back
11 comments
It's interesting that nobody in the chain of this actually seems to care about the problem. It seems like insurance companies should have a huge incentive (and ability) to force car manufacturers to fix this problem.

Car model XYZ becomes hackable? Send all policy holders a letter letting them know that in 90 days their rates will go up by X% and to contact the manufacturer for a fix.

Why don't the insurers care?

Isn't there technology that can prevent this kind of replay attack? And shouldn't the maker of a $50,000 car take advantage of this kind of technology to protect their car buyers? This kind of article would make me much less likely to buy this car.
The Car Connectivity Consortium recently standardized Digital Key Release 3.0 (see https://global-carconnectivity.org/) which leverages UWB to provide precise, real-time spatial data that promises to be very effective at preventing relay attacks. Replay attacks, on the other hand, are mitigated by the application protocol through short-lived ranging keys.

A few cars implement Digital Keys 2.0, which uses NFC (Notably BMW in all their new models, but also some models in the Hyundai-Kia group). I expect most manufacturers implementing their own Bluetooth variation to switch over relatively quickly.

Replay attacks are easy to mitigate but this isn't exactly what this is. This is a RELAY attack which is harder to mitigate. Still very possible to mitigate by using very strict timing parameters which can detect the physical distance by things which are immutable (speed of rf transmission) vs infer it via limiting TX power.
Yes, a key.

There are also various things that can be done to prevent relay attacks, but a good key combined with a very short range interlock device is much better than these stupid fobs.

Does this mean the return of "The Club" steering wheel lock?
An old solution for a modern problem
https://archive.ph/MLAXn
The problem with Faraday cages (or bags) for wireless car qkeys is that the key in question will usually ramp up the receiver and transmission power, if it can't hear the car. Thus, you will rapidly burn through your battery, even if you do manage to keep your keys secure in the Faraday cage/bag.

Then there's the problem of forgetting your keys and not being able to find them.

We need to have a switch on the remote so that we can just turn it off, until such time as we want to turn it on again.

A microwave is not and ideal place for this.

The first time one of your kids tries to make popcorn you can go and order a new key fob lol

To continue reading

Already a subscriber? Log in