I'm working on a bike with Shimano Di2 (electronic shifting with servo motors in the derailleurs), and I use the e-tube software on a laptop to configure it. What I would like to do is be able to password protect the derailleurs setup so it is not able to be changed unless the owner wants it changed. So it's not able to be changed by someone else without the owners permission.
migrated from stackoverflow.com Jun 7 '14 at 17:43
This question came from our site for professional and enthusiast programmers.
The edit from freiheit did change the question. He removed the word firmware.
I am a software developer and did system support for many years.
Yes it is possible to password protect firmware but it is not a common practice.
I seriously doubt they have security / authority on the firmware.
You must have physically access to attach the device.
If gold medals are at stake then I suggest physical security.
Really there are so many things on a bike you could sabotage.
A router is a great example of firmware and physical security.
Gamers is the closest example to your use case.
This is an odd question. The sentiment that the only security here is physical security is correct. Think about the following:
Given all of this, use common sense. You can just keep the bike secured or limit access to the bike's junction box (think low-tech, like duct-tape or hot-glue). Or you can inspect settings and check firmware revisions.
In the end, the Di2 junction box is the brain of the system. Someone with ill-intent (and physical access) could just replace the entire module in 30 seconds or so. You're seeking a technological solution to a people problem.
Perhaps instead of password protecting it, you might want to think of ways you could detect that the device was tampered with. I'm not certain how often you would change settings or plug into it, but you may want to cover the port with security tape or something similar so that you are aware when somebody has been messing with the equipment. This may not be the best solution, but perhaps someone more familiar with the hardware could offer a solution to detect tampering with the hardware that would work better. Or perhaps you should just have your desired settings and firmware backed up and reload them before each ride or race.
If you have a bike with Shimano Di2, physical security should be paramount - I'm not sure why an unsavory person should even be physically near enough to the bike to be able to make those changes. And they'd have to be carrying the right cable and everything.
It seems like a highly implausible situation to occur, and certainly which should not occur provided the bike is physically secured so someone can't connect the e-tube software to begin with.
That being said, the software is likely proprietary, so it isn't clear if that functionality could be added - you'd have to probably reverse engineer it and see if you could mod it to do that.