3 ms·
My understanding is that a tool is used to boost the the signals between the car and key fob so the thieves can simulate them being very close -- close enough t
by xyzzy_plugh 3y ago
My understanding is that a tool is used to boost the the signals between the car and key fob so the thieves can simulate them being very close -- close enough to unlock and subsequently start the car.
Once the door is unlocked though there are any number of ways to get the car moving, especially if you have access to the ODB2 port.
My key fob can be put into a battery-saving mode which disables wireless communication unless a button is pressed. My vehicle also supports a song-and-dance to disable all proximity-based sensing, at which point you need to hold the key fob against the ignition panel to start the car.
This is incredibly inconvenient and I don't know anyone who does either of these, though.
- hgomersall 3y agoI've got a great solution. How about requiring the users insert a hard to reproduce physical key-like object in a slot before the car will start?
- munk-a 3y agoObjections to how fobs would weaken security were made before they were introduced and fell on deaf ears - I'm not certain why car companies would start listening now. I want my physical keys and knobs and buttons on the console back - half the electronics in cars seem to add negative value.
- hgomersall 3y agoYes! I hate touch screens in cars. I hate that they are so much more difficult to use and require so much more attention. I guess they're only possible because the car does half the driving for you now, picking up whilst you're distracted trying to turn on the windscreen demister or whatever.
- mrguyorama 3y agoWafer locks used in car doors are actually inherently easy to lockpick because the tolerances can't be that high. Wafer locks are used because they allow you to insert the key upside down and still unlock it.
- hgomersall 3y agoAh, I've got a solution to that too! I'm going to call it two factor authentication. Basically it uses a secondary digital key as well that communicates in parallel with the physical widget.
- MichaelZuo 3y agoHuh that's pretty clever, requiring both would make it pretty foolproof.
- gosub100 3y agothey already solved this with DNS, how about a certificate chain? so (at the very worst) you can revoke the certificate on the stolen car. But also allow lost keys to be replaced by reprogramming them from a dealer certificate (which could also be revoked, and have a TTL). No, I dont want the car to require an internet connection to start, but I think its reasonable to say "to enable anti-theft, your car must resync at least every 6 months to update certificates. If not, it will be easier to steal and you can pay into a higher insurance pool".
- dzhiurgis 3y agoFacial recognition might be easier
- gregmac 3y agoHow hard would it be to have the fob recognize it hasn't moved in x minutes and turn itself off? If it's in your pocket it would stay active, and the user experience would be exactly what it is today, while stopping night-time relay attacks.
- beej71 3y agoSounds about on par with my old Saturn that you could probably start with a screwdriver. But at least I can get new keys made for $5 each.