Car key rolling security codes hacked - extra immobilizer ideas?

[sunhorntortoise]

Anyone with an easy to install but not easy to bypass immobilizer or similar ideas? Today it's just to unlock the car yet but I'd say we might be not far from the full emulation of a key.

https://www.rtl-sdr.com/flipperzero-darkweb-firmware-bypasses-rolling-code-security/

"For this new attack to work, all that is needed is a single button-press capture from the keyfob, without any jamming. Just from that single capture, it is able to emulate all the keyfob's functions, including lock, unlock, and unlock trunk. A consequence of this is that the original keyfob gets out of sync, and will no longer function."

"Affected vehicles include Chrysler, Dodge, Fiat, Ford, Hyundai, Jeep, Kia, Mitsubishi and Subaru. As of yet, there appears to be no easy fix for this, other than mass vehicle recalls."

Sponsored

 

[SCP440]

A hidden immobilizer or switch or a physical deterant. Most thiefs dont want to spend time stealing your car so just make yours more difficult.

 

[MrMike]

Do people press the buttons on their fobs? My last button press was the key being squished while in my pocket. The malicious actor would need access to my home or to steal the key from me, at which point more than my car has been compromised.

 

[Skye]

If not already in use, I always recommend Faraday pouches.

When in motion, our key fobs aren't necessarily transmitting to the Remote Transceiver Module (RTM), but they are awake and active. Once still, the fob will go to sleep, after 40 seconds. The fob will go active again, if moved.

But the fobs can also be awakened and coaxed to transmit, if they meet a 125 kHz signal; this is the frequency the door and trunk proximity sensors send to the fob when they detect one nearby. Two people with some common radio tools, one near the fob, the other near the car, could then gain access via a relay.

The use of the pouch helps limits signal transfers to when only needed. Unfortunately, when accessing a door or trunk, the 315MHz signal used by the fob can travel quite a ways; capture will continue to be possible if the thief is nearby. The signal will be sent one more time, when starting the vehicle. Otherwise, the fob will sit there, awake and active, but not necessarily transmitting.

An additional thing I've recently done is masking my VIN in the windshield. A piece of electrical tape will cover the tag. While it's no effort to remove the tape and copy the VIN, even if they attempt to put the tape back in-place, it won't look the same. It's a head's up someone is interested the car, and possibly gathering information towards coding a clone or other device.

As far as physical kill switches and the like, I haven't studied those in-depth. IDK if one company or method is superior or trending better than others.

Underneath the rearmost cupholder is a simple plug and socket; this connects the inductive coupler and antenna to the vehicle Controller Area Network (CAN) and ultimately the Powertrain Control Module (PCM). The cupholder location is where the fob and PCM interact. Maybe a simple tap here, with a hidden switch?

Whatever methods being considered, others have pointed to On-Board Diagnostics (OBD) covers, locking ones. If they are smart enough to open the door, ready access to the OBD port could make starting the vehicle a breeze.

In addition to that...

- I'm fortunate I can park in a closed garage; I lock the car once inside

- I keep a low social media presence

- I will often vary my routes. It's funner anyway.

- I will park in different areas at the same destination, when possible

Edit,

Security is a topic that covers a lot of ground. Each Member will have to assess where they are at and what they can do to mitigate any risks.

 

[_zOmbIE_]

Do people press the buttons on their fobs? My last button press was the key being squished while in my pocket. The malicious actor would need access to my home or to steal the key from me, at which point more than my car has been compromised.

Not all models/trims have proximity entry.

My Mustang GT Premium does, but my '21 Bronco Badlands does not.

 

[Sparky1337]

Do people press the buttons on their fobs? My last button press was the key being squished while in my pocket. The malicious actor would need access to my home or to steal the key from me, at which point more than my car has been compromised.

Like Skye said, they can just boost the signal of your keyfob and steal the car without ever accessing your home.

It doesn’t even take a minute. There’s a post on the bronco6g forums ( maybe taken from Reddit, I can’t remember ) where they walked up to the front door with a device and took the Bronco in less than a minute.

Lesson of the day, put keys in a faraday cage and don’t leave them out.

https://www.bronco6g.com/forum/thre...solated-folks-to-prevent-stolen-bronco.90549/

 

[MrMike]

Like Skye said, they can just boost the signal of your keyfob and steal the car without ever accessing your home.

It doesn’t even take a minute. There’s a post on the bronco6g forums ( maybe taken from Reddit, I can’t remember ) where they walked up to the front door with a device and took the Bronco in less than a minute.

Lesson of the day, put keys in a faraday cage and don’t leave them out.

https://www.bronco6g.com/forum/thre...solated-folks-to-prevent-stolen-bronco.90549/

Then the linked article in the OP is stating incomplete and/or inaccurate information.

 

[Sparky1337]

Then the linked article in the OP is stating incomplete and/or inaccurate information.

If you click into the provided links on the article OP posted, they go more in depth. The attack I described is the old way, and it makes sense for key fobs to change over time too. This new type of attack is much more targeted, or opportunistic and specifically mentions these types of attackers sit in parking lots waiting for people to use their fobs so they can intercept.

So the advice I gave really only helps if they try to roll through the neighborhood at night and try to grab something random. If they see you at the supermarket, steal your fob codes, and follow you home, they’d be able to swipe your car unless you have some physical interrupt like a floorboard switch police interceptors have.

 

[MrMike]

If you click into the provided links on the article OP posted, they go more in depth. The attack I described is the old way, and it makes sense for key fobs to change over time too. This new type of attack is much more targeted, or opportunistic and specifically mentions these types of attackers sit in parking lots waiting for people to use their fobs so they can intercept.

So the advice I gave really only helps if they try to roll through the neighborhood at night and try to grab something random. If they see you at the supermarket, steal your fob codes, and follow you home, they’d be able to swipe your car unless you have some physical interrupt like a floorboard switch police interceptors have.

To be clear, what Skye and you have said regarding spoofing the key is accurate. I still think the article is short sighted and am playing devil’s advocate. I am not saying someone can’t steal my car if they want to.

My cars are kept in the garage. If someone wants to B&E, they can just smash a window and take everything. I have insurance and my life isn’t worth than my car.

While it’s stupid, I live in an area where many just flat out leave their keys in their car. Every so often a teenager will be out pulling handles and will take someone’s car for a ride.

Having your FordPass account (or equivalent from another manufacturer) hacked while having all the telemetry enabled is much more of a risk.

 

[coyote550]

Easiest to do is a physical kill switch. You can either run it to ignition fuse or the fuel pump. I've also seen some run it to the clutch position sensor if its a manual. I prefer the fuel pump. Put it somewhere very discreet, like under the shifter boot or handbrake boot so its not visible at all and you have to flip it by feel, and hide all the wiring.

 

[Free Spirit]

A hidden immobilizer or switch or a physical deterant. Most thiefs dont want to spend time stealing your car so just make yours more difficult.

Or just buy a stick shift. Best anti theft out there.

 

[sox3]

Watch this 37 second video. One of my tenants car stolen. Newer Toyota with push button start. State police officer said he has never seen anything that fast.

 

[Ozcraig]

How about the good old fashioned steering wheel lock? Visually dissuades the thief from attempting to steal your vehicle, and when not in use can be used to bludgeon attempted hijacker! Just a thought.

 

[MAGS1]

How about the good old fashioned steering wheel lock? Visually dissuades the thief from attempting to steal your vehicle, and when not in use can be used to bludgeon attempted hijacker! Just a thought.

Battery powered sawzall takes care of those real quick

 

[Timbuck]

on My 6r80 I’ve put a switch on the park switch circuit. If someone makes a fake key or breaks In electronically or steels the my keys….. You can start it but it will not go out of park.

interrupting the park switch , neutral Switch , brake switch circuit all result in the car not starting.

also injector fuse circuit is an easy one also , car will power up turn over and nothing will happen.

The fact is if it doesn’t go straight away , they bail pretty quick As they want that 30 second operation.

Sponsored