How To: Steal a car with remote entry

[Evman]

As it turns out (I'm not overly surprised) it's pretty easy.


The researchers successfully attacked eight car manufacturers' passive keyless entry and start systems—wireless key fobs that open a car's doors and start the engine by proximity alone.

Juicy details (http://www.technologyreview.com/computing/27037/page1/?a=f)

[stockergts]

i knew there was a reason i didn't like new cars

[Wonky]

With no real justification I was always suss of those systems - looks like I was right....... :(

[Wonky]

i knew there was a reason i didn't like new cars

I interpreted it as only those cars where you only had to have the key in your pocket to start, not cars like the VE.

[Evman]

Yup only the proximity access cars where the car senses the remote fob/card is close and allows entry and start :)

[macca33]

Back to the old drawing board for some manufacturers.....:teach: :doh:

[VX2VESS]

i noticed some car remotes for sale in the UK online.

all you do is put the original next to it push a couple of the buttons, and it copies it over to the new remote.

[Wonky]

Yup only the proximity access cars where the car senses the remote fob/card is close and allows entry and start :)

Don't the new FPVs have this with their push button start, or do they still require a key to be inserted somewhere? If so, could be a cheap way to acquire one! :lmao:

[Evman]

I don't know about the FG's but the previous ones still needed the key in the ignition to start. I think they could even be started by the key, so the push button was just complete wank

[Irish]

Don't the new FPVs have this with their push button start, or do they still require a key to be inserted somewhere? If so, could be a cheap way to acquire one! :lmao:

Still requires a key to be inserted.

[UTESRULE]

not the smartest thing to post on a forum giving these things away alot more ppl will be doing this when they troll the forum :goodjob:

[Evman]

:lol: This is all readily available information. It was originally posted on an MIT published website and I first saw it on Engadget. I'm betting both of those websites get a lot more traffic than this forum. Either way, the higher the risk, the sooner manufacturers will be inclined to release a more secure system.

[UTESRULE]

i no that but but im sure no manufactures go onto this site better sending them the article

[Evman]

Holden probably doesn't look on here either but everyone posts the problems with them anyway.

Funnily enough there's actually no information that can directly lead to someone actually implementing the techniques described to break into the cars. If you can work it out good for you. You'd be better off sending the researchers an email telling them they were irresponsible for telling the world that an unsecured remote system is insecure.

[VYSHSV8]

Holden probably doesn't look on here either but everyone posts the problems with them anyway.

Funnily enough there's actually no information that can directly lead to someone actually implementing the techniques described to break into the cars. If you can work it out good for you. You'd be better off sending the researchers an email telling them they were irresponsible for telling the world that an unsecured remote system is insecure.

Holden do come on here but they don't listen :vpo:

[Evman]

:lol: Just as useful then Drew!

[VYSHSV8]

:lol: Just as useful then Drew!

I know but I thought I would say it anyway :lol:

[Grant]

To clarify the nature of the attack, what they are doing is making the car think that the key fob is within short range of the car, thus unlocking the vehicle and activating the ignition.

The method by which they are achieving this is by relaying the wireless communication b/t the fob and car via an intermediate device. So you need to have a presence at the car, and at the fob.

Therefore, you need to be able to get close proximity to the car and the fob.

Additionally, most keyless entry systems I'm aware of will not allow you to restart the car once the fob is out of range.

[commodorenut]

I know one particular model sold in Australia can be started with the key in range, and driven 200km to a holiday destination, with the key left on the hook in the garage back at home.... (wasn't me - I had to take the key to them so they could return home!).

Surely the manufacturers need to incorporate some sort of system whereby the car issues a warning when the key falls out of range, and if it isn't brought back within range, the vehicle shuts down after a given time (say 90 seconds).
This would also help minimise this sort of theft potential (or you'd at least find it within walking distance!).

[peter b]

I don't know about the FG's but the previous ones still needed the key in the ignition to start. I think they could even be started by the key, so the push button was just complete wank

Unfortunately they don't start by the key only get reds still have to push the button. Makes it a prob when the button fails. Which is from what I heard quite common. I like keys

[LS1-5.7]

I assume these cars have solenoid controlled steering locks that unlock with ignition "on" signal ... This has to be a downfall right there. No vehicle should be able to be started unless there is some sort of physical action by the intended driver. This would prevent most of the above would it not ?

[Evman]

Unfortunately they don't start by the key only get reds still have to push the button. Makes it a prob when the button fails. Which is from what I heard quite common. I like keys

Aaah ok thanks for the clarification.

[commodorenut]

They must have gone from bad to worse! The keys are failing on BAs at an alarming rate, and because of the design of the ignition lock, the replacement entails a whole new column at anywhere from $1300-1800 from Ford. They don't do the one with the older Tibbe lock anymore, so you have to convert them over to a BF style "blade" key (and incur more cost if you change the door barrel over to match it).

I've converted a few mate's BAs over to button ignition & start now.... but it still relies on the key being in the barrel to release the lock, and for the transponder to read a valid key. A whole lot better than $1800 for a whole column!

[VendeTTR]

I know one particular model sold in Australia can be started with the key in range, and driven 200km to a holiday destination, with the key left on the hook in the garage back at home.... (wasn't me - I had to take the key to them so they could return home!).



Is it an Aurion Presara :)
Happens quite often with rental cars

[LS-SV8]

have to tell my old man to watch his 370z keys you dont have to inser them anywhere just have it in your pocket and you can unlock start and all without even touching the key

[Kiyoshii]

Toyota 200Series (http://www.toyota.com.au/landcruiser-200) is fob entry and start, when I was looking at getting one salesman was very happy to show me how the FoB allows the unit to be within 10m of the car and the car would unlock and start.

I asked how this works when say car is in garage and fob is inside, he said there is no real way to lock the car just take the fob further away. From the keys he showed me there was no pyhiscal key. Not sure if he was tellin whole truths or complete lies, didnt end up buying one anyways.

[duke5700]

They rely on 99% of people not knowing how to make the 1's and 0's line up to make it work. Then out of the 1% that do, they hope 90% of them won't do it as they know right from wrong.

Its probably no harder as it is to steal any other car.

[justin_d]

They rely on 99% of people not knowing how to make the 1's and 0's line up to make it work. Then out of the 1% that do, they hope 90% of them won't do it as they know right from wrong.

Its probably no harder as it is to steal any other car.

There's 10 types of people in this world. Those who get binary and those who don't.

[duke5700]

01001001001001110110110100100000011011110110111001 10010100100000011011110110011000100000011101000110 10000110111101110011011001010010000001100100011101 01011011010110001000100000011000110111010101101110 01110100011100110010000001110100011010000110000101 11010001110011001000000110111001101111011101000010 00000110111101101110011001010010000001101111011001 10001000000111010001101000011001010110110100101110 0010111000101110