Heavy Truck and Electronic Logging Devices

### Heavy Vehicle Architecture and the Federal ELD Mandate At 00:00 and 01:31, Corey Thuen introduces automotive security research focusing on commercial freight transport. He explains how the Federal Motor Carrier Safety Administration (FMCSA) mandated Electronic Logging Devices (ELDs) across millions of commercial heavy trucks to automatically monitor driver Hours of Service (HOS). Unlike passenger cars with isolated gateways, heavy trucks rely on standardized SAE J1939 CAN bus networks operating at 250 kbps across standard 9-pin Deutsch diagnostic ports.

### Regulatory Checklists vs. Real-World Security At 06:06 and 09:10, Thuen critiques the federal regulatory framework, emphasizing that the government established strict compliance checklists for data logging without including a single cybersecurity requirement. In response to the mandate, numerous hardware vendors rushed uncertified aftermarket dongles to commercial truck stops, creating a vast attack surface plugged directly into safety-critical vehicle networks.

### Hardware Teardowns and Firmware Reverse Engineering At 12:13 and 15:14, Thuen analyzes teardowns of popular commercial ELD devices. The hardware architectures typically consist of a low-cost microcontroller, a J1939 CAN transceiver, and an unauthenticated Bluetooth or cellular modem. Firmware extracted from these devices revealed hardcoded credentials, unvalidated over-the-air firmware updates, and completely unauthenticated serial communication bridges linking external wireless signals directly to the drivetrain bus.

### Wireless CAN Injection and Fleet Manipulation At 18:15 and 21:17, the presentation details how an attacker within Bluetooth range or via cellular interfaces can inject arbitrary J1939 CAN frames. Because the J1939 protocol lacks cryptographic authentication, rogue packets can spoof truck velocity, falsify driver duty status to evade law enforcement inspections, or trigger diagnostic fault codes that force commercial trucks into limp mode or disable cruise control systems.

### Systemic Supply Chain and Infrastructure Risks Concluding between 25:49 and 30:27, Thuen discusses the systemic economic and physical dangers posed by compromised ELD fleets. A wormable exploit propagating across cellular-connected logging devices could simultaneously immobilize commercial shipping corridors, strand freight logistics, or disrupt municipal supply chains, highlighting the urgent need for robust gateway isolation in commercial transport.

(AI summary — Gemini 3.8 Flash)