Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

Reject basic commands from MQTT until they're authenticated

Closed
  • Is something wrong?
#36 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
3/5
Estimated time
1-2 days
Newbie friendliness
45/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Active
Tech stack
rust
Domain
backend, security

Research direction

Start in core-interface/src/dispatch.rs and trace how basic commands are dispatched from MQTT versus BLE. Check the linked contracts#8 and firmware#16 work for the authentication contract and removal condition; update the relevant docs. Done when MQTT basic commands are rejected with a clear status until firmware#16 is complete, and the docs explain the gate.

Written by the indexing model from the issue text.

Description

Basic commands are accepted from MQTT as well as BLE (core-interface/src/dispatch.rs). Today every E-GMP command returns "Not implemented", so that's harmless. Once real commands land, anyone with the broker credentials (extractable from the APK) could unlock the car or replay a captured command.

Until MQTT commands are authenticated (contracts#8), reject basic commands that arrive over MQTT with a clear status, and say so in the docs. Remove the gate once firmware#16 is done.

Dominant language
Rust
Stars
1
Forks
0
Avg merge
13h 37m
Merged PRs (30d)
8

Getting set up

Open in Codespaces

Starts the project's dev container in your browser, under your own GitHub account.

  • No Dockerfile or Docker Compose file
  • No pull request template
  • No contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from OpenCarControls/firmware

All issues in OpenCarControls/firmware

Similar issues

More Rust issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.