"jim beam" wrote in message
> Eric wrote:
>> Jim Yanik wrote:
>>
>>> At least the Spec V has RFID chipped keys.
>>
>> This article may be of interest.
>>
>>> How a keyless car gets stolen isn't exactly a state secret; much of the
>>> required knowledge is Basic Encryption 101. The authors of the Johns
>>> Hopkins/RSA study needed only to capture two challenge-and-response
>>> pairs
>>> from their intended target before cracking the encryption. In an example
>>> from the paper, they wanted to see if they could swipe the passive code
>>> off the keyless ignition device itself. To do so, the authors simulated
>>> a
>>> car's ignition system (the RFID reader) on a laptop. By sitting close to
>>> someone with a keyless ignition device in their pocket, the authors were
>>> able to perform several scans in less than one second without the victim
>>> knowing. They then began decrypting the sampled challenge-response
>>> pairs.
>>> Using brute-force attack techniques, the researchers had the laptop try
>>> different combinations of symbols until they found combinations that
>>> matched. Once they had the matching codes, they could then predict the
>>> sequence and were soon able to gain entrance to the target car and start
>>> it.
>>
>> http://reviews.cnet.com/4520-3513_7-6516433.html?tag=txt&tag=nl.e501
>
> post that to seth on the "Honda Pilot EXL 2007 - remote start" thread from
> july 14.
Why post it to me? You do know that the exploit being discussed above has
nothing to do with a remote starter as they don't use an RFID
challenge/response signaling system, don't you?
To clone a remote starter remote control signal you would have to be
scanning/reading the code while the button is repeatedly pressed a number of
times till the scanner could figure out the algorithm used for the code
hopping. They don't transmit when the receive a challenge signal.
If you want to be paranoid about the article mentioned above, then the way
to protect oneself is to have their stock Honda (or any other brand) key
stored in a lead lined key case when walking around with it in their pocket.
The car alarm, remote starter, keyless entry unit, to be cloned would
require first getting your hands on the actual FOB, in which case you don't
need to clone it as you have the original.
All that aside, I'm guessing the "post that to seth on the "Honda Pilot EXL
2007 - remote start" thread from july 14." was more an attempt at being
obnoxious than anything else. I know I never said the system was
invulnerable, just not a high-risk threat. Having one's head or house
destroyed by a piece of falling debris is also possible, but again, not
likely and therefore I'm not losing any sleep worrying about it.
Coincidently, neither my home owners insurance, car insurance or life
insurance has any clause excluding space debris or remote starters. If they
thought it was a high risk possibility you better believe they would have a
clause and an additional cost rider as a result to make more money off the
customer.
>> Stay informed about: 90 Accord main relay 
FAQ
Search
Profile
Private Messages
Log in
