Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

Eugene

(61,899 posts)
Fri Aug 12, 2016, 03:54 PM Aug 2016

Millions of cars' keyless entry systems can be hacked, security experts find

Source: Associated Press

Millions of cars' keyless entry systems can be hacked, security experts find

By ASSOCIATED PRESS

AUGUST 12, 2016, 11:40 AM

A group of computer security experts say they figured out how to hack the keyless entry systems used on millions of cars, meaning that thieves could, in theory, break in and steal items without leaving a broken window.

The experts say that remote entry systems on millions of cars made by Volkswagen since 1995 can be cloned to permit unauthorized access to the car's interior.

The same experts say another system used by other brands, including Ford, Chevrolet, Renault and General Motors' Opel, can also be defeated.

In a paper delivered Friday at the Usenix security conference in Austin, Texas, the authors say a thief could use commonly available equipment to intercept entry codes as they are transmitted by radio frequency, then use that information to clone another remote so the car could be opened.

[font size=1]-snip-[/font]


Read more: http://www.latimes.com/business/autos/la-fi-hy-cars-hackers-20160812-snap-story.html

Related: Lock It and Still Lose It —on the (In)Security of Automotive Remote Keyless Entry Systems (Usenix)

10 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Millions of cars' keyless entry systems can be hacked, security experts find (Original Post) Eugene Aug 2016 OP
Well, DUH! Daemonaquila Aug 2016 #1
So what has happened to the rate of car thefts since all these gizmos? whatthehey Aug 2016 #6
Post hoc ergo prompter hoc. LanternWaste Aug 2016 #7
Well no whatthehey Aug 2016 #8
Stephen King addressed this seveal years ago matt819 Aug 2016 #2
The problem is stupid implementation. Xithras Aug 2016 #3
What the hell? I just bought a brand new Passat!!! UMTerp01 Aug 2016 #4
My 1996 Ford Ranger is looking even better every day. nt MrScorpio Aug 2016 #5
I've got a keypad on my '95 Explorer door maxsolomon Aug 2016 #9
Long ago, before keyless entry systems, MineralMan Aug 2016 #10
 

Daemonaquila

(1,712 posts)
1. Well, DUH!
Fri Aug 12, 2016, 04:02 PM
Aug 2016

If it's electronic and emits a signal, it can be hacked. End of story.

If it can be hacked, it will be hacked. It probably HAS BEEN hacked.

I want to slap the crap out of car dealers that are upset when I go for older cars or models with no keyless entry, and minimal electronic crapola. Not only is it much cheaper in the long run because my car doesn't become a problem when an expensive electronic component starts going on the fritz, but it makes a difference for security and control of the vehicle.

whatthehey

(3,660 posts)
6. So what has happened to the rate of car thefts since all these gizmos?
Fri Aug 12, 2016, 04:41 PM
Aug 2016

It's dropped from 659/100k in 1991, which is about when metal keys were widely giving way to push button fobs, to 221/100k now. The most preciptous part of that decline started shortly after the 1997 intro of smart keys that meant hotwiring was no longer feasible on cars so equipped.

You are worried about people equipped with high tech devices who have to stand right next to you to steal a code, but not about any Joe blow with a coathanger or a lockpick?

http://www.nytimes.com/2014/08/12/upshot/heres-why-stealing-cars-went-out-of-fashion.html?_r=0

Money quote...
You can see this in the pattern of thefts of America’s most stolen car, the Honda Accord. About 54,000 Accords were stolen in 2013, 84 percent of them from model years 1997 or earlier, according to data from the National Insurance Crime Bureau, a trade group for auto insurers and lenders. Not coincidentally, Accords started to be sold with immobilizers in the 1998 model year. The Honda Civic, America’s second-most stolen car, shows a similar pattern before and after it got immobilizer technology for model year 2001.

 

LanternWaste

(37,748 posts)
7. Post hoc ergo prompter hoc.
Fri Aug 12, 2016, 04:47 PM
Aug 2016

"It's dropped from 659/100k in 1991, which is about when metal keys were widely giving way..."

Post hoc ergo prompter hoc. Supply objective causation and your allegation becomes a premise. Leave it as is, it's a bumper-sticker, regardless of the projected concern of codes as well as coathangers.

whatthehey

(3,660 posts)
8. Well no
Fri Aug 12, 2016, 04:55 PM
Aug 2016

The inability to hotwire cars is not a temporal coincidence. The lack of simple mechanical locks that can be slimjimmed is not either. 84% of Honda Accords on the road in 2013 were not pre 1997 models and yet that was the ratio of 16+ year old cars stolen. It is sheer sophist nonsense to pretend that electronic locks and immobilizers are as easy to overcome as a latch behind a 1/4" gap and a couple of wires.

matt819

(10,749 posts)
2. Stephen King addressed this seveal years ago
Fri Aug 12, 2016, 04:03 PM
Aug 2016

Mr. Mercedes already addressed this issue. Pretty scary.

Xithras

(16,191 posts)
3. The problem is stupid implementation.
Fri Aug 12, 2016, 04:11 PM
Aug 2016

The HITAG transponders used by many car manufacturers only use 48 bit encryption, and even worse only use a 32 bit rolling key. Tack onto this the fact that the encryption uses a discoverable fixed key instead of a random number generator, and you have an "encryption" system that is theoretically crackable by any 12 year old script kiddie with a laptop and a signal scanner. It's "secure" in only the loosest sense.

Many manufacturers use higher encryption levels and PRNG's to really randomize the keys, which are nearly uncrackable. The problem here isn't that the technology is broken, but that these manufacturers went with the cheapest solution they could find and implemented encryption standards that haven't been considered secure in more than a decade.

 

UMTerp01

(1,048 posts)
4. What the hell? I just bought a brand new Passat!!!
Fri Aug 12, 2016, 04:16 PM
Aug 2016

Its keyless entry and I have a program on my phone that I can even unlock and lock it with my phone. What in the hell? This is yet another downside with technology. Its brought us some great things but its also another thing to be hacked.

maxsolomon

(33,345 posts)
9. I've got a keypad on my '95 Explorer door
Fri Aug 12, 2016, 07:34 PM
Aug 2016

If you can manage to get in and steal it, please proceed. Just make sure you total it.

MineralMan

(146,309 posts)
10. Long ago, before keyless entry systems,
Fri Aug 12, 2016, 08:42 PM
Aug 2016

I encountered an older guy who had locked his keys in his car. He was flustered and sweating in the sun. I asked him if I could help. He said thanks. So I got my slim Jim from my trunk and opened his door in about 30 seconds.

"Thanks," he said. " Are you a mechanic?"

"Nope," I replied. "A car thief." Then, I got in my car and left. Actually, I was working as a mechanic then, but that wouldn't have been as good a story for him to tell later.

Latest Discussions»General Discussion»Millions of cars' keyless...