Electric vehicle CAN man-in-the-middling
summary
The vehicle CAN bus uses no encryption so snipping two wires behind the glovebox lets a small device sit between drivetrain and telematics and intercept and inject frames. A soldered man-in-the-middle module identifies the traction motor frame (by isolating directionality and finding ID 1D4) and rewrites battery state-of-charge, regenerative-braking flags and motor command bytes. The prototype glues a newer 40 kWh pack to the original 24 kWh system, yields about 60 kWh usable and enables long trips (customer reaches alpine passes).
AI-written summary · about
chapters (14)
- 0:00Intro
- 2:21You're probably an engineer
- 4:47Problems with old electric cars
- 6:36Solutions in practice?
- 7:15So you say it's possible?
- 8:43Commercial incentives push projects to completion
- 13:15CAN-bus 101
- 16:32Consequences of CAN
- 25:28Do a trace while driving
- 29:39Increase reported battery capacity
- 30:38Increase regenerative braking
- 32:48Give an 8 year old leaf the range of a Tesla Model 3
- 34:23MITM is not just a security issues
- 36:36If there's still time: TCU
related talks
29mX-in-the-Middle: Attacking Fast Charging Piles and Electric Vehicles
50mAdvanced CAN Injection Techniques for Vehicle Networks
40mThe UDS Security Model of the Tesla CAN Bus and Battery Management System
44mMy Car, My Keys: Obtaining CAN Bus SecOC Signing Keys
37mAutomatic Automotive Hacking
40mD2T1 - Backdooring & Remotely Controlling Cars
11mShort: Breaking the Charge: Exploiting State Manipulation in EV Charging
17mHotWire: Real-World Impersonation and Discharge Attacks on Electric Vehicle Charging...