Hacking Vulnerabilities Of Trucking Software Systems Is Real…

[Ingomike]

“Researchers Jake Jepson, Rik Chatterjee and Jeremy Daily uncovered ELD vulnerabilities that could lead to unauthorized control of vehicle systems and data, as well as widespread fleet disruptions.”

‘Truck-to-truck worms’ introduced via ELDs could threaten major fleet disruption

Colorado State University researchers say ELDs are vulnerable to “truck-to-truck worms,” self-replicating malware that spreads across a network.

www.freightwaves.com

 

[Sigblitz]

 

[d.kaufman]

I love that movie

 

[Sigblitz]

I love that movie

That clip makes me feel old.

I watched it when it came out.

 

[d.kaufman]

That clip makes me feel old.

I watched it when it came out.

Your post made me order it on DVD so i have it on hand...lol

 

[Cameramonkey]

Your post made me order it on DVD so i have it on hand...lol

Speaking of, Ebay is GREAT for that. Older even obscure DVDs can be had for usually under $8 delivered. Less if you find a selller like the Decluttr store that does B2G1F and other promos to reduce cost.

 

[patience0830]

I love that movie

Never saw it.

 

[indyblue]

Bringing back memories of Bigtanker.

 

[2tonic]

The ELD can't control the truck. It can only record what the truck and driver do.
If it acts wonky, we just pull the connection harness (multi pin screw on) and use paper logs, like the old days.
Max 8 days on paper, but if the hack is that widespread, DOT will grant a special dispensation.
To get an ELD to take control of a truck's ECM would require a complete restructuring of the codes, language, and signal flow of the system.
Realistically a change of hardwiring.

 

[Ingomike]

The ELD can't control the truck. It can only record what the truck and driver do.
If it acts wonky, we just pull the connection harness (multi pin screw on) and use paper logs, like the old days.
Max 8 days on paper, but if the hack is that widespread, DOT will grant a special dispensation.
To get an ELD to take control of a truck's ECM would require a complete restructuring of the codes, language, and signal flow of the system.
Realistically a change of hardwiring.

The authors stated that.

“Each system by itself may not have cybersecurity concerns; the truck without an ELD does not have a wireless connection, and the ELD by itself cannot command a truck.”

 

[KLB]

Control systems for anything should not be connected to the Internet.

 

[Ingomike]

Control systems for anything should not be connected to the Internet.

We once had an air gap in our electrical grid, meaning if there was a problem at the substation a tech had to go out to reset it and or diagnose it. Now it is connected to for ease but is vulnerable if hacked, the old system was not hackable without also turning a human into an asset to perpetuate it at EVERY substation.

 

[KLB]

We once had an air gap in our electrical grid, meaning if there was a problem at the substation a tech had to go out to reset it and or diagnose it. Now it is connected to for ease but is vulnerable if hacked, the old system was not hackable without also turning a human into an asset to perpetuate it at EVERY substation.

Exactly. We are trading security for convenience. I fight this battle at work constantly.

 

[HKFaninCarmel]

We once had an air gap in our electrical grid, meaning if there was a problem at the substation a tech had to go out to reset it and or diagnose it. Now it is connected to for ease but is vulnerable if hacked, the old system was not hackable without also turning a human into an asset to perpetuate it at EVERY substation.

Like SF6 alarms on a chilly winter's eve

 

[ljk]

If a virus throws false DEF codes via ELD connected to ECU, then you may have a problem.

 

[Cameramonkey]

If a virus throws false DEF codes via ELD connected to ECU, then you are SOL.

FIFY