- cross-posted to:
- [email protected]
- [email protected]
- becomeme
- cross-posted to:
- [email protected]
- [email protected]
- becomeme
Canada to ban the Flipper Zero to stop surge in car thefts::The Canadian government plans to ban the Flipper Zero and similar devices after tagging them as tools thieves can use to steal cars.
And you need additional hardware and custom firmware. Then you have to GitHub that shit into the flipper.
Most people think it works like Dr. Who’s sonic screwdriver. Just press a button, wave it around and voila! You’re in the NSA database.
Signal playback doesn’t require anything extra. I love that their docs have a giant warning to not use it on new cars though.
Isn’t that because it can desync the actual keyfob?
Nvm… Clicked the link. That’s exactly why you shouldn’t do that.
That is my understanding and why I haven’t ventured into that area with my personal vehicles yet.
Ah, so the cars still have shitty security implementations, only now it’s in the direction of “car needs service if someone tries to playback a previous signal”.
Though how does it work when you hit the button while out of range of the car?
It should be each fob has a private key that is used to generate a cryptographic hash of a random challenge string. Or hell, even give a rolling code a sequence number so they the car and fob can resync if necessary (I don’t think this would break the security, since the sequence could be started at a number other than 0).
That sounds dangerously close to an open standard that would prevent charging $500 for key fobs.
Any open standard can be tweaked slightly to make it a closed propriety one!
Though I do wish open standards were enforced for cars. Instead of each car/platform essentially being a mini monopoly that third parties need to design for specifically if they want to compete.
If their gizmo can fuck up real keyfobs, that too is a failure by car companies.
Your threat model should include a radio-frequency YakBak.