Notices
C6 Corvette ZR1 & Z06 General info about GM’s Corvette Supercar, LS9 Corvette Technical Info, Performance Upgrades, Suspension Setup for Street or Track
Sponsored by:
Sponsored by: Kraken

[Z06] Key FOB Scanner Threat

Thread Tools
 
Search this Thread
 
Old 11-09-2007, 10:09 PM
  #1  
O7zeeO6
Racer
Thread Starter
 
O7zeeO6's Avatar
 
Member Since: Aug 2006
Location: Northern VA District of Columbia
Posts: 437
Received 0 Likes on 0 Posts

Default Key FOB Scanner Threat

I'm in the Information Technology field and currently taking my masters in the field. One of my instructors mentioned about this threat that I've never hear of before, and I just thought I might want to share it to everyone in the CF.

Apparently, there is this scanner that scans frequencies given out by key FOB's and once this is stored, then all it has to do is to emit the same frequency thus giving access to whatever the key FOB was able to do.

The scenario how this will be implemented is a person with the scanner approaches a person which he knows has the keyless entry FOB in his/her possession and while keeping the owner pre-occupied the scanner goes to work.

My question is, is GM or anyone aware of this, if so what is being done about it?
Old 11-09-2007, 11:02 PM
  #2  
OregonC6
Le Mans Master
 
OregonC6's Avatar
 
Member Since: Nov 2005
Posts: 5,835
Likes: 0
Received 6 Likes on 5 Posts
Default

well, this is one reason they invented car theft insurance.
Old 11-09-2007, 11:47 PM
  #3  
mousecatcher
Melting Slicks
 
mousecatcher's Avatar
 
Member Since: Sep 2006
Location: San Mateo CA
Posts: 2,173
Likes: 0
Received 0 Likes on 0 Posts
Default

it is a known problem. almost all wireless technologies are susceptible to this kind of attack.
Old 11-10-2007, 12:05 AM
  #4  
O7zeeO6
Racer
Thread Starter
 
O7zeeO6's Avatar
 
Member Since: Aug 2006
Location: Northern VA District of Columbia
Posts: 437
Received 0 Likes on 0 Posts

Default

So I guess there is no counter defense against this threat, and we just hope that the crook operating in the area doesn't have this equipment?

I'm not sure if the convenience of not having to insert a key to the ignition or the door is worth this trouble. I would hate to find my car missing and my insurance will not cover the damages since no forced entry is discovered, thus I have to suffer from all the consequences.

Is there a way to dis-able the FOB and replace it with a remote control key?
Old 11-10-2007, 12:09 AM
  #5  
bgrant_12002
Instructor
 
bgrant_12002's Avatar
 
Member Since: Jun 2003
Location: Somewheres in FL
Posts: 158
Likes: 0
Received 0 Likes on 0 Posts

Default

I'll bet you could use one of these keychain remote controls (cat rc-11) from all electronics , like people are using to control the butterfly valve in the exhaust, but use it for the starter. Seems like maybe a forum member posted this earlier......so it's not my original idea.
Old 11-10-2007, 12:18 AM
  #6  
dgdoc
Burning Brakes
Support Corvetteforum!
 
dgdoc's Avatar
 
Member Since: Jun 2005
Location: MD
Posts: 1,114
Likes: 0
Received 0 Likes on 0 Posts

Default

While it is possible to build a scanner/detector/transmitter to do this, it's not quite as easy as you stated.

The RF locking systems used by GM and others are more complex than simply emitting a single frequency and presto, the doors are unlocked, etc.

Let's leave it at that rather than expose any more details.

Hope you sleep a little better....
Old 11-10-2007, 12:20 AM
  #7  
O7zeeO6
Racer
Thread Starter
 
O7zeeO6's Avatar
 
Member Since: Aug 2006
Location: Northern VA District of Columbia
Posts: 437
Received 0 Likes on 0 Posts

Default

Originally Posted by bgrant_12002
I'll bet you could use one of these keychain remote controls (cat rc-11) from all electronics , like people are using to control the butterfly valve in the exhaust, but use it for the starter. Seems like maybe a forum member posted this earlier......so it's not my original idea.
It is more than just a remote control. It scans the frequency that the FOB emits without the knowledge of the owner, then mimics it sot hat the car's computer thinks it is the FOB.
Old 11-10-2007, 12:56 AM
  #8  
ayousef
Drifting
 
ayousef's Avatar
 
Member Since: Feb 2007
Location: Dubai
Posts: 1,961
Likes: 0
Received 1 Like on 1 Post
Default

people are not that smart in Dubai, so were on the safe side I guess lol.

You made a good point though!!
Old 11-10-2007, 01:02 AM
  #9  
crease-guard
Drifting
 
crease-guard's Avatar
 
Member Since: Jul 2004
Location: Plano Texas
Posts: 1,527
Likes: 0
Received 2 Likes on 2 Posts

Default

Originally Posted by O7zeeO6
It is more than just a remote control. It scans the frequency that the FOB emits without the knowledge of the owner, then mimics it sot hat the car's computer thinks it is the FOB.
As stated before, it's more complex than emitting a single RF frequency and being able to scan and then reemit said frequency. It's not that simple in these systems.

Jay
Old 11-10-2007, 01:10 AM
  #10  
O7zeeO6
Racer
Thread Starter
 
O7zeeO6's Avatar
 
Member Since: Aug 2006
Location: Northern VA District of Columbia
Posts: 437
Received 0 Likes on 0 Posts

Default

Originally Posted by crease-guard
As stated before, it's more complex than emitting a single RF frequency and being able to scan and then reemit said frequency. It's not that simple in these systems.

Jay
I understand its not that easy and simple. But the bad part is, this equipment exist, so don't be surprised if your car is not where you left it, that's all.
Old 11-10-2007, 01:50 AM
  #11  
Shark Racer
Race Director
Support Corvetteforum!
 
Shark Racer's Avatar
 
Member Since: Jan 2000
Location: San Jose CA
Posts: 12,399
Received 241 Likes on 200 Posts

Default

Originally Posted by O7zeeO6
I understand its not that easy and simple. But the bad part is, this equipment exist, so don't be surprised if your car is not where you left it, that's all.
Don't waste your time putting on the tin foil hat, you better get to the garage and keep an eye on your car, mang.
Old 11-10-2007, 10:16 AM
  #12  
J HEBERT
Drifting
Support Corvetteforum!
 
J HEBERT's Avatar
 
Member Since: Dec 2006
Location: Down on the bayou La.
Posts: 1,665
Likes: 0
Received 1 Like on 1 Post
Default

I have been in the Locksmith/safe field since 1986, yes, the equipment exists......anyone w/ access to it (let alone OWN it) already makes enough money to stay honest and not steal your vette
Old 11-10-2007, 10:49 AM
  #13  
AtlBlkZ06
Drifting
 
AtlBlkZ06's Avatar
 
Member Since: Jan 2007
Location: Norcross GA
Posts: 1,854
Received 2 Likes on 2 Posts

Default

For every security system, there exists a way to defeat it.

The point is to increase the workload required to exceed the threshold of the target group that might steal the car.

As a thief, with that level of technology in my hand, I'd rather go after Porsches and Ferraris, not measly <100k Vettes.

I'd be more worried about damage from lawn mowers, and hail, rock chips flying on the road, acid rain, kittens on the hood....hell just enjoy the car already
Old 11-10-2007, 11:05 AM
  #14  
fiveodude
Burning Brakes
 
fiveodude's Avatar
 
Member Since: Nov 2003
Location: Dallas Texas
Posts: 773
Received 2 Likes on 2 Posts

Default

Exactly...Gathering a frequency is simple. You can pick up a frequency scanner for $10. Knowing the encryption/decryption algorithm is another story. It's just like capturing encrypted IP packets....(SSL)..I can capture them, but depending on the encryption strength, it might take years to dicipher....
Old 11-10-2007, 11:19 AM
  #15  
Foosh
Team Owner
 
Foosh's Avatar
 
Member Since: Oct 2004
Posts: 25,434
Received 16,667 Likes on 8,311 Posts

Default

Originally Posted by fiveodude
Exactly...Gathering a frequency is simple. You can pick up a frequency scanner for $10. Knowing the encryption/decryption algorithm is another story. It's just like capturing encrypted IP packets....(SSL)..I can capture them, but depending on the encryption strength, it might take years to dicipher....
It could be worse. A hacker could gain access to your PC and steal your identity. Stealing my key fob frequency code is a rather minor worry in comparison.
Old 11-10-2007, 11:37 AM
  #16  
carnutsx2
Racer
 
carnutsx2's Avatar
 
Member Since: Jan 2006
Location: Tacoma WA
Posts: 368
Received 22 Likes on 12 Posts

Default

typically security systems use a rolling code- it just doesn't send the same signal back that was the technology used in the 80's. With the increase in popularity of security systems and the lack of bandwidth to create multiple channels manufactures came up with a security system that sends and encrypted code and most will go into a lock down mode if they see the same code repeated or a rash of wrong codes. For years there have been wives tales about scanners or code generators the just run through all codes from A to Z . Bottom line is if a person were that smart they would be hacking computer systems. Car theft is a lot of work and most thieves are lazy hence there chosen profession. In my area most car theft is from drug users- if they had an expensive scanner they would have sold it long ago for meth.

Its the rock ,crow bar and a roll deck truck you need to be afraid of.
Old 11-10-2007, 11:45 AM
  #17  
TeddyFreddy
Drifting
 
TeddyFreddy's Avatar
 
Member Since: Dec 2006
Location: Toronto Canada
Posts: 1,526
Likes: 0
Received 0 Likes on 0 Posts
Default

A simple scanner won't do. There is strong encryption involved and it takes lots of time to decrypt the codes.
Discussed previously here:
http://forums.corvetteforum.com/show....php?t=1799813

Get notified of new replies

To Key FOB Scanner Threat

Old 11-10-2007, 12:57 PM
  #18  
z06Bigbird
Safety Car
 
z06Bigbird's Avatar
 
Member Since: Jan 2007
Location: San Antonio Texas
Posts: 4,300
Likes: 0
Received 4 Likes on 2 Posts
Default

Originally Posted by ramsundaram
For every security system, there exists a way to defeat it.

The point is to increase the workload required to exceed the threshold of the target group that might steal the car.

As a thief, with that level of technology in my hand, I'd rather go after Porsches and Ferraris, not measly <100k Vettes.

I'd be more worried about damage from lawn mowers, and hail, rock chips flying on the road, acid rain, kittens on the hood....hell just enjoy the car already
Do a search here or on Google for stolen catalytic converters. $100 a pop. 10 minutes per converter; trucks are simple because they are elevated; this is great time of year for converter thieves because there are numbers numbers of cars in parking garages, malls, churches, etc.

2 per day, 5 days per week, $100 each = $1,000 per week. $50k yr
4 per day, 5 days per week, $100 each = $2,000 per week. $100k yr
10 per day, 5 days per week, $100 ea = $5,000 per week. $250k yr

Not bad for part time job. (Junk yards pay about $100 each.)

Less risk than selling lux cars.
Old 11-10-2007, 02:35 PM
  #19  
O7zeeO6
Racer
Thread Starter
 
O7zeeO6's Avatar
 
Member Since: Aug 2006
Location: Northern VA District of Columbia
Posts: 437
Received 0 Likes on 0 Posts

Default

Originally Posted by TeddyFreddy
A simple scanner won't do. There is strong encryption involved and it takes lots of time to decrypt the codes.
Discussed previously here:
http://forums.corvetteforum.com/show....php?t=1799813
Thanks for pasting this thread. It is a more realistic assessment of this threat which is much better than hearing a general claim regarding the issue.

From what I'm hearing so far, this is not yet a widespread problem in the Corvette community, thus GM probably will not spend any of its resources to try to stay ahead of these car thieves. I'd hate to be part of the statistics figure before GM is forced to develop a security upgrade. The price to get one of these sophisticated scanners is probably keeping them exclusively to those thieves who goes after more expensive cars, like the new ZR1 for example. But I think that its only a matter of time when these will become more available and affordable as the number of cars with keyless security increases since as with all prices of technology dependent equipment, they will only get cheaper with time.

The intent of this thread is definitely not to incite any kind of panic or make people worry, as some members seem to imply. I'm just trying to understand what the level of the real threat is and not over react to a news due to lack of understanding it real implications.

Although it is true that no car can be made theft proof, animal instincts dictates that with all other variables being alike, things which are easier to steal will have higher chances that it will be stolen. Knowing the existence of such security threat, installation of additional security devices might then be warranted to mainly serve as a theft deterrent by making it a "harder target," causing car thieves move to "softer targets" as we call it in the military.
Old 11-10-2007, 03:31 PM
  #20  
fstyloz
Racer
 
fstyloz's Avatar
 
Member Since: Jun 2007
Location: Westminster CO
Posts: 294
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by OregonC6
well, this is one reason they invented car theft insurance.
In addition to my regular policy I have full coverage by Smith & Wesson


Quick Reply: [Z06] Key FOB Scanner Threat



All times are GMT -4. The time now is 02:06 AM.