3 ms·
I was under the impression that cars and garage doors are essentially 100% immune to replay attacks. How could they possibly be susceptible to something to rudi
by happytoexplain 3y ago
I was under the impression that cars and garage doors are essentially 100% immune to replay attacks. How could they possibly be susceptible to something to rudimentary? Or am I not understanding some context?
- imp0cat 3y agoIn theory, yes. In practice, you could start a Hyundai with an USB key, because the manufacturer did not bother to implement any security measures (it's cheaper that way).
- riwsky 3y agoNot 100%. Some are basically CSPRNGs that iterate with every successful unlock; if you capture the “play” from a key AND block the car from getting the signal, you get a replay attack you can only use once. And which desyncs the key with the car, making it useless until a dealer re-pairs them.
- happytoexplain 3y agoThis is my understanding - I guess I shouldn't have said "100%". It's just that it seems like there are vanishingly rare real-world scenarios in which one could engineer this situation that don't involve gaining access to the actual key, at which point you could simply take it, so the choice to use the Flipper instead would be moot for the topic of vulnerability.