this post was submitted on 08 Aug 2024
457 points (98.5% liked)
Technology
60075 readers
3572 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Keyless start is fucking awesome though, just get in the car and drive. I wouldn't even consider a car without after having one with it. Pretty much all other manufacturers have this in a safe way that doesn't make the cars easier to steal. Its not the keyless start that's the issue, its how they implemented it.
I mean, many new cars don't even have an old school key ignition at all.
A lot of smart key cars are vulnerable to relay attacks. It's not a solved security issue by any means.
Nobody is fucking doing that, though! This isn’t a “oh I will hack this person using a relay attack” attack, it’s some dumb kids breaking into cars using physical measures. They are NOT going to be using a RELAY ATTACK
Challenge Accepted
They are. It’s not incredibly common, but it’s not rare.
My coworker had his car stolen from his driveway. He believes it was a relay attack.
That being said, it’s super easy to mitigate by putting your keys in a metal bin.
AFAIK they're not anymore vulnerable than central locking systems
Yes they are, because keyless listens to the car asking for authorization, so you can amplify the car signal hoping the key is not too far off, and unlock the car without any other work.
What’s more, all keyless cars still have a fob with proximity and if the fob dies, they legally have to have a way to start the car without the fob battery which is why they all have an nfc reader somewhere (usually in a cup holder) so you can put you dead fob on it and the car will start like normal.
All keyless start kias and hyundais are/were immune to the Kia boys trick
So what was the exploit then? They could get in to the car without the key?
No engine immobilizer was the ultimate issue. And from what I understand, it was just an issue with models sold in the US, so all this misery was caused by a manufacturer’s cost saving measure.
ETA: To clarify, the cause was a manufacturer’s cost saving measure enabled by the US regulations’ lack of a requirement for engine immobilizers.
Yeah, by breaking the window. Then they rip out the ignition cylinder and turn the electrical switch just like on old cars. They didn't put any kind of electronics into the key to prevent this from happening. Most keys from about 1999+ have an NFC type "chip" in them that prevents the car from starting without a key that is programmed to the car.
Aah, so it actually has absolutely nothing to do with keyless access and driving like most seem to complain about.
Still, it would be cool if they didn't charge hundreds of dollars for a replacement key that costs them a couple bucks.
Til someone uses flipper to clone your key n jack your shit
That’s..not how rolling codes and tight timing requirements work. There are almost zero keyless entry car models that can be unlocked, let alone started, with hardware at the sophistication level of a flipper.
Yeah I did a little homework after I made the comment n realized I was wrong. Didn't get a chance to go back n remove or fix it.
I mainly pushed back because the Flipper Zero is an amazing toy to teach novices young and old about the basics of radios, computing, and cryptography. But they are facing backlash around the world from uneducated, reactionary, “think of the children” mouth breathers and you shouldn’t give those chucklefucks any more ammo in their misinformation belt.
You’re an insane person if you think KIA BOIZ are using a fucking flipper and not opportunistically attacking parked cars hahahaha
That's no different than if you had central locking and a douche nearby (but significantly further away than keyless access and start) to intercept it as you lock/unlock it. Risk of this actually happening to you is so slim, it's not an issue in real life.