Keyless Access Security Threat
04-08-13, 03:55 PM
#16
Well said, RockyDog! If anyone has doubts, here's how quickly a brand-new LX570 disappeared, without a trace ... while under security camera surveillance:
https://www.clublexus.com/forums/lx5...carjacked.html
https://www.clublexus.com/forums/lx5...carjacked.html
04-09-13, 07:10 AM
#17
Be careful where you park (I ALWAYS park at the furthest/isolated parking spot). Only use the (inside) lock button on the door to lock your vehicle (not remote). If the area is in question (mall, etc.), use a "Club".
Koz
Koz
04-09-13, 07:54 AM
#18
Lead Lap
Our local Lexus dealer sent an email out to customers during the holidays that some cars at the local mall were getting broken into by thieves getting the codes to cars. Not sure how true it is but if a thief wants something they will get it. I would also rather have my truck stolen and never recovered than to get it back not knowing if anything is messed up or worse that it was wrecked and that I have to get it fixed. I don't keep valuables in my cars and I get tired of driving the same thing after a couple years so as long as my insurance covers the theft I am not too worried about it.
04-09-13, 08:24 AM
#19
1. The BMW alarm has a dead zone which allows thief to break the glass in a special place without triggering the security system. Oversight by BMW.
2. Once the glass is broken they use a service port to upload new keys, another oversight by BMW. It looks like this got fixed in the latest sw updates.
3. The car is quietly pushed off of driveway and then started.
04-09-13, 05:49 PM
#21
Advanced
Thread Starter
04-09-13, 07:13 PM
#22
Racer
i am sure a device is out there that can scan all the codes and open any keyless entry system, cars, homes, whatever it may be. so i am not surprised at all that thieves are doing this.
04-10-13, 07:33 AM
#23
Last edited by Quadro; 04-10-13 at 07:54 AM.
04-10-13, 04:09 PM
#24
In theory the system can be made robust enough since similar approaches used in cryptography all over the place. Diffie–Hellman key exchange (http://en.wikipedia.org/wiki/Diffie-...n_key_exchange) is a good example of negotiating the key over unsecured channel (which is what a car and a keyfob initially have to talk over). Once the key has been negotiated the rest of communication happens over encrypted channel. I guess the question then becomes for the automaker to decide how far they want to go. I'm sure they can put a secret-level key nogitiation and encryption in place but at what costs?
04-10-13, 08:26 PM
#25
Driver School Candidate
Join Date: Mar 2013
Location: OR
Posts: 24
Likes: 0
Received 0 Likes
on
0 Posts
Excluding dochusar's experience (which wasn't technically a theft since they had the keys) some major things you have to look for with the keyless stuff:
1. The rolling codes for Toyota got cracked from time to time. Every time you open your car the signal from a keyfob can be intercepted (nearby parked car, someone standing next to you with a briefcase, etc.) and the next sequence can then be generated tricking the car into thinking the legitimate keyfob is being used. For this method I believe it's actually safer to open your car using door handles because the signal gets transmitted over a shorter distance.
2. Your keyfob signal can be relayed over long distances. Basically a guy standing next to you will have a receiver/amplifier in his briefcase which will transmit the signal of your keyfob over hundreds of feet to a guy standing next to your car. Again, the car will think as if legitimate keyfob was next to it.
3. Service centers can upload additional keys into your car's brains using special equipment. A couple weeks later a guy will just drive your car as he was the owner.
1. The rolling codes for Toyota got cracked from time to time. Every time you open your car the signal from a keyfob can be intercepted (nearby parked car, someone standing next to you with a briefcase, etc.) and the next sequence can then be generated tricking the car into thinking the legitimate keyfob is being used. For this method I believe it's actually safer to open your car using door handles because the signal gets transmitted over a shorter distance.
2. Your keyfob signal can be relayed over long distances. Basically a guy standing next to you will have a receiver/amplifier in his briefcase which will transmit the signal of your keyfob over hundreds of feet to a guy standing next to your car. Again, the car will think as if legitimate keyfob was next to it.
3. Service centers can upload additional keys into your car's brains using special equipment. A couple weeks later a guy will just drive your car as he was the owner.
04-11-13, 05:23 AM
#26
The common answer in this thread appears to be insurance... Some insurance companies even have "depreciation waver" in case the vehicle is stolen, which means you get a brand new one!
04-11-13, 06:06 AM
#27
If you use a club the thief will most likely skip your vehicle unless he just intends to steal something out of the vehicle. If ANYTHING is visible (even an empty bag on the floor) they may break in.
Koz
Koz
04-11-13, 06:58 AM
#28
Also the easiest way to get over the club is to cut out the steering wheel instead...
04-11-13, 08:43 PM
#29
Racer
Join Date: Dec 2003
Location: Palos Verdes, California
Posts: 1,669
Likes: 0
Received 4 Likes
on
4 Posts
~ Cap
Last edited by Capirato; 04-11-13 at 08:54 PM.
04-12-13, 06:08 AM
#30
LoJack vs Enform
LoJack uses RF for its signal with an independent power source and has a higher recovery rate (90% within the first 48 hours). From what I have researched the Enform (using GPS/Cell signals) can be disabled simply by disconnecting the battery (not confirmed). I would find out for sure before depending on the Enform.
Also LoJack is a one time fee/cost!
Koz
LoJack uses RF for its signal with an independent power source and has a higher recovery rate (90% within the first 48 hours). From what I have researched the Enform (using GPS/Cell signals) can be disabled simply by disconnecting the battery (not confirmed). I would find out for sure before depending on the Enform.
Also LoJack is a one time fee/cost!
Koz
