4 ms·
The key fob does use challenge-response, the thief just uses a glorified range-extender to get the car started with the key normally out of range. The car stays
by jwcacces 8y ago
The key fob does use challenge-response, the thief just uses a glorified range-extender to get the car started with the key normally out of range. The car stays on once started. There's no MITM involved.
- ken 8y agoHuh? The diagram in the article shows two men ("Thief 1", "Thief 2") between the fob and the car, with arrows showing communications going from fob to thief to car. According to the first sentence of the Wikipedia MITM article, that's the very definition.
- __jochen__ 8y agothe relay is of the radio signal, there is no inspection or tampering of the relayed messages. basically, the extender tricks the car into thinking the fob is closer than it is.
- Piskvorrr 8y agoIn other words, there's identification, there's authentication, but authorization is replaced by "if in range, then authorized." Two out of three is still game over.