3 ms·

I've got a great solution. How about requiring the users insert a hard to reproduce physical key-like object in a slot before the car will start?

munk-a 3y ago
Objections to how fobs would weaken security were made before they were introduced and fell on deaf ears - I'm not certain why car companies would start listening now. I want my physical keys and knobs and buttons on the console back - half the electronics in cars seem to add negative value.
- hgomersall 3y ago
  Yes! I hate touch screens in cars. I hate that they are so much more difficult to use and require so much more attention. I guess they're only possible because the car does half the driving for you now, picking up whilst you're distracted trying to turn on the windscreen demister or whatever.
mrguyorama 3y ago
Wafer locks used in car doors are actually inherently easy to lockpick because the tolerances can't be that high. Wafer locks are used because they allow you to insert the key upside down and still unlock it.
- hgomersall 3y ago
  Ah, I've got a solution to that too! I'm going to call it two factor authentication. Basically it uses a secondary digital key as well that communicates in parallel with the physical widget.
  - MichaelZuo 3y ago
    Huh that's pretty clever, requiring both would make it pretty foolproof.
gosub100 3y ago
they already solved this with DNS, how about a certificate chain? so (at the very worst) you can revoke the certificate on the stolen car. But also allow lost keys to be replaced by reprogramming them from a dealer certificate (which could also be revoked, and have a TTL). No, I dont want the car to require an internet connection to start, but I think its reasonable to say "to enable anti-theft, your car must resync at least every 6 months to update certificates. If not, it will be easier to steal and you can pay into a higher insurance pool".
dzhiurgis 3y ago
Facial recognition might be easier

munk-a 3y ago

Objections to how fobs would weaken security were made before they were introduced and fell on deaf ears - I'm not certain why car companies would start listening now. I want my physical keys and knobs and buttons on the console back - half the electronics in cars seem to add negative value.

hgomersall 3y ago
Yes! I hate touch screens in cars. I hate that they are so much more difficult to use and require so much more attention. I guess they're only possible because the car does half the driving for you now, picking up whilst you're distracted trying to turn on the windscreen demister or whatever.

mrguyorama 3y ago

Wafer locks used in car doors are actually inherently easy to lockpick because the tolerances can't be that high. Wafer locks are used because they allow you to insert the key upside down and still unlock it.

hgomersall 3y ago
Ah, I've got a solution to that too! I'm going to call it two factor authentication. Basically it uses a secondary digital key as well that communicates in parallel with the physical widget.
- MichaelZuo 3y ago
  Huh that's pretty clever, requiring both would make it pretty foolproof.

gosub100 3y ago

they already solved this with DNS, how about a certificate chain? so (at the very worst) you can revoke the certificate on the stolen car. But also allow lost keys to be replaced by reprogramming them from a dealer certificate (which could also be revoked, and have a TTL). No, I dont want the car to require an internet connection to start, but I think its reasonable to say "to enable anti-theft, your car must resync at least every 6 months to update certificates. If not, it will be easier to steal and you can pay into a higher insurance pool".

dzhiurgis 3y ago

Facial recognition might be easier