# Secure Gateways are now used to block diagnostic access

**URL:** <https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900>\
**Category:** Maintenance/Repairs\
**Created:** [June 25, 2026, 5:28pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900 "2026-06-25T17:28:48Z")\
**Posts on this page:** 20\
**Page:** 4

<div class="post-metadata">

**Author:** ![ChrisTheTireWhisperer](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/christhetirewhisperer/32/34798_2.png) [@ChrisTheTireWhisperer](https://community.cartalk.com/u/ChrisTheTireWhisperer)\
**Post date:** [June 30, 2026, 9:22pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/61 "2026-06-30T21:22:54Z")

</div>

> [@bing](#):
>
> Way back when my CRT went black, I tried to get a schematic for it to replace the power supply. Even though made by Zenith, omly authorized GM repair facilities had this information.

Wait -

By CRT you mean a television in your house, correct?

---

<div class="post-metadata">

**Author:** ![asemaster](https://avatars.discourse-cdn.com/v4/letter/a/5f9b8f/32.png) [@asemaster](https://community.cartalk.com/u/asemaster)\
**Post date:** [June 30, 2026, 9:38pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/62 "2026-06-30T21:38:15Z")

</div>

> [@ChrisTheTireWhisperer](#):
>
> By CRT you mean a television in your house, correct?

I’m certain he’s talking about the cathode ray tube in the dash of his Riviera back in the 80’s.

---

<div class="post-metadata">

**Author:** ![jtsanders](https://avatars.discourse-cdn.com/v4/letter/j/c2a13f/32.png) [@jtsanders](https://community.cartalk.com/u/jtsanders)\
**Post date:** [June 30, 2026, 9:45pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/63 "2026-06-30T21:45:43Z")

</div>

> [@MikeInNH](#):
>
> So, just because it’s not automotive we have to start all over again.

Didn’t Deere try this too? In their case, they tried to force Deere equipment owners to go to Deere authorized shops, and Deere wouldn’t allow independent shops to work on their equipment, even with a subscription.

---

<div class="post-metadata">

**Author:** ![asemaster](https://avatars.discourse-cdn.com/v4/letter/a/5f9b8f/32.png) [@asemaster](https://community.cartalk.com/u/asemaster)\
**Post date:** [June 30, 2026, 9:53pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/64 "2026-06-30T21:53:23Z")

</div>

> [@TwinTurbo](#):
>
> According to the articles, I cannot reset the OBD faults after a repair

The fault code will clear upon the first trip after replacing the faulty component, and the readiness monitor will show complete.

> [@TwinTurbo](#):
>
> If I can amortize this small expense across 1000’s of vehicle repairs,

It’s a small expense for the DIY’er as well. We’re quibbling over the cost of a couple plates of sushi.

> [@TwinTurbo](#):
>
> OEMs have been fighting for years to restrict access

I think they’ve been fighting to preserve their proprietary technology, their quality, and their image.

> [@ChrisTheTireWhisperer](#):
>
> Does anyone think any cases involving ‘Right to Repair’ will make to the Supreme Corporation?

Didn’t some high-ranking government official just sign something like that…?

---

<div class="post-metadata">

**Author:** ![bing](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/bing/32/4619_2.png) [@bing](https://community.cartalk.com/u/bing)\
**Post date:** [June 30, 2026, 10:00pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/65 "2026-06-30T22:00:37Z")

</div>

That really wasn’t the point but yeah both my rivieras had the cathode ray touch screen for diagnostics and system operation. When they went dark they still functioned if you know where to touch the screen but just couldn’t see the results.

The point was no schematics were available to rookies, just to service centers.

---

<div class="post-metadata">

**Author:** ![ChrisTheTireWhisperer](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/christhetirewhisperer/32/34798_2.png) [@ChrisTheTireWhisperer](https://community.cartalk.com/u/ChrisTheTireWhisperer)\
**Post date:** [June 30, 2026, 10:03pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/66 "2026-06-30T22:03:18Z")

</div>

> [@asemaster](#):
>
> I’m certain he’s talking about the cathode ray tube in the dash of his Riviera back in the 80’s.

Yes, I remember that. A way ahead of it’s time attempt at an infotainment screen.

Thanks ase for clarifying, and Bing for later confirming that.

---

<div class="post-metadata">

**Author:** ![TwinTurbo](https://avatars.discourse-cdn.com/v4/letter/t/8baadc/32.png) [@TwinTurbo](https://community.cartalk.com/u/TwinTurbo)\
**Post date:** [July 1, 2026, 11:57am UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/67 "2026-07-01T11:57:24Z")

</div>

> [@asemaster](#):
>
> We’re quibbling over the cost of a couple plates of sushi.

No, we’re quibbling over the principal of it. At least I am.

What exactly does registering my device do, by the way? How does that prevent the issue they claim to be preventing? As long as my device is capable and registered, I can use it. They have no idea HOW I am using it…the real reason is quite transparent, almost laughable in it’s lack of validity…

---

<div class="post-metadata">

**Author:** ![bing](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/bing/32/4619_2.png) [@bing](https://community.cartalk.com/u/bing)\
**Post date:** [July 1, 2026, 8:15pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/68 "2026-07-01T20:15:15Z")

</div>

I just can’t help myself responding to one of the comments. Seems to zing right over his/her/thems head. The riviera touch screen was far more than the beginning of an infotainment system. While driving, you could access o2 sensor response, long and short term fuel trims and other diagnostic information before ob2. Select of course radio and tape features, heat and cool controls, trip information and destination information. Program messages like happy birthday to pop up at the appropriate time while driving, and much more. It has been years and my memory is fading, but calling it an infotainment system is bazaar.

Had it not been stalling on me that no one could find the cause, I probably would have driven it well into 700,000 miles. Instead I junked it in 2010. My second riviera and had two at the same time.

And yeah I’m not a novice. I’ve done brakes, wheel bearings, timing chains, exhaust, body work and painting, struts, and you name it. I’m well versed in economics, finance, business, psychology, politics, law, home repairs, electrical, plumbing, shingles, and concrete. Also have a little electronic training and can shoot with the best of them. I’m not a 3rd grader, so quit insulting my intelegence.

Yeah I’ve had ground school too but coouldnt afford flight school like my dad.

---

<div class="post-metadata">

**Author:** ![asemaster](https://avatars.discourse-cdn.com/v4/letter/a/5f9b8f/32.png) [@asemaster](https://community.cartalk.com/u/asemaster)\
**Post date:** [July 1, 2026, 9:29pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/69 "2026-07-01T21:29:29Z")

</div>

> [@TwinTurbo](#):
>
> What exactly does registering my device do, by the way?

I’m sure by now you’ve looked up what AutoAuth is and does, and why it’s supported by OEM and aftermarket alike. Is it a perfect solution? Nope. But because unscrupulous people will always find away around a firewall or security barrier, does that mean we shouldn’t even try?

> [@TwinTurbo](#):
>
> No, we’re quibbling over the principal of it.

Look, I agree with you on the principal of it. I can’t stand that I need to verify with OKTA on my phone to access my time card or that I need to use Microsoft Authenticator to log into my laptop to do my work. Yeah, it’s a pain to have to register my scan tools to use them on certain vehicles. If it were up to me I would remove all those safety devices. I don’t want any of it. I also don’t want a guy walking down the street with a tablet cloning my key fob to steal my car. I also don’t want the guy down the street tampering with his engine system to roll coal just because he thinks it’s cool, or the used car lot programming out a fault code for a counterfeit airbag.

So what functions do you think should require registration and possibly licensing? Keys/antitheft? Emissions modifications?

---

<div class="post-metadata">

**Author:** ![ChrisTheTireWhisperer](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/christhetirewhisperer/32/34798_2.png) [@ChrisTheTireWhisperer](https://community.cartalk.com/u/ChrisTheTireWhisperer)\
**Post date:** [July 1, 2026, 10:31pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/70 "2026-07-01T22:31:26Z")

</div>

Apologies if I or anyone else insulted your intelligence.

Perhaps infotainment wan’t the right name for what was introduced in that Riviera 40 years ago. Touch screen, more broadly, might make more sense to call it.

---

<div class="post-metadata">

**Author:** ![JoeMario](https://avatars.discourse-cdn.com/v4/letter/j/3bc359/32.png) [@JoeMario](https://community.cartalk.com/u/JoeMario)\
**Post date:** [July 2, 2026, 12:00pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/71 "2026-07-02T12:00:03Z")

</div>

I’m in agreement that this is a money grab by auto manufacturers. Many are struggling to stay profitable.

They’re gambling they can get away with this. And they will unless buyers flock to competitors.

---

<div class="post-metadata">

**Author:** ![texases](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/texases/32/862_2.png) [@texases](https://community.cartalk.com/u/texases)\
**Post date:** [July 2, 2026, 1:06pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/72 "2026-07-02T13:06:12Z")

</div>

Years ago GM talked about how ‘telematics’ (meaning subscription services, I think that’s what they called it) would be a big driver for company profits I doubted it at the time. Wrong again!

---

<div class="post-metadata">

**Author:** ![TwinTurbo](https://avatars.discourse-cdn.com/v4/letter/t/8baadc/32.png) [@TwinTurbo](https://community.cartalk.com/u/TwinTurbo)\
**Post date:** [July 2, 2026, 3:00pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/73 "2026-07-02T15:00:10Z")

</div>

> [@asemaster](#):
>
> So what functions do you think should require registration and possibly licensing? Keys/antitheft? Emissions modifications?

Only the things that would risk compromising personal information or changing vehicle programming.

All bi-directional diagnostic functions used in diagnosis and repair should be available. I should be allowed to reset diagnostic codes and monitors. I cannot change anything fundamental or access sensitive data by initiating diagnostic functions or viewing data used in diagnosing faults.

Many mfrs already allow the duplication of keys using embedded functions. You need at least one original key to make a new key. If you have no functional keys, then you should need to visit an authorized service center to generate a new master key.

Over the air software updates already happen. I see no need for individuals to be able to alter any embedded code or software. That should be locked down through the diagnostic port. No access to personal data through the diagnostic port. Tuning should be limited to a sub-set of the parametric data and not allow fundamental changes that would compromise the regulatory certifications.

This kind of segregation of public versus private access is simple to implement. Even my corporate phone has two “identities” that are protected by a firewall, encryption and other protection measures. I can do everything a normal phone can do but when you want to access my corporate profile or data, it requires 2FA, it’s encrypted and locked down from any unauthorized access.

The reason they don’t do this is simple. This is a convenient way for them to get what they wanted all along- locking in service revenue. This is where the real profit exists for them- recurring revenue for their authorized service centers…this is the first step of erosion…it will continue.

---

<div class="post-metadata">

**Author:** ![Nevada\_545](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/nevada_545/32/41232_2.png) [@Nevada\_545](https://community.cartalk.com/u/Nevada_545)\
**Post date:** [July 2, 2026, 10:12pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/74 "2026-07-02T22:12:31Z")

</div>

> [@TwinTurbo](#):
>
> This is a convenient way for them to get what they wanted all along- locking in service revenue. This is where the real profit exists for them- recurring revenue for their authorized service centers…

How do the vehicle manufactures collect revenue though dealer service departments? From the sale of replacement parts?

Manufactures pay car dealers to repair vehicles.  
Vehicle owners pay dealers to repair vehicles.  
How does the money get back to the manufacture? Is there a graft going on between the manufacturers and dealers?

---

<div class="post-metadata">

**Author:** ![Nevada\_545](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/nevada_545/32/41232_2.png) [@Nevada\_545](https://community.cartalk.com/u/Nevada_545)\
**Post date:** [July 2, 2026, 10:55pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/75 "2026-07-02T22:55:43Z")

</div>

> [@texases](#):
>
> Years ago GM talked about how ‘telematics’ (meaning subscription services, I think that’s what they called it) would be a big driver for company profits I doubted it at the time. Wrong again!

Do you subscribe to connected services for your Lexus? Safety Connect and Service Connect are provided for 5 years, I haven’t seen many customers continue after the free trial period.

Telematics is the conveyance for data between the manufacture and your vehicle.  
For example, system faults (codes) are transmitted to the manufacture as you drive. This allows the manufacture to monitor and study problems that may be occurring on many vehicles. Your service advisor can review the faults while you make an appointment for service.

Lexus isn’t interested in monitoring for quality control much past 5 years, but since the system is already in place, it is available to the customer for a fee.

---

<div class="post-metadata">

**Author:** ![Tester](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/tester/32/15976_2.png) [@Tester](https://community.cartalk.com/u/Tester)\
**Post date:** [July 2, 2026, 11:03pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/76 "2026-07-02T23:03:09Z")

</div>

Better hang on to your older vehicle!

Or buy a Slate.

> **[Trump Learns of Right to Repair Battle from Ford and GM and Vows to Solve It,...](https://www.caranddriver.com/news/a71562651/trump-ford-gm-right-to-repair-battle/)**
>
> The president finds the fight 'strange' and says the federal government is going to do something to help owners.

Tester

---

<div class="post-metadata">

**Author:** ![texases](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/texases/32/862_2.png) [@texases](https://community.cartalk.com/u/texases)\
**Post date:** [July 2, 2026, 11:11pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/77 "2026-07-02T23:11:56Z")

</div>

> [@Nevada\_545](#):
>
> Do you subscribe to connected services for your Lexus? Safety Connect and Service Connect are provided for 5 years,

We are subscribed, but I don’t know if we’ll pay once the five years are up.

---

<div class="post-metadata">

**Author:** ![Nevada\_545](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/nevada_545/32/41232_2.png) [@Nevada\_545](https://community.cartalk.com/u/Nevada_545)\
**Post date:** [July 3, 2026, 1:08am UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/78 "2026-07-03T01:08:21Z")

</div>

This article describes one of the vehicle computer network security problems.

[Thieves are now stealing cars via a headlight ‘CAN injection’ - Autoblog](https://www.autoblog.com/carbuying/vehicle-headlight-can-bus-injection-theft-method-update)

> Someone has developed a tool (disguised as a JBL Bluetooth speaker and sold on the dark web) that when wired into a vehicle’s control CAN bus, can impersonate the vehicle’s key fob. The vehicle used as an example is a current-generation [Toyota RAV4](https://www.autoblog.com/article/2023-toyota-rav4-review/), but it’s vital to note that this vulnerability is not specific to any particular OEM or model — this is an industry-wide problem at the moment. Thieves are pulling bumpers and trim pieces away from a vehicle, which allows them access to the CAN bus near the headlight connector. Much of a vehicle’s CAN bus systems will be found hidden deep inside a car, but since modern headlights are so smart these days, they require their own ECUs, which means they’re going to be wired into the whole car’s CAN bus system.

---

<div class="post-metadata">

**Author:** ![TwinTurbo](https://avatars.discourse-cdn.com/v4/letter/t/8baadc/32.png) [@TwinTurbo](https://community.cartalk.com/u/TwinTurbo)\
**Post date:** [July 3, 2026, 12:23pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/79 "2026-07-03T12:23:54Z")

</div>

> [@Nevada\_545](#):
>
> How do the vehicle manufactures collect revenue though dealer service departments? From the sale of replacement parts?

Do you think there is not a vested interest in seeing their authorized service centers be profitable? Do you think selling cars is the most profitable segment of the business?

This is a complex relationship. The manufacturers need a way to sell their cars to the public. They also need a trained and trusted avenue for customers to get service and ultimately, be satisfied with their purchase so they return for their next new car. Do you achieve that end by not doing everything you can to ensure the company you trust with your business success is also successful and profitable?

---

<div class="post-metadata">

**Author:** ![TwinTurbo](https://avatars.discourse-cdn.com/v4/letter/t/8baadc/32.png) [@TwinTurbo](https://community.cartalk.com/u/TwinTurbo)\
**Post date:** [July 3, 2026, 12:40pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/80 "2026-07-03T12:40:21Z")

</div>

> [@Nevada\_545](#):
>
> Safety Connect and Service Connect are provided for 5 years, I haven’t seen many customers continue after the free trial period.

Be careful to read the fine print. What they collect, how they can use it and who they can share it with are all detailed in the fine print. I declined/opted out all of it when I bought my RAV4 because of how they defined how they could use and distribute the data collected to third party “affiliates”. Insurance companies??

[Previous page](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900.md?page=3)

[Next page](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900.md?page=5)
