5 ms·
Sounds a lot like the Chamberlain garage door gaping security hole: http://en.wikipedia.org/wiki/The_Chamberlain_Group,_Inc._v._Skylink_Technologies,_Inc http:/
by gvb 13y ago
Sounds a lot like the Chamberlain garage door gaping security hole:
http://en.wikipedia.org/wiki/The_Chamberlain_Group,_Inc._v._Skylink_Technologies,_Inc http://en.wikipedia.org/wiki/The_Chamberlain_Group,_Inc._v._....
The level of security of a car door is presumably a lot higher than that of a garage door, but the technology of using a rolling code is the same and the need to be able to (re)synchronize remote keys/fobs is also there. With the cars I own, there is a procedure in the operator's manual on how to resync your keys. Nominally, it requires physical access - an already unlocked car.
Ref: http://www.programmingkey.com/ http://www.programmingkey.com/
My first guess is that the bad guys figured out a timing attack that confuses the lock software if the "right" sequence of codes are sent with the "right" timing.
My alternate guess is that the bad guys figured out a way to mimic the resync mechanism without requiring physical access.
- cheald 13y agoIf they'd figured out how to invoke resync, the owners' keyfobs would stop working, which would be a dead giveaway.
- gvb 13y agoThe "(re)sync" mechanism allows you to add new keys without disturbing the existing keys.
- cheald 13y agoSource? I've never encountered that. Every time I've ever reprogrammed a wireless entry remote, I've had to reprogram all of them at the same time. Garage door openers can store multiple keys, but I've never run into a car that will. For example, from my Grand Prix's owner's manual: > Each remote keyless entry transmitter is coded to prevent another transmitter from unlocking your vehicle. If a transmitter is lost or stolen, a replacement can be purchased through your GM dealer. Remember to bring any additional transmitters with you when you go to your dealer. When the dealer matches the replacement transmitter to your vehicle, any remaining transmitters must also be matched. Once your dealer has coded the new transmitter, the lost transmitter cannot unlock your vehicle. The vehicle can have a maximum of four transmitters matched to it. And from the shop manual: > Once the keyless entry receiver enters the programming/diagnostic mode, the programming of the first transmitter erases all previous transmitter programming information. You must then program all of the transmitters.