Th3 Core

Why We Are Here => Water Cooler => Topic started by: rcjordan on November 30, 2018, 03:44:37 PM

Title: Key fob relay attacks
Post by: rcjordan on November 30, 2018, 03:44:37 PM
https://nakedsecurity.sophos.com/2018/11/30/driver-loses-his-car-to-hackers-twice/

Another reason to drive a beater.
Title: Re: Key fob relay attacks
Post by: buckworks on November 30, 2018, 04:00:57 PM
Scary thought: this kind of attack could work in more places than just at home.

Suppose your car was parked outside a restaurant where you were having dinner, and one of these scanners picked up the key fob in your pocket?
Title: Re: Key fob relay attacks
Post by: rcjordan on November 30, 2018, 04:17:38 PM
>restaurant

A few years ago, when these fob vulnerabilities started to crop up, a defcon-type drove through a restaurant parking lot with his laptop broadcasting the codes. About 15 cars unlocked their doors or trunks.  As the article mentions, it used to be just door locks --so, the manufacturers added insecure ignition.

It's getting worse. I recently saw some Ford product placement ads showing unlocking and remote starting use a phone app,  Hoo boy!

Related:
McAfee Predicts More Malware Will Target Smart Homes In 2019

https://www.ubergizmo.com/2018/11/mcafee-predicts-malware-smart-homes-2019/

TL;DR: It's the phone, it's almost always the phone.
Title: Re: Key fob relay attacks
Post by: rcjordan on January 28, 2019, 02:10:18 AM
BWWwwwaahahaha!

Quote
ADAC tested 237 keyless cars and found that all but three were susceptible, including the latest models of the Discovery and Range Rover, and the 2018 Jaguar i-Pace - all made by Jaguar Land Rover.

Of the top-selling cars in the UK, only the Vauxhall Corsa was deemed safe because it is not available with keyless entry and ignition.


Hundreds of popular cars ‘at risk of keyless theft’ - BBC News
https://www.bbc.com/news/business-47023003
Title: Re: Key fob relay attacks
Post by: Brad on January 28, 2019, 10:43:05 AM
I have one, but I don't see the need for key less ignition.

Unfortunately the gar mfgs don't give you a choice, if you want the luxury model with leather and 58 speakers up your keester you get key less ignition.
Title: Re: Key fob relay attacks
Post by: rcjordan on January 28, 2019, 04:17:47 PM
I'll bet there's an aftermarket accessory to address this.  Sort of the reverse of the remote start kits.  Put a relay in the ignition or maybe the starter solenoid.