3 ms·
But the attack claims to not need access to the car to initiate any kind of pairing sequence...
by IshKebab 1y ago
But the attack claims to not need access to the car to initiate any kind of pairing sequence...
- the_mitsuhiko 1y agoYes. With rolling codes this vulnerability and similar ones are known for a very long time.
- IshKebab 1y agoSeems to be from 2022. I wouldn't say that is "a very long time".
- the_mitsuhiko 1y agoThe fundamental flaws with this approach to keys is known since before 2015, but got a lot of international recognition when people found cheap ways to emulate keys through cheap software defined radios around that time.
- IshKebab 1y agoI don't think so. The Flipper Zero isn't an SDR. What's the earliest reference to this attack you can actually provide?
- the_mitsuhiko 1y agoI’m talking about the earliest cases. The earliest references depend on the particular standard of crypto. KeeLoq is a very famous rolling code standard where attacks go back to 2007 and earlier. RollJam is known since 2014 [1]. It was popularized later through a custom device [2]. [1]: https://spencerwhyte.blogspot.com/2014/03/delay-attack-jam-intercept-and-replay.html https://spencerwhyte.blogspot.com/2014/03/delay-attack-jam-i... [2]: https://www.wired.com/2015/08/hackers-tiny-device-unlocks-cars-opens-garages/ https://www.wired.com/2015/08/hackers-tiny-device-unlocks-ca...