News for hackers. Stuff that matters.
Re:Thieves boosting signal from key fobs inside homes to ste... by gambiting on Wednesday December 05, 2018 @10:10AM (#18608828)
>>Why is it transmitting without the user pressing a button? Is that a feature?

It's not transmitting anything, it works pretty much the same way NFC works. Both the key and the car have their own public/private key pairs(which were obviously set by the manufacturer) and when you touch the handle the car transmits an unlock request to the key, encrypted with the car key's public key(this is going to get confusing lol) - when the key receives the message, it decrypts it using its own private key, if it's correct then it replies with an "ok" message encrypted with the car's public key. When the car receives that it decrypts it using its own private encryption key and opens the doors. Simple, and in theory unbreakable. The issue is that the car doesn't measure how far away from vehicle the key is - it only relies on the fact that the transmitters used by the car and the key are super-low range(like, within 50cm). Which is obviously defeated by using signal boosters.

Re:Thieves boosting signal from key fobs inside homes to ste... by teraflop on Wednesday December 05, 2018 @12:17PM (#18610273)
This is kind of a nitpick, but it's unlikely that the keyfob is doing public key cryptography. Those things have to be as energy-efficient as possible in order to maximize battery life. An HMAC would accomplish effectively the same thing, and is much more efficient to compute.
Re:Thieves boosting signal from key fobs inside homes to ste... by heeen2 on Wednesday December 05, 2018 @04:26PM (#18612746)
As you described it, it is easily broken with a replay attack.
Re:Thieves boosting signal from key fobs inside homes to ste... by gambiting on Thursday December 06, 2018 @02:56AM (#18616209)
Yes, that's why it's not all there is to it - the request to unlock the car contains a rotating key, just like with normal wireless car keys.
Re:Thieves boosting signal from key fobs inside homes to ste... by basejumping on Wednesday December 05, 2018 @11:34AM (#18609792)
Can you also boost the nfc to make payments from distance?
Re:Thieves boosting signal from key fobs inside homes to ste... by Piskvorrr on Thursday December 06, 2018 @09:00AM (#18618065)
Yup, but it's not very lucrative vs. risk, thus rare. This doesn't happen all that often because the payments need to also go somewhere, and following the money is apparently easier in electronic form. Plus there's a safety/security layer - you need to authenticate payments above a certain low limit, bank vouches for what's below the limit, etc.