61–70 of 144 posts
"Hackers Can Clone Toyota, Hyundai, and Kia Keys" gets the same point across without the sensationalism.
I'm bringing it up because I've seen many of these "millions of [thing that exists in the millions]" headlines recently, and I think it's more than just Baader-Meinhoff at work.
My reaction: Great! Reproducing these keys costs hundreds of dollars and a trip to the dealer. Maybe it can finally be affordable again. I'm less concerned about someone stealing my car. The local police department takes it seriously, no less because stolen cars are used to commit other crimes.
Earlier quoted context omitted.
Sounds like you’re describing a range extender attack on the keyless start. Almost(I don’t know any that aren’t) all cars with the feature are vulnerable to this.
Latest BMW, Audi, VW and Ford (or at least some models from these manufacturers) key fobs stop transmitting after X amount of time (based on motion).
Earlier quoted context omitted.
>The essential problem is that static credentials are transmitted and can be copied. If they used a randomly generated code to unlock the cars (needs to be generated offline) then that would solve this issue. Not necessarily. Relay attacks are very hard to defeat, regardless of your crypto scheme: https://www.wired.com/2017/04/just-pair-11-radio-gadgets-can...
Doesn't this require the attacker to have the keys?
Signals from an RFID device don't travel very far. So, (here's the error) if the keys can receive and respond to a signal from the car they must be very close to the car.
But signals can be relayed. Crook A stands next to your car. Crook B walks up to your front door.
Crook B is relying on the fact that most people leave their car keys on a key hook, or in a bowl, or maybe even in their outside jacket, which they leave by the door because that's convenient. You have done this.
The car is sending radio pulses. "Hey, are you my key?". Crook A has a relay transceiver, it doesn't need to understand this pulse, just relay it to Crook B. Crook B has another transceiver, and when it says "Hey, are you my key?" the key, on the far side of a locked front door, says "Yes! I'm the right key, see! 023483109" and Crook B's transceiver sends that right back to Crook A. "Yes! I'm the right key, see! 023483109" the one-time code from the key matches, the car unlocks. Crook A gets into the car and starts it. Crook B walks over and gets into the passenger seat.
In a few seconds the car will discover that the key, which was apparently right there, has somehow vanished. But for safety reasons it is unsafe to suddenly lock everything and shut off. The thieves will ensure that by the time it decides it would be safe to lock itself, it's inside a chop shop and that's too late.
So no, the attacker doesn't "have" the key, they just need to be able to stand relatively close to it.
Call me old but what is so great about the smart key? Not having to pull it out of your pocket? I know this is an old rant already but car have reached the crappyfication curve, when something cannot improve its main purpose anymore it starts adding unneeded features to be able to push a “new” product.
Today’s it’s mostly smart keys. Tomorrow it will all be driven from your phone. I can’t wait when I never have to carry a key again. This is a stepping stone.
Now Ford lets you in your car with a pin code on some and there are suggestions you may be able to start their Mach E EV with just a pin as well.
Earlier quoted context omitted.
Today’s it’s mostly smart keys. Tomorrow it will all be driven from your phone. I can’t wait when I never have to carry a key again. This is a stepping stone.
You want a car that stops working when your phone battery dies?
Earlier quoted context omitted.
Isn't the solution to that situation a shopping cart?
you dont have children
Can we not do this shit here? HN delete or we are fb mommy group tier shite
Call me old but what is so great about the smart key? Not having to pull it out of your pocket? I know this is an old rant already but car have reached the crappyfication curve, when something cannot improve its main purpose anymore it starts adding unneeded features to be able to push a “new” product.
The keys this article is talking about aren't (necessarily) keys you don't have to "Pull out of your pocket". What's "smart" about them is that the car's immobilizer technology talks to them before agreeing to let the vehicle be driven. Hence the article says thieves would be able to "hot wire" a car after using this attack. You can't (if manufacturer's did their job properly) "hot wire" modern cars like you see in a…
Earlier quoted context omitted.
Isn't the solution to that situation a shopping cart?
you dont have children