"Ron Calls on his years of experience....and freezes at the controls" (internerdstuff)
09/17/2014 at 07:14 • Filed to: None | 0 | 6 |
I read that since the mid nineties car remote locking systems have used constantly changing encrypted codes that are very difficult to break. Has there been any breakthroughs by the bad guys?
Could they use the old system of recording the code and replicating it?(except now they would need to record all the codes the car has in it's system and know which one to use next)
This is all triggered by a hoax news report on facebook.I'm trying to decide if i should call it complete bullshit,or pass on the parts of it that are true
GhostZ
> Ron Calls on his years of experience....and freezes at the controls
09/17/2014 at 07:19 | 0 |
I don't know anything about the system, but a simple in-car system with a variable key/length algorithm (the 'answer' isn't always the same, only the car and the keycode know the next one) would solve that issue, since you'd have to record not just the number of signals, but the sequence of them over a period of time, and anyone is going to notice you hanging around their car for 24-48 hours. The problem would be getting it so if you hit the key and the car is out of range, it doesn't offset the sequence, but you could do that with some form of 'handshake' based on the last successful sequence, but THAT makes the devices get more and more expensive (the key has to be able to send and receive signals now) but is possible, I suppose.
beardsbynelly - Rikerbeard
> Ron Calls on his years of experience....and freezes at the controls
09/17/2014 at 07:38 | 0 |
figures for the UK at least suggest that 2/3 car thefts aren't forced lock thefts.. ie they're stolen with a flatbed or they steal the keys.
BJ
> Ron Calls on his years of experience....and freezes at the controls
09/17/2014 at 07:39 | 1 |
Some security research has been done recently (past 2 years) that uncovered weaknesses in certain systems, but I don't have time right now to search for it.
Rest assured that for the most part, it's not a straight-forward hack that can be done against any car for simple theft - the effort is too great. For certain high-value targets, however, know that nothing is unbreakable and no-one is safe.
twochevrons
> GhostZ
09/17/2014 at 08:57 | 1 |
I'm pretty sure that that's what most manufacturers use. To get around the out-of-range issue, the receiver allows the remote to get ahead by some number of codes, and then resynchronises to the remote when it receives one. Easy.
The only problem comes if the remote gets too far ahead. In that case, it seems that they usually just stop listening to the remote and require it to be re-learned somehow. I can't remember which it was, but one of my cars came with a warning to that effect in the manual.
BJ
> Ron Calls on his years of experience....and freezes at the controls
09/17/2014 at 09:11 | 1 |
Apparently an Aussie hacker figured something out as recently as this August: http://www.wired.com/2014/08/wirele…
I'm still digging for the other research that was mentioned earlier.
BJ
> Ron Calls on his years of experience....and freezes at the controls
09/17/2014 at 09:28 | 0 |
There's this article from 2013 that talks about an unknown wireless hack: http://www.infosecurity-magazine.com/news/car-thiev…
IIRC, there was discussion of it possibly requiring a large EMP pulse near the passenger side that triggers an unlock relay or another control module, opening the doors. It's suggested in the comments here, and I've read it elsewhere as well: http://hackaday.com/2013/06/05/ask…
And as far back as 2011, hackers found out how to get access via SMS hacks to connected cars; they setup a phoney GSM network and basically fuzzed the system until it gave up some secrets. Most of these hacks give access to the interior of the car but don't allow you to drive off with it.
I'm no hacker or security researcher but I find this stuff very interesting. Clever people have even hacked Bluetooth to listen in to calls in passing cars on the motorway. Virtually everything can be hacked, wirelessly or directly, but there's no reason to panic or worry. Don't leave valuables in your car, choose your parking spots wisely, and make sure you confirm that your doors are locked before leaving your car unattended.