Last week, 4. I spent some time fixing up CA settings and reviewing connections to see if blocking the CA would cause problems. This week… I tried sniffing traffic from the car. The car is the only thing worth sniffing.
This was pretty easy. I used the unifi router to redirect all traffic from the car to a wireguard tunnel. I used mitmproxy to see requests. All manner of stuff, including:
- every event by the car - start engine, stop, app open, app close etc.
- Traffic requests, including API keys.
- Hopefully one API key per car.
- Debugging dumps from the car - all apps installed etc.
I shut it down and tried to get a OTA. Hopefully they will fix their software soon.