3 ms·
Even if you fix the vulnerability present in the lock firmware (which you can't do without replacing the Portable Programmer as well), the encryption on the car
by daeken 14y ago
Even if you fix the vulnerability present in the lock firmware (which you can't do without replacing the Portable Programmer as well), the encryption on the cards is still completely broken.
I've written at length about how this can be fixed; Onity has not yet responded with an effective solution.
(I'm the original researcher)
Edit: Link to my post is here: http://daeken.com/onitys-plan-to-mitigate-hotel-lock-hack http://daeken.com/onitys-plan-to-mitigate-hotel-lock-hack Note that their statement about how they would fix it was pulled after Forbes quoted my post.
- markpercival 14y agoYeah, this is what I found fascinating in your paper(http://demoseen.com/bhpaper.html http://demoseen.com/bhpaper.html). I had always wondered how they invalidated the old keys automatically.