Author Topic: Key fob relay attacks  (Read 1044 times)

rcjordan

  • I'm consulting the authorities on the subject
  • Global Moderator
  • Hero Member
  • *****
  • Posts: 16329
  • Debbie says...
    • View Profile
Key fob relay attacks
« on: November 30, 2018, 03:44:37 PM »

buckworks

  • Inner Core
  • Hero Member
  • *
  • Posts: 1634
    • View Profile
Re: Key fob relay attacks
« Reply #1 on: November 30, 2018, 04:00:57 PM »
Scary thought: this kind of attack could work in more places than just at home.

Suppose your car was parked outside a restaurant where you were having dinner, and one of these scanners picked up the key fob in your pocket?

rcjordan

  • I'm consulting the authorities on the subject
  • Global Moderator
  • Hero Member
  • *****
  • Posts: 16329
  • Debbie says...
    • View Profile
Re: Key fob relay attacks
« Reply #2 on: November 30, 2018, 04:17:38 PM »
>restaurant

A few years ago, when these fob vulnerabilities started to crop up, a defcon-type drove through a restaurant parking lot with his laptop broadcasting the codes. About 15 cars unlocked their doors or trunks.  As the article mentions, it used to be just door locks --so, the manufacturers added insecure ignition.

It's getting worse. I recently saw some Ford product placement ads showing unlocking and remote starting use a phone app,  Hoo boy!

Related:
McAfee Predicts More Malware Will Target Smart Homes In 2019

https://www.ubergizmo.com/2018/11/mcafee-predicts-malware-smart-homes-2019/

TL;DR: It's the phone, it's almost always the phone.

rcjordan

  • I'm consulting the authorities on the subject
  • Global Moderator
  • Hero Member
  • *****
  • Posts: 16329
  • Debbie says...
    • View Profile
Re: Key fob relay attacks
« Reply #3 on: January 28, 2019, 02:10:18 AM »
BWWwwwaahahaha!

Quote
ADAC tested 237 keyless cars and found that all but three were susceptible, including the latest models of the Discovery and Range Rover, and the 2018 Jaguar i-Pace - all made by Jaguar Land Rover.

Of the top-selling cars in the UK, only the Vauxhall Corsa was deemed safe because it is not available with keyless entry and ignition.


Hundreds of popular cars ‘at risk of keyless theft’ - BBC News
https://www.bbc.com/news/business-47023003

Brad

  • Inner Core
  • Hero Member
  • *
  • Posts: 4153
  • What, me worry?
    • View Profile
Re: Key fob relay attacks
« Reply #4 on: January 28, 2019, 10:43:05 AM »
I have one, but I don't see the need for key less ignition.

Unfortunately the gar mfgs don't give you a choice, if you want the luxury model with leather and 58 speakers up your keester you get key less ignition.

rcjordan

  • I'm consulting the authorities on the subject
  • Global Moderator
  • Hero Member
  • *****
  • Posts: 16329
  • Debbie says...
    • View Profile
Re: Key fob relay attacks
« Reply #5 on: January 28, 2019, 04:17:47 PM »
I'll bet there's an aftermarket accessory to address this.  Sort of the reverse of the remote start kits.  Put a relay in the ignition or maybe the starter solenoid.