DEF CON 23 - Vehicle Hacking Village - Eric Evenchick - SocketCAN

แชร์
ฝัง
  • เผยแพร่เมื่อ 24 พ.ย. 2024

ความคิดเห็น • 11

  • @n124lp
    @n124lp 7 ปีที่แล้ว +2

    The reason that the HW address is not set, is that CAN devices do not have hardware addresses the way e.g. Ethernet devices do.

  • @adaminsanoff
    @adaminsanoff 7 ปีที่แล้ว

    I try to run virtual can, but candump and cansniffer shows nothing. What I am doing wrong? It stays just blank.

    • @adaminsanoff
      @adaminsanoff 7 ปีที่แล้ว

      So, when I send can message using cansend, it shows with candump and cansniffer, but there is no other active messages.

    • @adaminsanoff
      @adaminsanoff 7 ปีที่แล้ว +1

      OK. I have realized that actually I have to create traffic myself using "cangen vcan0" command. Here is how to generate random can traffic:
      sudo modprobe vcan
      sudo ip link add dev vcan0 type vcan
      sudo ip link set up vcan0
      cangen vcan0

  • @jonharson
    @jonharson 9 ปีที่แล้ว +2

    That is the easy part, implementing all the SAE and OEM protocols cost a lot of time and money.
    Do not fuzzy the can bus on a machine that you do not know... I have blown "something" on a brand new big rig with an automatic transmission, effectively bricking the engine, while using my own "telemetry reserved" ids... Warranty covered it, but their techs hates me now.

    • @totoxahc
      @totoxahc 8 ปีที่แล้ว

      What were you especifically doing?

    • @jonharson
      @jonharson 8 ปีที่แล้ว

      totoxahc Would you walk in a factory, plug into one of their assembly lines can-bus, start to fuzzy it and expect the whole thing not to shut down and all alarms to go off? Why would you expect being able to do the same thing on a vehicle? The particular bug I was describing here last year has since been fixed by Paccar, this was a case of me as a telemetry supplier doing perfectly valid things with the machine and still managing to brick it, just by having a PGN conflict on the bus. Do not ever fuzzy the can-bus of a live vehicle, you *will* fuck things up.

    • @totoxahc
      @totoxahc 8 ปีที่แล้ว

      +jonharson well, there are inductive/capacitive interfaces that allow you to listen to the bus with no posibility of interfering it. That would be useful for telemetry in any system that streams the data (j1939, fms, etc). If you were sending messages to one of those networks I think that is a really bad idea

    • @jonharson
      @jonharson 8 ปีที่แล้ว

      totoxahc I don't think you have the slightest experience working with those bus... You are not going to get anything useful from j1708/j1939 if you are not actively asking for it. Contactless-can does not in any way mean that it is read only. Brute forcing the address space to get all active PGM is harmless (there are tools made with just that purpose in mind), but if you start to fuzzy it with random garbage you will fuck things up guaranteed.

    • @totoxahc
      @totoxahc 8 ปีที่แล้ว

      - So nobody, except you, is asking for useful PGNs?
      - How could a contactless interface interfere with the bus?
      - Agree.

  • @LoneFerret
    @LoneFerret 7 ปีที่แล้ว

    ...demo gods strike again!