Autocar: Keyless Cars Security Risk

[HDPete]

I am sure that this is old news, but slightly worrying that my existing car is on the list and I've just opted for the Advanced Key on the RS6 PE.

The video in the news article is in German, but contains a very good demonstration of the range that this homemade device can cover.

http://www.autoexpress.co.uk/car-news/c ... yless-cars

[HDPete]

http://makezine.com/2015/08/11/anatomy- ... -car-hack/

[HDPete]

Further reading, from the author of the hack:

http://www.wired.com/2015/08/hackers-ti ... s-garages/

[MikeFish]

I wonder if the keyless start but not keyless entry cars are safe? It sounds like they can start all RS6s but not necessarily be able to unlock the doors... Unless of course they use the device in the 2nd link.
It was the main reson I didn't select advancedkey but with keyless start there is still that level of vulnerability.

[HDPete]

In theory, the same exploit could be used with the keyless start as it's spoofing the RF code, but they would need to physically gain entry to the car (via a broken window)

[Ian_C]

In theory, the same exploit could be used with the keyless start as it's spoofing the RF code, but they would need to physically gain entry to the car (via a broken window)

Probably not tbh

A car with keyless entry / ignition is always sending out signals, looking for its 'parent' key

Whereas car with normal remote central locking isn't. The user presses the remote control to send a signal to the car

THIS I believe is the critical difference. If the car has keyless entry / ignition, in the MMI, I gather you can turn keyless entry off. So you have to press the button on the remote to unlock the car

[MikeFish]

The normal keyless start is always sending out a signal too.

Interestingly, I tried to lock my key in the boot but it obviously knew the key was in there and left the boot unlocked so it is always sending a signal out, just like the keyless entry, but as said it needs the press of the button to unlock the doors in the first place (or break a window). Which raises another point. Is any part of the immobiliser deactivated when you unlock the doors or is it all done by the presence of the key? In other words, if I was locked in the car and I had the key could I start the car or do I need to deactivate the alarm first?

[stevo55]

The simplest way to mitigate the risk of your pride and joy getting lifted is to turn back the clock 20 odd years and fit a disk lock! Thieves who are after your car are working against the clock and time is not on their side. They want to get in, get the car started and away as quickly as possible. Most simply can't afford to spend ages drilling and power sawing through a fitted disk lock. It's a great visual deterrent and 'should' be enough to get them to leave your car alone and find an easier target. Same goes for house security etc. Just make sure you fit it every time and get into that habit. Sods law says that the one time you forget/leave it is the one time that you need it! It's ironic that to defeat a tech savvy enemy we have to return to past defences but hey it works....

[MikeFish]

It will prevent the type of theft where they clone your key frequency, but it won't stop the most common type of theft where they break into your house for the keys.

[stevo55]

Off street burglaries are increasingly common especially in city areas and of course wealthy areas! There is a fine line between effective deterrents and making your house like Fort Knox and thus attracting more attention! Plus whatever system you use has to be user friendly...a depressing number of people get a gucci alarm system thats so complex to alarm they tend to not bother...same as CCTV which is great for evidential purposes (if its been sited well and is HD) but useless unless someone is monitoring it. A combination of layers 'should' in theory at least deter thieves onto a less prepared victim. Dogs work well (legal weapon with teeth!) as do lights etc.TIME is the crucial factor for thieves as well as risk vs reward. A lot of burglaries happen in broad daylight with a bold approach and 'hiding in plain sight'. The fact that a gang would be willing to break into someones house whilst they are there to steal the keys increases the risk to them. Put as many sensible cost effective layers up as possible without making the house/car too attractive and that should be enough for them to think 'nah' when they are scoping you out.

[Ian_C]

https://www.youtube.com/watch?v=0AHSDy6AiV0

[RS_Four]

Worrying content in this video... At least they don't break in to the house and impact on family fear.

[MikeFish]

An aftermarket alarm for £500 would stop that happening but also stops it being keykess entry. For me, I'd rather have the security.

[stevo55]

Worrying content in this video... At least they don't break in to the house and impact on family fear.

Breaking in also increases the risk to the thieves of a) having to break into a house-potentially with the owners inside-and find keys thus spending more time on scene and b) if they get caught it's a burglary charge-possibly increased to aggravated (or worse) if they get challenged by the owners.
'Fishing Pole Bandits' have seen an increase as well so make the decision of whether to leave the keys downstairs or take them up to bed with you. Cars can be replaced people can't!