impenetrable - it's just very difficult to defend against possession, especially in systems that can't afford to enforce strict integrity.
In a perfect world, yes.

Watch someone hacking the hell out of it in a couple of years when most initial cars have lost their warranty.

In the end, the Reverse Engineer always wins.
 

WasserGKuehlt

Well-Known Member
Joined
Sep 7, 2022
Threads
5
Messages
2,066
Reaction score
2,456
Location
WA
Vehicles
4CT, 996C2, MacanS
Country flag
In the end, the Reverse Engineer always wins.
Meh. When you build something, everything has a cost so it's all about trade-offs. If Porsche bought themselves 5-8 years, job well done.
 
OP
OP
OTPSkipper

OTPSkipper

Well-Known Member
First Name
Scott
Joined
Jan 31, 2022
Threads
2
Messages
199
Reaction score
94
Location
SoCal
Vehicles
Neptune Blue Taycan
Country flag
That is, the car's TA would "know" that a module injected in the system, whether it's code or hardware, is not the original one, and might even know if it's 1P or 3P. But it would have to tolerate it, and I'm guessing that's done simply by registering a key id (which itself would be a highly privileged operation). It's entirely possible that this degree of tolerance varies by component - for instance, I can accept a Panamera/other-market window regulator, but not a motor/battery.
What we do in the controllers is put the FW hash residual in an immutable register that anyone can see. That is how the version and signing can be verified by a central authority. Is that what you mean by key id?

You're definitely right in that refurbishing OE components would be much easier. I was more or less poking at the claim that the car's security would be impenetrable - it's just very difficult to defend against possession, especially in systems that can't afford to enforce strict integrity.
agree.
 

Kingske

Well-Known Member
First Name
Frank
Joined
Jun 6, 2020
Threads
79
Messages
1,429
Reaction score
1,643
Location
New Jersey and Colorado, USA
Vehicles
2020 Porsche Taycan 4S, 2024 BMW X3, 2014 BMW 3 GT
Country flag
IMO the sensible internal design of the Taycan battery means rebuilding one with new cells will be a logical and cost efficient solution in due course.
No need to replace a lot of very expensive to make parts if cells have lost some capacity.
Indeed! Preferably with superior next-generation cells if those would be compatible in terms of form factor and with the support wiring and systems around it...
 
OP
OP
OTPSkipper

OTPSkipper

Well-Known Member
First Name
Scott
Joined
Jan 31, 2022
Threads
2
Messages
199
Reaction score
94
Location
SoCal
Vehicles
Neptune Blue Taycan
Country flag
In a perfect world, yes.

Watch someone hacking the hell out of it in a couple of years when most initial cars have lost their warranty.

In the end, the Reverse Engineer always wins.
I think these ota update cars are a new level of security. Not in the security technology, but in the shear volume of secrets that must be hacked to do 3rd party development. Not sure it will be anything like ice car curve for 3rd party development we are used to. It’s going to be interesting.
 

whitex

Well-Known Member
Joined
Jul 30, 2021
Threads
87
Messages
8,218
Reaction score
7,251
Location
WA, USA
Vehicles
2023 Taycan TCT, 2024 Q8 eTron P+
Country flag
In the settings menu there are about 40 certifcates which can be active or inactive.
all premium functions can be revoked, unless you’ve got a perpetual license.
all licenses have a 2 or 3 year checkout, at which point they need to be renewed (either OTA for free, or renewed via store services) keeping your LTE offline won’t prevent them from timing out.
Are you saying the Taycan is a cloud product now? If what you are saying is true, if your car is prevented from internet access (say after 3 free years you choose to not pay the monthly connectivity), the certificates even for included features will expire and the car will not be able to renew them, so all features will stop working. Did I understand you correctly?
Sponsored

 
 








Top