News for hackers. Stuff that matters.
Re:MicroPython on Flipper Zero by echoangle on Thursday September 19, 2024 @04:25PM (#41596054)
Just recording and replaying wouldn’t help you anyways, the code is rolling to prevent replay attacks.
Re:MicroPython on Flipper Zero by FridgeSeal on Thursday September 19, 2024 @07:26PM (#41597375)
Plenty of devices use the Keeloq protocol for rolling codes which is pretty straightforward to break in modern hardware.
Re:MicroPython on Flipper Zero by virtue3 on Thursday September 19, 2024 @05:37PM (#41596611)
I think if you have enough replays you can deconstruct the rolling code. Not sure.

Also there are ways to desync/resync your key so you might be able to “add a key” with the flipper with certain firmwares.

Cloning the current key and using it can desync it from your car. Super annoying. Be careful

Re:MicroPython on Flipper Zero by echoangle on Thursday September 19, 2024 @05:44PM (#41596661)
I don’t know exactly how the rolling key works but wouldn’t it be kind of like having a secret stored in the key that’s needed to generate the next code? If it’s designed properly, recording a few thousand codes shouldn’t tell you anything about the next code, just like you can’t deduce private keys by looking at a few thousand encrypted files. I have no clue if that’s really how it works, so I would be happy to be corrected if my mental model is wrong here.
Re:MicroPython on Flipper Zero by bigiain on Thursday September 19, 2024 @07:10PM (#41597284)
> If it’s designed properly,

That phrase is doing a lot of heave lifting there...

(This is only what I've read, but as i understand it many rolling code keys can be broken by recording three button presses while the keyfob is out of range of the car, then brute forcing the seed.)

Re:MicroPython on Flipper Zero by bongodongobob on Thursday September 19, 2024 @07:07PM (#41597266)
Basically yeah. You'd need millions of replays to even have a chance. Cracking basic wifi back in the day required a couple days worth of sniffed packets. I'd imagine this is similar, if there is in fact a way to do it.
Re:MicroPython on Flipper Zero by FridgeSeal on Thursday September 19, 2024 @07:27PM (#41597380)
Rolling code protocols like Keeloq can be broken pretty easily (apparently).