4 ms·
There was a limited time window in the early 2000s where many cars used only obfuscated access or a cryptographically insecure PIN code for key enrollment, but
by bri3d 5y ago
There was a limited time window in the early 2000s where many cars used only obfuscated access or a cryptographically insecure PIN code for key enrollment, but most modern cars use an attempt at cryptographic security with a centralized server.
If you want to see what's possible with modern cars, keywords like "VVDI" or "Abrites" and "All Keys Lost" will show you what aftermarket tools are capable of. Generally speaking, the capabilities in these tools are roughly equivalent to those the most sophisticated criminals have, as they're usually just stealing the techniques from one another in a big circle.
The level of security varies heavily from manufacturer to manufacturer.
For example, most modern VW cars require using an ECU exploit (which depending on the specific ECU, almost always requires physically removing the control unit and sometimes requires opening it) to extract encryption key data (CS/MAC) or physical extraction of the instrument cluster EEPROM.
However other manufacturers like Toyota seem to be more vulnerable to other exploits (I only research VW for the most part, so I frankly have no idea what's going on here), including a bizarre process which seems to require disassembling the steering column and unplugging a connector.
- PaulHoule 5y agoI look at the enrollment problem on Zigbee networks and similar things and it's hard for me to resist the conclusion that the most practical architecture is to have a private key in the hub and a private key in the device and have these authenticate against a central server and have the central server give them both a shared key -- as much as people hate the central control, lack of interoperability, etc.
- Teever 5y agoI think people hate mandated central control. Designing a system that is opt-in, and otherwise degrades gracefully to a reasonable state of functionality will win a lot of fans. Automobile companies won't do that however, they'll serve you subscription spyware/adware laden services and you'll have no choice.
- neuralRiot 5y agoCar thieves don’t go out to program new keys on the cars the want to steal, they just lift them with a tow truck. Quick, easy and nobody suspects anything.
- petre 5y agoUnless the victim has a GPS tracker installed on the vehicle.
- wildzzz 5y agoBut that would track any kind of theft. Most cars do not have that kind of tracking built-in and I would guess that most new cars don't have it either. If you could get the car into a shipping container asap, it might be enough shielding to block GPS or the cell signal for tracking the car and then it's off to some other country where the SIM card won't work before cops could catch up.
- petre 5y agoSome trackers use roaming SIM chips like 1NCE. The thief could also use a jammer or a conductive cloak. A shipping container is kind of a stretch.
- maxerickson 5y agoMost new cars do have GPS and cellular built in, at least in the US. For example, here they market it as a way to find where you parked: https://www.ford.com/support/how-tos/fordpass/getting-started-with-fordpass/how-do-i-locate-my-parked-vehicle-using-the-fordpass-app/ https://www.ford.com/support/how-tos/fordpass/getting-starte...
- bri3d 5y agoI agree that diagnostic-port reprogramming at the point of theft is uncommon (although absolutely not unheard of). I'm not sure what the effect of that observation is, though - key and immobilizer security is extremely important still, because cars which are stolen by any mechanism (tow, stolen key, transponder relay, etc) then need to be resold or broken down for parts. Especially in Europe where control module security is generally both more robust and more insurance regulated, many parts on a stolen vehicle are increasingly not valuable unless the immobilizer / key enrollment system can be bypassed.