So how easy is that?

Mar 08, 2025 Last reply: 1 year ago 28 Replies

Local Police report of car theft initiated by *recording* the key fob signal!


The days of fobs transmitting the same code over and over each time are gone, now the recording is of the rolling code, it needs to be used within a certain number of codes the car is expecting from the real fob.

This guy demonstrates it using a laptop on his own car, there are several pocket sized software defined radios that can do that, an example in the headlines is a FlipperZero.

formatting link
<https://flipperzero.one>

I doubt it's that secure. That would cost money.

Hmm. I don't suppose anyone would bother stealing our 12 and 15 year old cars anyway. Perhaps we could return to key entry/ignition or is that difficult?

>

Rolling codes are common on top end models, which are probably the main targets. However, even the simplest versions have a 256 code memory, so there is a fair bit of time in which to use a stolen code.

My 19 year old car has developed a leak that I can't trace, and it would be quite convenient if it were stolen!

Very common. The most vulnerable are fobs which transmit periodically for the purpose of unlocking the car when the owner is near.

When the key is in the house, it may transmit far enough to be detectable outside the building, from where a more powerful re-transmission unlocks the car.

It's *such* a pain to actually have to press a button to unlock the car...

Along with touchscreen controls and not having a spare tyre, keyless entry is on my list of anti-features for cars I will not buy.

Well no, not once the software is written, it wouldn't. And honestly, its not that hard to write that sort of code. I've got a PIN sentry one time code generator for banking, and that is essentially doing something very similar.

Just about any $0.50c microcontroller has the capability to do that.

And it becomes effectively a 'shared secret' encryption between the controller and the door lock computer.

Now of course disassembling or reverse engineering it is something that can be done given enough resources, but the average thief doesn't have those resources.

They would be on my list too, but I suspect that it's getting hard to near impossible to find a new car that doesn't have all these anti-features.

As its a rolling code, you need to record the code from the key, but prevent the car receiver from receiving it. If you can do that you can then open the car...

Dave

Assuming there is no challenge-response time situatron

But how to you record a code that doesn't get to the car?

If you have the fob, then you don't need to, and if you don't, why would anyone press it when they couldn't actually open the car?

You use social engineering....

Dave

My (7 year old) car has keyless entry - backed up by an old fashioned lock in the door handle (you have to remove something to discover it), which is operated by a key hidden in the fob.

Isn't that the norm?

P.S. I do have a full-sized spare tyre - I specified that before agreeing the purchase.

Do you still have to press the fob to unlock?

With "keyless" entry you keep the fob in your pocket and as long as you're close enough, you just grab the handle and open the door, no need to touch the fob.

I don't actually like that. On upmarket models of my car that is a programmable option. I dont have it

You _can_ do that, but I never do.

Yes that's it - except there is a small button on the front door handle(s) which has to be pressed.

Davey wrote: ... snipped

... snipped

BMW only started making cars in the previous year so they probably hadn't got the tech sorted properly by 1917 ;-)

electric handbrake, or that lever between the front seats ?

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required