> Other than a physical lockout on the OBD-II port, I can't think of a good defense against this attack. Make the key changing process VERY slow, as in 24h+. I

> Other than a physical lockout on the OBD-II port, I can't think of a good defense against this attack. Make the key changing process VERY slow, as in 24h+. If you really really lost your key you wouldn't mind leaving the car 24h at a mechanic but a thief would have a much harder time hiding a car that long. At least compared to 2mins at a dark parking lot.