Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Please note that it is not permitted to have referral links posted in your signature. Keep these links contained in the appropriate forum. Thank you.

https://www.boards.ie/discussion/2055940817/signature-rules
Hi all! We have been experiencing an issue on site where threads have been missing the latest postings. The platform host Vanilla are working on this issue. A workaround that has been used by some is to navigate back from 1 to 10+ pages to re-sync the thread and this will then show the latest posts. Thanks, Mike.
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Many (most?) keyless entry cars vulnerable to "range extender" exploit

  • 24-03-2016 10:33am
    #1
    Special Circumstances
    Closed Accounts Posts: 7,569 ✭✭✭


    Fairly cheap components and a bit of know how, and they're in. And in some cases, away with the car.

    Think of it as analogous to an automotive version of a "wifi range extender" if you are not familiar with the technology.

    http://www.wired.com/2016/03/study-finds-24-car-models-open-unlocking-ignition-hack/
    Worth reading for keyless entry owners.

    A) This is just a development of previously reported vulnerability.
    B) You may be able to protect yourself by always carrying your keys in a stylish insulated shopping bag intended to keep your frozen peas frozen.
    C) It's an awkward one to deal with insurance - I swear I locked it, I always do!


Comments

  • #2
    frozenfrozen
    Registered Users, Registered Users 2 Posts: 7,883 ✭✭✭frozenfrozen


    Ever since I saw keyless entry and start on top gear where they opened the car and drove away while the other one was eating in the restaurant I said **** that to the idea. Same thing with onstar / internet connection in the car with access to canbus. The latter is ridiculously unsafe. The former is just as bad as how you could get into bmws and program a new key to then steal the car.


  • #3
    ironclaw
    Registered Users, Registered Users 2 Posts: 8,004 ✭✭✭ironclaw


    Appears to be a pretty trivial man in the middle attack. The distance between the car and the key is actually aiding it. There is another system called RollJammer that operates on somewhat the same principal.

    I believe the combat to this, at least on a simple level, is multiple and successive queries of the key. So you don't only need one capture, you need multiple ones. From a security perspective however wireless keys are stone age as you only have one form of authentication. Whoever has the key, has control. This is inherently insecure.

    Given everyone carries a phone or similar now, we should have a secondary authentication mechanism via it or the likes of the Apple TouchID / Secure Enclave concept.


  • #4
    Voodoomelon
    Registered Users, Registered Users 2 Posts: 9,660 ✭✭✭Voodoomelon


    I'll be building a little Faraday cage when I get home to keep my keys in. :D


  • #5
    Special Circumstances
    Closed Accounts Posts: 7,569 ✭✭✭Special Circumstances


    Voodoomelon wrote: »
    I'll be building a little Faraday cage when I get home to keep my keys in. :D

    Telling ye boys a stylish cool bag from tesco will keep yer keys and contact less cards and all safe. Must have accessory for 2016


  • #6
    mickdw
    Registered Users, Registered Users 2 Posts: 23,466 ✭✭✭✭mickdw


    Special Circumstances wrote: »
    Telling ye boys a stylish cool bag from tesco will keep yer keys and contact less cards and all safe. Must have accessory for 2016

    Those free apps that can read my bank card number while within my wallet freaked me alittle.


  • Advertisement
  • #7
    colm_mcm
    Registered Users, Registered Users 2 Posts: 73,478 ✭✭✭✭colm_mcm


    frozenfrozen wrote: »
    Ever since I saw keyless entry and start on top gear where they opened the car and drove away while the other one was eating in the restaurant I said **** that to the idea. Same thing with onstar / internet connection in the car with access to canbus. The latter is ridiculously unsafe. The former is just as bad as how you could get into bmws and program a new key to then steal the car.

    That top gear thing was nonsense though.


Advertisement