Quote:
Originally Posted by fumanchu1
why would tuners not be doing this on your behalf?! You are requesting them to do it for you, if that isn't delegation of authority (in this case acting on your behalf to tune) then what is? Any person (in this case the tuner) providing you with a service, that you requested, but are unable to complete by yourself is acting on your behalf as you have given them authority to do so and therefore would fall under the exception.
here is the exert:
Under the exemption as proposed, circumvention would be
allowed when undertaken by or on behalf of the lawful owner of the
vehicle.
Meaning as long as the tuner has authorization from yourself he IS acting on your behalf and therefore covered in the exemption (p.40)
|
you're confusing the original proposed and what was actually accepted.
like i have referenced - at the top of page 43 there is this sentence:
"The exemption also excludes circumvention “on behalf of” vehicle owners, as a broader exception allowing third parties to engage in circumvention activities on behalf of others is in tension with the anti-trafficking provisions of section 1201(a)(2) and (b)"
Quote:
Originally Posted by renfield90
They oppose it on paper, largely because the EPA would light their ass up if they openly admitted "we make it easy for enthusiasts to modify stuff outside of EPA approved parameters."
The first company to actually go after enthusiasts tuning their cars would lose a whole generation of enthusiast sales.
If they actually wanted you out of the ECU they would make it happen (see: many early 2000s Toyota ECUs which were uncrackable and not fooled by most inline or piggyback mods). The twins ECU doesn't have, to my knowledge, any encryption or authentication measures designed to deter "unauthorized" access. Everything's done with a standard J2534 interface as I understand it. You could read the SAE spec and write your own software to interface with it if you wanted.
|
You should do some digging then to update your knowledge - it is necessary to authenticate to the ECU in order to read/flash a rom file.
the first request asks the ecu for a cryptographic seed. the ecu and the sender have a shared cryptographic function and key that when given a seed will spit out a response. the sender then sends the computed result back to prove it has the key.
usually these tuning solution companies figure out what the algorithm is from debugging servicing programs, which is also illegal. brute force won't work if the seed is reset (toyota's do so) after number of tries (10 or so).
btw, i don't debate "why would", "should they", "on paper", "close their eyes", etc
but by law - unless i missed something from those DMCA docs it seems it is not legal.