Using RTL-SDR to Open Car Doors (2016)
anthonys.io
Using RTL-SDR to Open Car Doors (2016)
1–10 of 53 posts
Re: Using RTL-SDR to Open Car Doors (2016)
#2The article states the need to jam the transmission (illegal in many countries) but does not explain why.
Re: Using RTL-SDR to Open Car Doors (2016)
#3The article states the need to jam the transmission (illegal in many countries) but does not explain why.
Many key fobs now (to my limited knowledge ) use an expanding one time use "code "essentially so once that transmission has been made, the same transmission won't unlock the car a second time. (On new vehicles at least )
Re: Using RTL-SDR to Open Car Doors (2016)
#4The article states the need to jam the transmission (illegal in many countries) but does not explain why.
The car locks usually operate on a rolling code system, where each code is only used once. By jamming the signal, you record it but don't let the car receive it, so you have one code. Then, when the remote gets pressed again, you record the second code and send the first. So, you're always one code ahead, and you can use that single code to open the car once.
AFAIK, if you let the car read a code straight from the remote, it will sync forward again, making all your stored codes invalid.
Re: Using RTL-SDR to Open Car Doors (2016)
#5Does anyone know a good alternative for HDSDR for Linux?
Re: Using RTL-SDR to Open Car Doors (2016)
#6The article states the need to jam the transmission (illegal in many countries) but does not explain why.
Many key fobs now (to my limited knowledge ) use an expanding one time use "code "essentially so once that transmission has been made, the same transmission won't unlock the car a second time. (On new vehicles at least )
This isn't a replay attack in the traditional sense. The attack works by simultaneously receiving the fob signal while jamming it to the car so it doesnt see it. Then, the car can't roll ahead its table.
To say another way, it exploits the fact that you can be a hundred miles from your car and push the unlock button on your fob but then return next to your car, push the fob, and the car unlocks.
Re: Using RTL-SDR to Open Car Doors (2016)
#7Does anyone know a good alternative for HDSDR for Linux?
I've used gqrx for some simple stuff and liked it: http://gqrx.dk/
Re: Using RTL-SDR to Open Car Doors (2016)
#8[deleted]
Re: Using RTL-SDR to Open Car Doors (2016)
#9The article states the need to jam the transmission (illegal in many countries) but does not explain why.
Many key fobs now (to my limited knowledge ) use an expanding one time use "code "essentially so once that transmission has been made, the same transmission won't unlock the car a second time. (On new vehicles at least )
I just wonder if there are any car lock systems that don't use any rolling codes, but does a proper challenge-response auth with time-limited nonces.
Re: Using RTL-SDR to Open Car Doors (2016)
#10One has to wonder about a technical blog that starts off with "Using the orginal RTL and pair that with HDSDR software on linux". So I did a search, and HDSDR only runs on Windows.