3 ms·
The tokens being secure is not enough. The system also has to check latency etc. to prevent repeater attacks. Imagine a scenario like that: You leave your car
by johannes1234321 8y ago
The tokens being secure is not enough. The system also has to check latency etc. to prevent repeater attacks.
Imagine a scenario like that: You leave your car in a parking lot. One attacker follows you with a repeater. Once you're around the corner the second attacker approaches your car and opens it via the repeated radio signal and starts it.
A while ago there had been a small debate on this topic, as attackers actually used such an approach to break into cars (sometimes even stealing them)
https://www.wired.com/2017/04/just-pair-11-radio-gadgets-can-steal-car/ https://www.wired.com/2017/04/just-pair-11-radio-gadgets-can...
- smileysteve 8y agoA code repeater seems like a lot of work when standard tumbler locks are bypassed by a credit card, $10 lock pick set, a strong kick.
- johannes1234321 8y agoAccording to that wired article the repeater is $10 as well and lockpicking needs a little practice and skill, using a repeater not. :)
- tialaramex 8y agoYou can sidestep this if the token needs to be explicitly activated. Unlike turning a key in a mechanical lock this needn't be something that requires dexterity, just any positive action e.g. pressing a button.