News for hackers. Stuff that matters.
Re:Car was stolen from a driveway in Canada. We found it in ... by cmurf on Thursday September 07, 2023 @08:22AM (#37417888)
I guess PKI not used between fob and car?

Sounds to me there's less verification between fob and car, than contactless EMV card and reader. How is this possible? Is it an industry wide practice?

Re:Car was stolen from a driveway in Canada. We found it in ... by mannerheim on Thursday September 07, 2023 @01:50PM (#37422820)
One technique apparently used is signal-boosting. PKI wouldn't fix this. You'd need to do one of three things:

1) Stop fobs from automatically sending out signals without user intervention (but people like convenience)

2) Put fobs in a Faraday cage

3) Add some sort of geolocation to fobs that will stop the car from starting if the key is too far away