4 ms·
It is clear what the vulnerability is. A lot of these remotes are susceptible to relay attacks. The car's challenge is being relayed into the house so the fob c
by snarf21 7y ago
It is clear what the vulnerability is. A lot of these remotes are susceptible to relay attacks. The car's challenge is being relayed into the house so the fob can respond. This response is relayed back to the car. The door just opens and you can start it and drive away.
It is also trivial to be this attack by adding an accelerometer to the fob. If the fob isn't moving, don't respond to the broadcast from the car. You could also be more extreme and have the car check constantly. If fob disappears, kill the engine.
- technofiend 7y ago>It is also trivial to be this attack by adding an accelerometer to the fob. If the fob isn't moving, don't respond to the broadcast from the car. You could also be more extreme and have the car check constantly. If fob disappears, kill the engine. That would have to be a pretty sensitive accelerometer but you'd still end up with voodoo stuff like "I have to shake my purse while starting the car". Killing the engine if the fob disappears means you need to be polling the fob. See the lawsuits over heavy keys wearing out the ignition lock and steering column locking up to see what happens when the polling fails. Probably not a good idea, IMHO.
- derekp7 7y agoThis attack can also be defeated by seeing how long the signal takes to respond from the fob so it knows how far away it is. Thieves can't get around the speed of light. Or use multiple antennas to triangulate the signal from the key fob.