News for hackers. Stuff that matters.
Re:Radio Attack Lets Hackers Steal Cars with Just $20 Worth ... by 13of40 on Tuesday November 28, 2017 @11:20AM (#15798562)
Seems like a simple fix would be to put an accelerometer into the key fob and turn off the radio if it hasn't moved in a minute or two.
Re:Radio Attack Lets Hackers Steal Cars with Just $20 Worth ... by mastax on Tuesday November 28, 2017 @11:22AM (#15798598)
Better solution is to determine fob distance based on response time rather than signal strength.
Re:Radio Attack Lets Hackers Steal Cars with Just $20 Worth ... by amenghra on Tuesday November 28, 2017 @11:56AM (#15798943)
It's an active field of research. You can learn more by starting here: https://en.wikipedia.org/wiki/Distance-bounding_protocol
Re:Radio Attack Lets Hackers Steal Cars with Just $20 Worth ... by dsp1234 on Tuesday November 28, 2017 @11:59AM (#15798974)
Radio waves move at the speed of light.

Light can move about 300 meters in one millionth of a second. It's easy enough to find a store where the parking lot is well within that distance from the middle of the store.

So whatever system that goes into place would need to possibly have accuracy down to the 1us level or smaller.

Re:Radio Attack Lets Hackers Steal Cars with Just $20 Worth ... by derekp7 on Tuesday November 28, 2017 @02:06PM (#15800313)
You can also have three antennas in the car, and have high speed electronics measure the RF delay as received on each antenna. From there the key can tell how far away it is from the car (similar to how GPS works), and it would only respond to the challenge when it is in the proper position.
Re:Radio Attack Lets Hackers Steal Cars with Just $20 Worth ... by jagger27 on Tuesday November 28, 2017 @01:38PM (#15800048)
In 1 μs light travels 300 m (984 ft) in a vacuum, or 225 m (738 ft) in air (roughly). That's not good enough.

1 nanosecond is about a foot. A 100MHz clock gives us a resolution of 10 ns, which translates to 2.25 meters away by light in air.

As a backup if your fob battery is dead, you could use inductive power in the door, or just use that to begin with (still with distance-bounding).

Re:Radio Attack Lets Hackers Steal Cars with Just $20 Worth ... by _wmd on Tuesday November 28, 2017 @11:27AM (#15798655)
I was thinking exactly the same thing, speed of light is the only robust way to prevent the attack without hobbling the entire feature.. doubt it could be reliably retrofitted to an exiting design though, timing that precise probably requires additional hardware or at least hardware specifically designed for low jitter