4 ms·
Besides locking your car into a garage, is there anything a VW owner can do to make it more difficult for these types of thefts to occur?
by DIVx0 11y ago
Besides locking your car into a garage, is there anything a VW owner can do to make it more difficult for these types of thefts to occur?
- maxerickson 11y agoIf the article is accurate, avoiding use of the key fob should make it more difficult for the attack to be carried out (which admittedly isn't very useful).
- nulluk 11y agoAs far as my limited understanding goes using the the key fob for remote central locking does not expose any risk, instead its the immobiliser part, so manually opening your door with the physical key provides no extra safety, its when the key is present near the ignition barrel, thats where the immobiliser kicks in and where this venerability exists
- Miner49er 11y agoFrom what I understand, they have to capture two uses of the key fob to be able to brute force, so if you don't use it then they can't capture anything. Or they just captured two uses from a random car and now it'll work on any car. I wish the article went into more detail.
- bri3d 11y agoThe paper is right here: https://www.usenix.org/sites/default/files/sec15_supplement.pdf https://www.usenix.org/sites/default/files/sec15_supplement.... They captured 2 uses of the RFID-based immobilizer. That gets used every time you start the car, regardless of how you unlocked the car. It's completely separate from the UHF-based keyless entry system which you use to unlock the car. The paper makes this distinction in the first paragraph, but of course the article fails to distinguish.
- Miner49er 11y agoAh okay, yeah I misunderstood what was happening here. Thanks for the info.
- nulluk 11y agoAs bri3d has mentioned, I think you are confused because the key actually has three independent functions and you need to make the distinction between them all. - Remote central locking via UHF - Immobiliser authentication via RFID (this is what is vulnerable) - Key for the ignition barrel or manual unlocking of doors
- binarymax 11y agoYou could always use a club: http://www.amazon.com/Club-1000-Original-Steering-Wheel/dp/B0000CBILL http://www.amazon.com/Club-1000-Original-Steering-Wheel/dp/B... But anyone waiting to spend 30 minutes with an electronic crack is also smart enough to use liquid nitrogen to crack this too. The difference is that a keyless hack can look natural since there is no physical force for entry or ignition. A funnel and chisel would raise some eyebrows.
- bri3d 11y agoThis attack is against the RFID immobilizer for the engine, which means an attacker would have to break into the car, break the steering wheel lock and break the physical ignition lock prior to starting the car. The full paper here: https://www.usenix.org/sites/default/files/sec15_supplement.pdf https://www.usenix.org/sites/default/files/sec15_supplement.... has a lot better detail.
- gambiting 11y agoNo, it's also an attack on the actual wireless key which is used to open and start the car. It's just making the car "think" that the key is inside, so you just press the Start button and the car starts, after which you drive it away like normal.
- bri3d 11y agoFair, but only on cars which have only passive security (that is - where you don't need to use the fob to unlock the car and you don't need to use a physical key to turn the ignition).