News for hackers. Stuff that matters.
Re:Canadian government banning Flipper Zero to combat auto t... by Ancapistani on Thursday February 08, 2024 @10:52PM (#39311188)
> How can you use a Flipper Zero to steal a car?

A lot of vehicles - my wife’s 2015 Kia included - have a very flawed implementation of rolling key encryption. Basically, you need to capture three consecutive keys. The receiver is programmed to allow any future key (in case the fob was pressed away from the car), and will happily reset to past keys when you send three consecutive keys in sequence.

Ostensibly this is to avoid people’s fobs from becoming “unpaired” somehow if the car receives a future key. You just hit the button a few times and it works. In practice, it’s trivially easy to exploit.

Re:Canadian government banning Flipper Zero to combat auto t... by galangalalgol on Thursday February 08, 2024 @11:55PM (#39311554)
That is pretty terrible! Is there a good resource on how different schemes work? It would be nice to know when shopping.
Re:Canadian government banning Flipper Zero to combat auto t... by inferiorhuman on Friday February 09, 2024 @03:59AM (#39312891)
There was an interesting presentation at USENIX a while back:

https://www.usenix.org/system/files/conference/usenixsecurit...

Re:Canadian government banning Flipper Zero to combat auto t... by therein on Monday February 12, 2024 @09:07PM (#39353452)