4 ms·

The "keys" in question are the ones that magically unlock the car when you are "close." The attack is a "man in the middle" attack that basically fools the car

by gvb 16y ago

The "keys" in question are the ones that magically unlock the car when you are "close." The attack is a "man in the middle" attack that basically fools the car into thinking the owner is nearby when he isn't, so the car unlocks and enables the ignition. Apparently, once the ignition is enabled, you can drive off without needing the key "nearby" (interesting experiment, I'll have to try that next time I get a "keyless entry" rental). Once you can drive off, the car is pwned - you can strip it for parts (chop shop) or fully defeat the key/ignition security away from prying eyes.

brk 16y ago
In my car you need the RF signal from the keyfob to be nearby to open/start it. Once the engine is running, it will keep running until you turn it off, or it runs out of gas, even if the keyfob is not present. If you turn the ignition off and it can't "see" the key, it will give you a warning message on the display cluster and you have something like 20 seconds to re-start the car before you're locked out.
pmjordan 16y ago
Oh, I see. All the wireless car keys I've seen need a button to be pressed to unlock the driver's door.[1] I'll have to watch out for buttonless keys when buying a car next, it seems a pretty unsafe concept in itself, e.g. loitering hijacker getting in the car before you do/with you, etc. [1] You usually need to press the button a second time to unlock the remaining doors. There's also often a separate button to independently unlock the boot. A typical procedure is therefore: open boot with the relevant button, put shopping inside, close boot, take trolley back to the stand, walk back to the car, unlock only the driver's side, get in, lock door with button from the inside, drive off.
kreneskyp 16y ago
Some cars, like my VW, require the key fob to be in the car or the immobilizer shuts the car off after a very short distance. I believe all VW cars have this now, even the ones without keyless entry/ignition. This of course just slightly complicates the hack.

by gvb 16y ago

brk 16y ago

In my car you need the RF signal from the keyfob to be nearby to open/start it. Once the engine is running, it will keep running until you turn it off, or it runs out of gas, even if the keyfob is not present. If you turn the ignition off and it can't "see" the key, it will give you a warning message on the display cluster and you have something like 20 seconds to re-start the car before you're locked out.

pmjordan 16y ago

Oh, I see. All the wireless car keys I've seen need a button to be pressed to unlock the driver's door.[1] I'll have to watch out for buttonless keys when buying a car next, it seems a pretty unsafe concept in itself, e.g. loitering hijacker getting in the car before you do/with you, etc. [1] You usually need to press the button a second time to unlock the remaining doors. There's also often a separate button to independently unlock the boot. A typical procedure is therefore: open boot with the relevant button, put shopping inside, close boot, take trolley back to the stand, walk back to the car, unlock only the driver's side, get in, lock door with button from the inside, drive off.

kreneskyp 16y ago

Some cars, like my VW, require the key fob to be in the car or the immobilizer shuts the car off after a very short distance. I believe all VW cars have this now, even the ones without keyless entry/ignition. This of course just slightly complicates the hack.