3 ms·
Start reading http://media.hacking-lab.com/scs3/scs3_pdf/SCS3_2011_Capkun.pdf http://media.hacking-lab.com/scs3/scs3_pdf/SCS3_2011_Capkun.... at page 16. They w
by etcet 11y ago
Start reading http://media.hacking-lab.com/scs3/scs3_pdf/SCS3_2011_Capkun.pdf http://media.hacking-lab.com/scs3/scs3_pdf/SCS3_2011_Capkun.... at page 16. They were able to perform an attack with a relay 8m from the key. I particularly like this implication they present:
Relay on a parking lot
One antenna near the elevator
Attacker at the car while car owner waits for the elevator
Also, the radio jamming attack described on page 10 is so simple but isn't something I've considered before. Basically you just jam the right frequency before the victim presses the 'lock' button and you now have access to their car (if they didn't notice).
- cheald 11y agoWow, I am legitimately shocked that the fob is capable of transmitting that far. I'd have thought that the "is the key in close proximity to the car" transmitters would be intentionally range-limited. Great link, thank you.