5 ms·

“Greater Toronto Area” = GTA. What a coincidence. Jokes aside, this is bound to happen. It’s disturbing that a vulnerability like this isn’t caught as a show

by k_sze 8y ago

“Greater Toronto Area” = GTA. What a coincidence. Jokes aside, this is bound to happen. It’s disturbing that a vulnerability like this isn’t caught as a show-stopper before the technology is sold to consumers.

lbriner 8y ago
It's not a show-stopper. It's not even close to being a show-stopper any more than having keys is also a vulnerability to having a car stolen. All you have to do is keep the fob inside a shielded case at home and you're fine.
- josefresco 8y ago
  > All you have to do is keep the fob inside a shielded case at home and you're fine. Because we all have Faraday cages in our homes, and I'm sure the salesman who sold the car also made the customer aware of this vulnerability. /sarcasm.
  - dsfyu404ed 8y ago
    >Because we all have Faraday cages in our homes Yes, most people who own cars new enough to have this vulnerability own microwave ovens.
    - asdff 8y ago
      So you have to pull your keys out of your pocket and stick them in your microwave every time you enter your house just to have the convenience of not needing to take them out of your pocket when you approach the car.
      - dsfyu404ed 8y ago
        I know it's not a practical workaround. I'm just pointing out that most people do technically have a Faraday cage in their homes.
        k_sze 8y ago
        It’s gonna be fun when somebody forgets to take the fob out of the microwave before warming their coffee.
- pjc50 8y ago
  Ah, so the convenience feature of "not having to take your key out of your pocket or purse" now requires "you have to take it out and put it in a sealed case when not in use".
- pofilat 8y ago
  Also keep the fob in a shielded case at work and whenever you are out for shopping or entertainment.
blattimwind 8y ago
> It’s disturbing that a vulnerability like this isn’t caught as a show-stopper before the technology is sold to consumers. Everyone knew about this for many years. Interactive transponders are quite old (late 90s? early 2000s?) and were designed to mitigate attacks like this one (because the user has to interact with the transponder, i.e. press the button it has for it to work, all passive attacks fail).

by k_sze 8y ago

lbriner 8y ago

It's not a show-stopper. It's not even close to being a show-stopper any more than having keys is also a vulnerability to having a car stolen. All you have to do is keep the fob inside a shielded case at home and you're fine.

josefresco 8y ago
> All you have to do is keep the fob inside a shielded case at home and you're fine. Because we all have Faraday cages in our homes, and I'm sure the salesman who sold the car also made the customer aware of this vulnerability. /sarcasm.
- dsfyu404ed 8y ago
  >Because we all have Faraday cages in our homes Yes, most people who own cars new enough to have this vulnerability own microwave ovens.
  - asdff 8y ago
    So you have to pull your keys out of your pocket and stick them in your microwave every time you enter your house just to have the convenience of not needing to take them out of your pocket when you approach the car.
    - dsfyu404ed 8y ago
      I know it's not a practical workaround. I'm just pointing out that most people do technically have a Faraday cage in their homes.
      - k_sze 8y ago
        It’s gonna be fun when somebody forgets to take the fob out of the microwave before warming their coffee.
pjc50 8y ago
Ah, so the convenience feature of "not having to take your key out of your pocket or purse" now requires "you have to take it out and put it in a sealed case when not in use".
pofilat 8y ago
Also keep the fob in a shielded case at work and whenever you are out for shopping or entertainment.

blattimwind 8y ago

> It’s disturbing that a vulnerability like this isn’t caught as a show-stopper before the technology is sold to consumers. Everyone knew about this for many years. Interactive transponders are quite old (late 90s? early 2000s?) and were designed to mitigate attacks like this one (because the user has to interact with the transponder, i.e. press the button it has for it to work, all passive attacks fail).