The CRV is reasonably secure, so this means the thieves are actually very organized and have technical know-how to steal the cars? Or do they simply load the car into a flatbed and drive away?
The doors can be unlocked using a relay attack done with off the shelf radio gear. Once the doors are open a new keyfob can be paired to the car using more off the shelf tools and another relay that makes the car think the owners fobs are in the vehicle. The whole process takes 5 minutes and can be done by an unskilled person. I have video of the whole process happening in my driveway.
And I am not saying that proprietary tools are the answer. Requiring literally ANY user interaction with the keyfob to unlock the door OR when pairing new fobs to the car would prevent the majority of thefts. Requiring the manufacture to digitally sign fobs when pairing to a car would prevent this. Given that ALL of these vehicles come with wireless communication, whether it is enabled for you or not, having a remote disable would prevent stolen vehicles from being moved around.
Whether by ignorance or cost cutting Honda is 100% responsible for the complete lack of security features on their vehicles.
The doors can be unlocked using a relay attack done with off the shelf radio gear. Once the doors are open a new keyfob can be paired to the car using more off the shelf tools and another relay that makes the car think the owners fobs are in the vehicle.
Aren’t basically all cars in the market like this? Which mass produced car models are currently not susceptible to relay attack? Why does the thief target CRV specifically if they have tools that can steal other cars as well?
The whole process takes 5 minutes and can be done by an unskilled person
Where did that unskilled person get the necessary tools to learn this stuff? The tools to reprogram new fobs are probably expensive and mere thugs probably won’t spend their money to buy one themselves. This seems to indicate a presence of underground organized crime rings that go around recruiting people to steal cars for them.
The CRV is reasonably secure, so this means the thieves are actually very organized and have technical know-how to steal the cars? Or do they simply load the car into a flatbed and drive away?
The CRV has dogshit security.
The doors can be unlocked using a relay attack done with off the shelf radio gear. Once the doors are open a new keyfob can be paired to the car using more off the shelf tools and another relay that makes the car think the owners fobs are in the vehicle. The whole process takes 5 minutes and can be done by an unskilled person. I have video of the whole process happening in my driveway.
And I am not saying that proprietary tools are the answer. Requiring literally ANY user interaction with the keyfob to unlock the door OR when pairing new fobs to the car would prevent the majority of thefts. Requiring the manufacture to digitally sign fobs when pairing to a car would prevent this. Given that ALL of these vehicles come with wireless communication, whether it is enabled for you or not, having a remote disable would prevent stolen vehicles from being moved around.
Whether by ignorance or cost cutting Honda is 100% responsible for the complete lack of security features on their vehicles.
Aren’t basically all cars in the market like this? Which mass produced car models are currently not susceptible to relay attack? Why does the thief target CRV specifically if they have tools that can steal other cars as well?
Where did that unskilled person get the necessary tools to learn this stuff? The tools to reprogram new fobs are probably expensive and mere thugs probably won’t spend their money to buy one themselves. This seems to indicate a presence of underground organized crime rings that go around recruiting people to steal cars for them.