Live data from Hacker News

Some new cars at risk of theft by exploiting weaknesses in keyless entry systems

bbc.co.uk

21–30 of 66 posts

Re: Some new cars at risk of theft by exploiting weaknesses in keyless entry systems

#21

A lot of new car "innovations" remind me of my issues with the newer iPhones and Macbook Pros (no headphone jack, thinness above all else, etc): I like having a physical key to start the engine. There was never any confusion in our household about "who has the keys" like there is now. I despise the start-stop nonsense. Let me use the pedals to start and stop. I don't need my car to broadcast a wifi signal. Etc etc et…

"Innovation" is increasingly newspeak for "regression."

Re: Some new cars at risk of theft by exploiting weaknesses in keyless entry systems

#22
post #5

The article doesn't support the headline. I don't doubt there are vulnerabilities, but the article didn't deliver.

It is clear what the vulnerability is. A lot of these remotes are susceptible to relay attacks. The car's challenge is being relayed into the house so the fob can respond. This response is relayed back to the car. The door just opens and you can start it and drive away.

It is also trivial to be this attack by adding an accelerometer to the fob. If the fob isn't moving, don't respond to the broadcast from the car. You could also be more extreme and have the car check constantly. If fob disappears, kill the engine.

Re: Some new cars at risk of theft by exploiting weaknesses in keyless entry systems

#23

On my Mercedes key I always double click the lock button which entirely disabled the keyless features until I use the key again. Now the question is - is this actually safer? If some thieves arrive at my house to steal my car and their relay gadget doesn't work, are they going to give up, or are they going to break in and threaten me for the key? Now that's a question I don't like to think about too much.

The Mercedes double click is specifically mentioned in the article, where someone claims a theft occurred after using it.

Two questions that immediately come to mind are 1) Is there feedback that the double-click was executed correctly? 2) If so, do you still get that feedback if the mechanism for disabling the keyless feature is interfered with in some way, e.g. by jamming?

Re: Some new cars at risk of theft by exploiting weaknesses in keyless entry systems

#24

Both my neighbours either side of my house had their cars stolen by this on the same night. One was a Jaguar, think the other was an Audi. They didn't touch my car even though it was newer, probably because it was a Kia. I am happy with my choice.

There's a common attack that boosts the wireless signal of proximity fob to trick the vehicle into unlocking & starting. Fob wireless systems should ideally redesigned such that the round trip time is precisely measured of only valid encrypted challenge responses that only the fob can answer.

Spending a bunch of money on a luxury vehicle is usually idiotic and most people who do so usually can't afford it in proportion to their income sheet and balance sheet. Plus, it advertises the owner and the vehicle as targets for all sorts of criminal intrigue.

Re: Some new cars at risk of theft by exploiting weaknesses in keyless entry systems

#25

A lot of new car "innovations" remind me of my issues with the newer iPhones and Macbook Pros (no headphone jack, thinness above all else, etc): I like having a physical key to start the engine. There was never any confusion in our household about "who has the keys" like there is now. I despise the start-stop nonsense. Let me use the pedals to start and stop. I don't need my car to broadcast a wifi signal. Etc etc et…

What do you mean by “the start-stop nonsense” as opposed to using pedals? I don’t have a newer car.

Re: Some new cars at risk of theft by exploiting weaknesses in keyless entry systems

#27
post #5

The article doesn't support the headline. I don't doubt there are vulnerabilities, but the article didn't deliver.

They mention the relay attack. You hav an antenna amd amp. You press a button and the car challenges the key. The amp makes it reach the key.

Perhaps it make sense to place all your key fobs in a small Faraday cage while not in use.

Re: Some new cars at risk of theft by exploiting weaknesses in keyless entry systems

#28

A faraday car key bag costs about €20. And they work, I use one. But one has to be consistent and always put the key in the bag. Not a problem, really.

But... you shouldn't have to do this! It's an extra step, an inconvenience.

Re: Some new cars at risk of theft by exploiting weaknesses in keyless entry systems

#29

Earlier quoted context omitted.

They mention the relay attack. You hav an antenna amd amp. You press a button and the car challenges the key. The amp makes it reach the key.

Perhaps it make sense to place all your key fobs in a small Faraday cage while not in use.

https://www.fobguard.com/

They make them just for that purpose.

Re: Some new cars at risk of theft by exploiting weaknesses in keyless entry systems

#30

A lot of new car "innovations" remind me of my issues with the newer iPhones and Macbook Pros (no headphone jack, thinness above all else, etc): I like having a physical key to start the engine. There was never any confusion in our household about "who has the keys" like there is now. I despise the start-stop nonsense. Let me use the pedals to start and stop. I don't need my car to broadcast a wifi signal. Etc etc et…

What do you mean by “the start-stop nonsense” as opposed to using pedals? I don’t have a newer car.

OP is likely talking about the system that automatically shuts down and restarts the combustion engine when you come to a complete halt. This is meant to reduce emissions and fuel comsumption.
Post reply on HN