Live data from Hacker News

Thieves boosting signal from key fobs inside homes to steal vehicles

cbc.ca

81–90 of 449 posts

Re: Thieves boosting signal from key fobs inside homes to steal vehicles

#81
post #55

“Greater Toronto Area” = GTA. What a coincidence. Jokes aside, this is bound to happen. It’s disturbing that a vulnerability like this isn’t caught as a show-stopper before the technology is sold to consumers.

It's not a show-stopper. It's not even close to being a show-stopper any more than having keys is also a vulnerability to having a car stolen.

All you have to do is keep the fob inside a shielded case at home and you're fine.

Re: Thieves boosting signal from key fobs inside homes to steal vehicles

#82

This happened to a family member of mine, here in Toronto. Lost their gorgeous M5. Their kid normally wakes up in the middle of the night, except this time, he freaked right out like he was scared. They were wondering what was going on with him, when one of the parents heard the M5 turn on (it's pretty distinct). "That's my car!" His wife said, "Naw, you're crazy, no way." Sure enough, enough, key fob attack and thef…

What strange is, I can see unlocking the car and even starting it with this attack -- but do the cars not continually (or at least every minute or two) revalidate the presence of the key?

Once they got very far away from the house, the car should shut off. Or so I would think.

Re: Thieves boosting signal from key fobs inside homes to steal vehicles

#83
>"The vehicle will continue running in perpetuity until it runs out of gas or until you shut it down," he said.

>"They do that for safety so that if you lose the key fob or if it loses signal the vehicle doesn't shut down while you're driving, but that right there is part of the vulnerability."

Anecdata, a few years ago my wife had a Renault "Megane" that used a sort of "card" that worked with proximity. She opened and started/drove it without ever taking the card out of her bag.

A couple of times I was driving it with her in the passenger seat, we arrived to a shop, she got down in front of the door and went into the shop while I was going to park it when the car some 20-30 mt away "locked itself" (cannot remember if it stopped or just didn't allow more than - say - 5 km per hour) with the display saying it couldn't find the card.

When she changed cars, her new Renault (using the same kind of card, at least visually, but a different car model) had to be inserted in a slot to allow the Start/Run button to operate.

Re: Thieves boosting signal from key fobs inside homes to steal vehicles

#84
post #6

> Key fobs are constantly broadcasting a signal that communicates with a specific vehicle, he said, and when it comes into a close enough range, the vehicle will open and start. Why is it transmitting without the user pressing a button? Is that a feature? As you walk up to the car it automatically starts like magic? I'm not familiar with these newer cars.

Yeah, it allows for unlocking without inserting a key or pressing a button.

Re: Thieves boosting signal from key fobs inside homes to steal vehicles

#85
post #81
post #55

“Greater Toronto Area” = GTA. What a coincidence. Jokes aside, this is bound to happen. It’s disturbing that a vulnerability like this isn’t caught as a show-stopper before the technology is sold to consumers.

It's not a show-stopper. It's not even close to being a show-stopper any more than having keys is also a vulnerability to having a car stolen. All you have to do is keep the fob inside a shielded case at home and you're fine.

> All you have to do is keep the fob inside a shielded case at home and you're fine.

Because we all have Faraday cages in our homes, and I'm sure the salesman who sold the car also made the customer aware of this vulnerability. /sarcasm.

Re: Thieves boosting signal from key fobs inside homes to steal vehicles

#86
post #81
post #55

“Greater Toronto Area” = GTA. What a coincidence. Jokes aside, this is bound to happen. It’s disturbing that a vulnerability like this isn’t caught as a show-stopper before the technology is sold to consumers.

It's not a show-stopper. It's not even close to being a show-stopper any more than having keys is also a vulnerability to having a car stolen. All you have to do is keep the fob inside a shielded case at home and you're fine.

Ah, so the convenience feature of "not having to take your key out of your pocket or purse" now requires "you have to take it out and put it in a sealed case when not in use".

Re: Thieves boosting signal from key fobs inside homes to steal vehicles

#87
post #81
post #55

“Greater Toronto Area” = GTA. What a coincidence. Jokes aside, this is bound to happen. It’s disturbing that a vulnerability like this isn’t caught as a show-stopper before the technology is sold to consumers.

It's not a show-stopper. It's not even close to being a show-stopper any more than having keys is also a vulnerability to having a car stolen. All you have to do is keep the fob inside a shielded case at home and you're fine.

Also keep the fob in a shielded case at work and whenever you are out for shopping or entertainment.

Re: Thieves boosting signal from key fobs inside homes to steal vehicles

#88

This happened to a family member of mine, here in Toronto. Lost their gorgeous M5. Their kid normally wakes up in the middle of the night, except this time, he freaked right out like he was scared. They were wondering what was going on with him, when one of the parents heard the M5 turn on (it's pretty distinct). "That's my car!" His wife said, "Naw, you're crazy, no way." Sure enough, enough, key fob attack and thef…

Insurance companies pressure drivers who have these misfeatures, drivers pressure car manufactures. See also: discounts for anti-theft tech and airbags.

Re: Thieves boosting signal from key fobs inside homes to steal vehicles

#89
post #82

This happened to a family member of mine, here in Toronto. Lost their gorgeous M5. Their kid normally wakes up in the middle of the night, except this time, he freaked right out like he was scared. They were wondering what was going on with him, when one of the parents heard the M5 turn on (it's pretty distinct). "That's my car!" His wife said, "Naw, you're crazy, no way." Sure enough, enough, key fob attack and thef…

What strange is, I can see unlocking the car and even starting it with this attack -- but do the cars not continually (or at least every minute or two) revalidate the presence of the key? Once they got very far away from the house, the car should shut off. Or so I would think.

So if you accidentally drop your keys while entering, or your passenger departs with your key, the car should lock itself 2 minutes later while you are driving?

Re: Thieves boosting signal from key fobs inside homes to steal vehicles

#90

Earlier quoted context omitted.

Something you have: keyless fob. Something you know: numeric unlock code. Unlocking the doors could be 1FA, but moving the vehicle should require 2FA.

I used to have a numeric lock immobilizer on 3 vehicles starting way back in the early 90s. You had to dial in a 4-6 digit PIN code on a pin pad in the vehicle in order to enable the ignition. You'd need to rip the whole dash apart to enable the ignition to bypass it. Were these types of immobilizers never a thing here?

Car manufacturers have never put a lot of priority on security in the US. I once unlocked a car, got in, and started the ignition with my key before realizing that the reason the seat and mirrors felt weird was because it was not my car.

I shut it off, exited the vehicle, re-locked it, and saw that my own car was actually the next one down the row. There are only so many combinations of pin heights in a car lock.

I have been paranoid about not keeping valuables in my vehicle ever since. That door lock is only keeping someone out for a few minutes, at best.

Post reply on HN