Тёмный

HACKING VEHICLES WITH THIS $20 RADIO!!! 

andy kirby
Подписаться 114 тыс.
Просмотров 357 тыс.
50% 1

In this video I talk about how criminals can steal your car using the latest vehicle hacking techniques!
EBIKE KITS
www.kirbebike.com

Авто/Мото

Опубликовано:

 

22 ноя 2023

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 866   
@timlc
@timlc 5 месяцев назад
It never ceases to amaze me that vehicle companies put so much time and expense creating such technologically advanced cars, but with a key entry system that is about as secure as a wet paper bag.
@DanielBulyovcsity
@DanielBulyovcsity 5 месяцев назад
Good for the market. The (ex)owner will buy a new one.
@BillAnt
@BillAnt 5 месяцев назад
It could be mitigated to a degree by reducing the range of both the car's and key fob's to say 20 feet. There's really no good reason to be longer than that.
@timlc
@timlc 5 месяцев назад
Or better still, simply just open the car door with the physical key. You have to walk to the car anyway so no time is lost! I guess it’s because even that is too much effort these days!
@DanielBulyovcsity
@DanielBulyovcsity 5 месяцев назад
@@timlc its kind of a big deal if you have kids and hands full all the time
@ThomasConover
@ThomasConover 5 месяцев назад
Well, as a software engineer with security as my main field; there are ZERO education in proper secure design of digital locks when you educate yourself as a software engineer at tech universities. Zero! But the entire world expect you to be a security genius as an engineer. So all these security-illiterate engineers end up being “creative” and make up their own horrendously bad security solutions that only keep themselves out. 😂 fun fact to scare you even more: 100% of all digital safe locks in the entire world can be opened with a factory master code. I know this particularly well, because I developed the world’s first tempest-certified timelock-system for civilian safe-locks to prevent illegal covert governmental level Abusive break-ins done by corrupt cops and corrupt intelligence agents targeting innocent civilian wealthy people. This project has been a big eye opener for me in many fields. The world you live in is not as secure as you might think it is. 😂👍❤️
@tonymagnier9846
@tonymagnier9846 5 месяцев назад
your videos are getting more and more informative and interesting as time goes on. I really look forward to your next videos especially these radio related ones. You've got great knowledge and know-how and you're teaching us all. Absolutely superb stuff!
@DavidW-nx2zs
@DavidW-nx2zs Месяц назад
Pity that the right- wing sometime mis-use it to push their agenda?
@andrewh.8403
@andrewh.8403 5 месяцев назад
I always say, if something is made more convenient for the punter, then it's even more convenient for the crook. Great vid. Love the kit.
@mikeselectricstuff
@mikeselectricstuff 5 месяцев назад
It's criminal that car makers don't put motion sensors in the keyfobs to disable them when sitting idle - would cost peanuts and eliminate relay attacks. Some makers ( VW I think) do some fancy time-of-flight stuff to check response time to prevent relay attacks.
@andykirby
@andykirby 5 месяцев назад
That would be a good solution.
@andrewnorris5415
@andrewnorris5415 5 месяцев назад
@@andykirby Stolen cars go to Africa etc. Insurance pays for a new one to go to the UK. Helps the car industry.
@johnharrison373
@johnharrison373 5 месяцев назад
​@@andykirbyFord do!
@C...G...
@C...G... 5 месяцев назад
good points, well presented! 👍
@lowfinger
@lowfinger 5 месяцев назад
Later BMW and Mini fobs have the motion sensor in the key, articles reference this around 2019.
@RonanCantwell
@RonanCantwell 5 месяцев назад
Nice one Sir. I'm writing this from the inside of -your- my Audi while listening to 20m on my new 7100 😉
@luckyguy600
@luckyguy600 Месяц назад
Crime does pay.
@m1cxf
@m1cxf 5 месяцев назад
I was always told that locks only stop honest people and if they really want it, they will take it. The only thing you can realistically do is to make it very obvious that it will be more difficult to take, these people don't like wasting time.
@JamesWilliam70
@JamesWilliam70 5 месяцев назад
yep i also use a steering lock as a visual deterrant even though i have an immobiliser and tracker.
@W8RIT1
@W8RIT1 5 месяцев назад
@@JamesWilliam70 sometimes a solution could be free, effortless, and relatively quick...pull the fuse for the fuel pump. Car won't go without any gas supply.
@Noksus
@Noksus 5 месяцев назад
Most often crimes are opportunistic. If your door is unlocked then there's a much higher chance of something being stolen versus them breaking a window to get in.
@SimonBlandford
@SimonBlandford 5 месяцев назад
Many years ago I was at a rave and wanted to get my coat because I was getting a bit cold. In in the state I was in, I managed to open three other Mini Metros before I got the right one. I still had the ultimate deterrent though: a car that no one would ever want to nick.
@ghostdog4330
@ghostdog4330 5 месяцев назад
Hey, it was good enough for Diana Spencer. :D
@juliogonzo2718
@juliogonzo2718 5 месяцев назад
There are only so many key cuts used. Probably with worn key or tumbler ones that are close might even work. They make "tryout keys" for automotive applications which are just a bunch of different key cut patterns. Sooner or later one of them will probably open the lock.
@laulaja-7186
@laulaja-7186 5 месяцев назад
… priceless! Taking that idea one step further, my old jalopy used to have a damaged battery connection. Not being familiar with the car, a thief would be unlikely to know that this “dead” car just needed to open the engine compartment and shove that battery connector back on to start.
@Bond2025
@Bond2025 4 месяца назад
Jesus, I had the ultimate anti-theft one, beige with rusty red fabric interior, HLS trim with a massive 1300cc engine. It was a good car in it's day as a first car, 155/65 SR12 tyres!!! ( I think). I had to replace the head gasket, went through numerous sets of front brakes, all 4 gas suspension units and connecting pipe at the rear, then the two radius arms "fell off" at the back and the rear bearings fell apart - it was a fun car, but also cheap to fix. The slimline 12band graphic EQ and 4x40Watt booster from Dixons and the Matsui 3 way shelf speakers were pinched and they left the car!!! I had even fitted a centre console with a radio, EQ and booster and tape holder in! They left my Ham International Multimode 2 that was under the switches on the right hand side, but broke the steering lock, surround and ignition switch as I think I disturbed them. The door lock had been "removed" or punched through in to the inside of the door.
@juliogonzo2718
@juliogonzo2718 4 месяца назад
@@Bond2025 well at least if you got a puncture you could likely find a new tire in the lawn and garden section of a store
@mikeh8416
@mikeh8416 5 месяцев назад
Easy (and effective) cure, hide a kill switch in the car to disable the starter. The only way the start button will work even with a relay attack is if they 1. KNOW about the kill switch, and 2. Know where it's hidden. They might still be able to GET IN your car, but it will still BE THERE when you go out the next morning. You COULD get even fancier and ad an alarm relay to the start button, that's active when the kill switch is on that will let you know someone is attempting to take it. Then you let your friends Smith and Wesson take care of the rest.
@88Danio
@88Danio 5 месяцев назад
Previous owner of my old audi installed a kill switch, that allows engine to start, and kills it after about 30-60 seconds with alarm, if you don't push a hidden button. It honks before to remind you. It starts working each time after closing any door, even if engine is already running. In case of carjacking it allows supposedly armed criminal to drive off, leaving you safe. I think it was banned some time ago, because of stopping engine while riding. One can still park with momentum though, it doesn't brake.
@laulaja-7186
@laulaja-7186 5 месяцев назад
Haha! The loose damaged battery connector in my old car used to serve exactly that purpose. Stealthy secret smart high tech kill switch.
@NightshiftCustom
@NightshiftCustom 2 месяца назад
so like a 2 way switch that sends the power to the horn every time they hit the start button instead of the starter :)
@greymann1384
@greymann1384 5 месяцев назад
Thats why i installed Trunk Monkey in my vehicle the only sure fire way to deter thieves from taking your vehicle. From the makers of Suburban Auto Group.
@rickysmith9284
@rickysmith9284 2 дня назад
Growing up I used to love trunk monkey!!!
@arthurtwoshedsjackson6266
@arthurtwoshedsjackson6266 5 месяцев назад
Had a faraday pouch. It worked for a bit but then it started to let the key fob signals through. So had an old tin , lined it with tin foil and that works 100%
@heatshield
@heatshield 5 месяцев назад
What brand was that? I would hate to get one, test it, be confident it worked then find out it degraded and wasn’t blocking.
@BitsofSkin
@BitsofSkin 5 месяцев назад
Your faraday pouch story is BS.
@DecentralEyes
@DecentralEyes 5 месяцев назад
But that won’t stop the transceiver attack !?
@MrToymod
@MrToymod 5 месяцев назад
@@BitsofSkinI keep my car keys under my foil hat!!.
@timesquare5473
@timesquare5473 5 месяцев назад
@@BitsofSkin No it's not mate, get up to speed.
@Hutchy1981
@Hutchy1981 5 месяцев назад
I highly recommend a good quality Faraday pouch. I'm a mechanic and use them when working especially on hybrid or electric vehicles as you don't want an engine to start when you've drained down the oil or your fingers are in there. And you really don't want a 900 volt EV coming online. I always check the ignition switch with the key in pouch within the vehicle to insure it can't be detected.
@Noksus
@Noksus 5 месяцев назад
You should disconnect high voltage lines before working on EVs.... as a mechanic you should know this.
@RTMunroe
@RTMunroe 5 месяцев назад
No reason to do a master disconnect to change the oil tho
@mjh5437
@mjh5437 5 месяцев назад
The word is actually "Ensure"...not "Insure" in this context...You`re welcome.
@Bond2025
@Bond2025 4 месяца назад
For anti-theft - Take the fuse out that provides power to the diagnostics socket, not many people carry a 12v battery about to power up their controllers and programmers. MOVE the diagnostics socket to a different location by extending the wires. Or you could replace the OBD2 socket for a completely different type, like an old parallel port connector off a computer (providing you have plug and socket) and make an adaptor with a plug and short lead going to the original socket. People trying to pinch the car would be going WTF! They would find some random connector and not have a clue which wire was which. You could also use a multi pin circular type. You can give the garage the small adaptor for services etc, then they can plug it in and put the OBD2 plug in the other part of it. Then I would fit a hidden switch connected up to one or more electrical circuits like the fuel pump and starter circuit. Anything to slow people down. Modern cars can be taken within minutes, even without keys. Sites sell everything people need apparently.
@gowerdave
@gowerdave 4 дня назад
@@mjh5437 *you're welcome. You used a 'grave' accent instead of an apostrophe.
@m1geo
@m1geo 5 месяцев назад
Our local ham repeater was moved frequency to avoid jamming cars! We've now got a new 9 MHz split, and we added a notch filter on the TX for 433.920 MHz (ISM band centre) to help.
@andykirby
@andykirby 5 месяцев назад
Haha that's interesting 😁
@Bond2025
@Bond2025 4 месяца назад
There were some MOD buildings blamed for blocking entire roads of garage door openers!
@Dave64track
@Dave64track 5 месяцев назад
A good video with some really good tips on how to help secure your car for those who didn't know about this.
@JaykPuten
@JaykPuten 5 месяцев назад
I miss the days of a slide hammer and screw driver
@Pyjamarama11
@Pyjamarama11 5 месяцев назад
I miss the days of the pillory
@C...G...
@C...G... 5 месяцев назад
a straightened out wire coat hanger! 👍
@k1ortia
@k1ortia 5 месяцев назад
​@@C...G...With the top corner of the door slightly bent... Apparently 😉
@journeybrook9357
@journeybrook9357 5 месяцев назад
Dang! 😂😂😂
@C...G...
@C...G... 5 месяцев назад
@@k1ortia yrs yes, bent out using a small plastic wedge... apparently! 👍
@Badboy365
@Badboy365 5 месяцев назад
Another great video. I have just purchased a brand new car today and will be having another Pandora alarm fitted asap. They are brilliant alarms but my installation can't be done straight away due to no free appointments. I purchased two Faraday cases from Amazon and they do work even standing next to the car. They are worth the £6 they cost for 2. But you can't beat the alarms.
@Bond2025
@Bond2025 4 месяца назад
The type of alarm you need is the one with the immobiliser that is programmed using switches in the car, so when you get in, to start it you pick a combination such as - left indicator, rear demister, right indicator twice and A/C button BEFORE it will then start the car! No one can guess the combination or start using OBD2 to get the info etc.
@lyfandeth
@lyfandeth 4 месяца назад
Andy, this was news ten years ago. The car makers all denied it. Then they formed a 17 manufacturer group to investigate solutions. That was over six years ago, and they've done nothing yet. Rolling code technology was in widespread use ten years before these hacks--but never used by the auto makers. Mercedes used to make at least one model where the key fob had to be inserted in the dash to start it, because that was a separate infrared coded system, like a tv remote.
@crazyham
@crazyham 3 месяца назад
Fantastic Info Mate. Just found ur channel thanks to Ringway Manchester 🙏 Cheerz from Down Under⚡🙏⚡
@DonzLockz
@DonzLockz 5 месяцев назад
Brilliant info. I think I'll go out street shopping for a new car tonight.😂 I didnt know of this antenna gain attack. My keys are far away from the car but I recently bought those pouches, I must try them out.👍🍻🤠
@HamRadioDX
@HamRadioDX 5 месяцев назад
Great video Andy and a nice demo again of the TinySA
@paulukjames7799
@paulukjames7799 5 месяцев назад
Security has come along way since a half inch vanity case key could open and start my Cortina from long ago
@LordGryllwotth
@LordGryllwotth 5 месяцев назад
I had a Peugeot 405 with a chinese lock, since previous owner lost the key. It had no steeringlock anymore, I could start the car with a coin.... I learned that when suddenly my keys fell to the floor when I was driving. I hadn't seated it far in enough to let some pin to hold the key in.
@ianmangham4570
@ianmangham4570 5 месяцев назад
A penny will open most old fords 😅
@bascomnextion5639
@bascomnextion5639 2 месяца назад
Any Cortina key seemed to open most other Cortina's
@GadgetAddict
@GadgetAddict 5 месяцев назад
I'm surpsied thag the custom firmware for the K5/K6 doesn't include a replay option
@Ms_Dana
@Ms_Dana Месяц назад
Greetings from the US , I have tested the faraday pouches and they do work. they make them with pocketbooks , purses and wallets as well to protect credit card chip readers as well. One thing I did is installed a aftermarket remote relay and put it on my fuel pump module b+ and hid it the the car so I can cut power to the fuel pump. so they might get in and start my car but its not going to drive anywhere and now the are sitting there with a disabled car and most likely want to flee very quickly . Next up , I think I will in addition cut power to the receiver if possible while leaving the alarm active ,so the car will not talk at all . One night my car was parked away from the cars in the supermarket parking lot and a couple of guys parked next to it . I remote started it which change the code on them and they seen me coming and drove off , that's what started this project for me . another min and my Corvette might have been gone.
@garychap8384
@garychap8384 5 месяцев назад
Presumably they could send a 'wake up' from the car to the fob to get the fob into an active mode thats ready to phase-lock the challenge signal, then issue a challenge and get a response with very predictable latency... the car could then use phase discriminator to ensure there's a direct path with no repeaters. Perhaps that's not reliable in the ISM, but it's surely possible at higher frequencies. Perhaps in the 23cm band and above. Demodulating and remodulating does take a little time and introduces phase shifts - so I'm sure this could be a valid thwart for relay attacks.
@Man-go-Everywhere
@Man-go-Everywhere 5 месяцев назад
This criminal jamming action is absolutely off the scale in South Africa. There is actually warning notices on all the walls of all the shop car parks . The crims are always looking to remove the car from your possession day or night.
@GapRecordingsNamibia
@GapRecordingsNamibia 5 месяцев назад
Yup, just said that to another person here who said Andy just taught the theives something new.... Some people are very ignorant in their little bubbles.
@theowink
@theowink 5 месяцев назад
Banana 🍌 people
@georgeclaase2898
@georgeclaase2898 5 месяцев назад
Car companies could use South Africa as a testing ground.
@callmetony1319
@callmetony1319 5 месяцев назад
The assailants from the 2021 "CIT video" from Pretoria were using cellphone jammers, that's why when Leo Prinsloo told his partner Lloyd Mthombeni to "phone Robbie, phone Josh", he couldn't get through.
@jimbotron70
@jimbotron70 5 месяцев назад
I bet especially some demographic group in particular does that...
@TheDivergentDrummer
@TheDivergentDrummer 5 месяцев назад
its worth noting that some cars with rolling codes are vulnerable to replay attacks so long as a valid code has been captured' and that code has NOT been seen by the vehicle. this is why jamming is so effective. By jamming the fob, and capturing the code, then letting the next code hit the car, the previous code is not marked invalid. so now, all that is left is to replay it. I personally lookup the fccid of a device first because that will tell you what frequency it works on.
@gtretroworld
@gtretroworld 5 месяцев назад
2:02 This gave me a giggle especially as you tickle your hood 😂…excellent video and very helpful to make folk aware..73’s
@boshaveit
@boshaveit 3 месяца назад
Im thankful my 2012 Audi doesn't have keyless ignition or keyless entry at this point, the key has to be in its hole in the dash for the car to start. Great video, very insightful.
@mikeselectricstuff
@mikeselectricstuff 5 месяцев назад
Your TinySA won't pick up the 125kHz signal from the car to the fob when you pull the handle
@mikeselectricstuff
@mikeselectricstuff 5 месяцев назад
You got the relay attack details slightly wrong. The car transmits on 125kHz, and it is this signal that is relayed to the portable antenna, The keyfob receives this and then replies on 433MHz, which has plenty of range to get to the car as it's also used for the keyfob pushbutton modes. The reasons for using 125kHz are that the range is limited and very predictable ( limited to area around doors and driver seat), and it can be received with near-zero quiescent power draw in the fob.
@andykirby
@andykirby 5 месяцев назад
I don't think that's correct as why would there be a challenge & response visible on the keyfob UHF frequency when you press the start/stop button? I do know my car also has a method to start it using RFID but you have to hold the keyfob very close to a section on the steering column in order for it to energise. Passive 125khz RFID has a super localised range of maybe 10cm, that's not what's being used here. I find it hard to beleive its possible to do a long range passive RFID scam because the transmission distance of the fob is so short, it could be possible thiugh, I have seen videos of thieves with a very large wire antenna. In my car though it is active RFID which is in the UHF range. Passive RFID I think is used in cars that have a physical key inserted into the ignition,, then that key by nature can be very close to a reader all the time as it remains in the ignition.
@mikeselectricstuff
@mikeselectricstuff 5 месяцев назад
@@andykirby What you are seeing when you press start/stop is the keyfob's 433MHz response ( possibly duplicated) Yes, normal car immobiliser keys are passive RFID but keyless entry systems are not - they use the same frequency but a larger antenna than the coil round the ignition key, and active receiver in the fob, which returns a signal via 433MHz UHF. 125kHz with a moderately high transmit power available from the car battery plus an active receiver in the fob can easily do a metre or so - cars typically have at least one antenna at each door & boot, and at least one around the drivers seat. The fob uses an inductive antenna (often 3 coils at right-angles to each other) tuned to resonate at 125khz, which can produce enough voltage directly from the received signal to wake the fob's control chip without any active receive power draw when idle. It is not practical to make a continuously-listening 433MHz UHF receiver running off a fob's coin cell - it would draw too much power for sensible battery life. The backup starting method does use conventional RFID - the chip in the fob can act as a passive RFID transponder if the battery is flat.
@andykirby
@andykirby 5 месяцев назад
Understood, useful information thank you.👍🏼
@honestlocksmith5428
@honestlocksmith5428 4 месяца назад
​@andykirby It's important to note that information on this topic can vary by manufacturer and by the function being performed. IE, opening the door using the fob vs starting the vehicle. There are some interesting vulnerabilities in fobs and the replay and relay attacks require zero understanding of the vehicles security system and only operational knowledge to carry out the attacks. Having said that, the popularity of the topic of car hacking is growing due to flipper zero videos. Once they know what people in my profession know, vehicle theft will be a lot worse.
@juliodefreitas157
@juliodefreitas157 5 месяцев назад
Thank you Andy, another great video 😂😂❤❤❤
@jimmyjames2303
@jimmyjames2303 3 месяца назад
A pad with a few thousand volts on the door handle is also an effective deterrent. Don't do it though - it's illegal (or make sure you have an effective way of disposing of the smouldering trash afterwards!). Thanks, Andy. Good tips.
@gadjetsvideo
@gadjetsvideo 5 месяцев назад
I think that the challenge from the car to the key is on a different frequency (150khz?) much lower and low power to limit the range to inside the car, the signal on the tinysa is the response from the key to the car. Also my Tiguan disables keyless unlocking by pressing lock on the key followed by a touch on the lock point on the door handle. VW have introduced a movement sensor in latest keys that put them to sleep when stationary for a period of time so they cannot respond to this type of attack.
@onlyeyeno
@onlyeyeno 5 месяцев назад
Thanks for an interesting and enjoyable video... Yet again we see "another" example of the eternal struggle between convenience and security... And as is almost always the case security looses out...... How much extra do I have to pay to make my car only open lock and start using the physical key ?? (and Yes I know that "key locks" can be easily picked, but I'd still prefer and trust it more in today's "climate") Best regards. :)
@robgibbsofficial
@robgibbsofficial 5 месяцев назад
Fantastic video mate - you should have your own TV show as well
@dannypaulread1023
@dannypaulread1023 5 месяцев назад
It does not matter when electronics always have the small bits to hack. Awesome video
@GapRecordingsNamibia
@GapRecordingsNamibia 5 месяцев назад
There is a specific auto gate manufacturer out here who's fobs are also able to block vehicle fobs from operating. I always, always stand at my car to check that it's locked, not only that, but, most modern vehicles are able to unlock only the driver side door without the others, a double tap opens the rest, I've had to educte people here as to why they should rather enable and that feature, if not, you may find yourself at gun point inside your car from an uninvited passanger...
@drewm7071
@drewm7071 5 месяцев назад
Everything that exists that was designed to be accessible in any way at all, is hackable. There are no exceptions.
@davidjowett8195
@davidjowett8195 5 месяцев назад
When these key fobs were first introduced there were many incident where car parks that house a 70cm repeaters had reports of cars being un-lockable because of the repeater. Silly frequency to choose for key fobs.
@andykirby
@andykirby 5 месяцев назад
I can see that totally.
@Ayrshore
@Ayrshore 5 месяцев назад
When Lothian and Borders police first went to Airwave, there was a spate of cars (Rovers and Metrocabs) that if switched off near the police HQ, wouldn't restart unless you towed them a mile or so away. Those used to use the alarm to immobilise the car, rather than the LF/RFID stuff that's the norm now.
@davidjowett8195
@davidjowett8195 5 месяцев назад
@@Ayrshore I can see that happening if there was an AW base station on the roof. Although in a different part of the spectrum, there would be enough power to swamp the basic receiver for the immobiliser.
@Ayrshore
@Ayrshore 5 месяцев назад
@@davidjowett8195 Exactly. The receiver in the Lucas stuff Rover Group used was garbage.
@Bond2025
@Bond2025 4 месяца назад
I used to get locked in and out of a Land Rover going to one PMR site in Wales, the RF was so strong on UHF it swamped the car!
@sailorgerard
@sailorgerard 4 месяца назад
My recommendation would be to keep the key fob in a lead container when not in use. But you have covered that with the metal box mentioned in your vid.
@merlin1346
@merlin1346 5 месяцев назад
This does not only apply to cars. I was fitting CCTV to my house and using a Baofeng uv-5r to call to the wife who was at the monitor to ask if it was aligned correctly, the radio knocked out the the recording box and had to be restarted each time...
@W8RIT1
@W8RIT1 5 месяцев назад
I suspect that was from a different issue, like RFI, just good ole plain interference....doesn't have to be on frequency, like lightning. That coax cable for the CCTV cameras acted like an antenna, especially for a "dirty" modulated radio like a Baofeng.
@CM-mo7mv
@CM-mo7mv 5 месяцев назад
maybe some interference, however you have to be also wary of deauthing on wifi CCTV.
@fongy200
@fongy200 Месяц назад
Empty Smash tubs are good for sheilding the signal of the fob. Although some foil under the lid as it's replaced gives total sheilding. I know it's messy but it works. My little lad made me one and decorated it. It's pretty cool really.
@twiz148
@twiz148 5 месяцев назад
I have a 2023 Kia Telluride and "I think" its beaten the odds. Yes, it has all of the vulnerabilities of the key fob you outlined...but only IF you use the keys...which I don't (they are stored in my home in a faraday box that I have tested and it works). . I put the digital key on my cell phone, which works just like a contactless credit card/RFID communication. So ultra short range and its only active when the key is displayed on the screen...which is even safer than credit cards which can be activated at any time if someone got close enough to you. The car unlocks when you have he key displayed on your screen and touch your phone to the door handle. To start the car, you have to place the phone in a certain position while the key is displayed and voila the car starts. Short of hotwiring the car (if thats still a thing) or breaking into my home and taking the actual keys that I never use, I don't see a way they could steal my new Kia Telluride...though I guess this is my chllenge to Andy to see if I am being overly bold in my positivity. :-)
@JohnBaxendale
@JohnBaxendale 5 месяцев назад
Great video, but I think you missed one of the attack scenarios - they will typically use something to block the signal, as per the start of your explanation. When doing that, they can then sniff the alarm fob when the person tries to unlock the car and store it for later (multiple unlock codes are valid at the same time). They will then follow the target vehicle and wait for it to be parked up and locked, then use the saved code to open the car. They then don't have to damage it and just need to get the car started.
@mjh5437
@mjh5437 5 месяцев назад
Criminals will be delighted to hear your advice......You think they don`t watch this stuff or what?
@JohnBaxendale
@JohnBaxendale 5 месяцев назад
@@mjh5437 I know about it because the criminals have been doing it for decades, I'm not teaching them something new 😂
@seanyem
@seanyem 5 месяцев назад
Andy, Are you a Paul Van Dyk fan ? Guessing by that ending song you've made, Yes... Love it... I want more 🙏👍👍👍👌
@darrenpash5077
@darrenpash5077 2 месяца назад
Hi ya Andy...what model is the radio you have an is it standard...?...is the spectrum display in the factory menu?.. P.s love the videos
@AndrewNeilBaird
@AndrewNeilBaird 5 месяцев назад
Fit an ignition switch from an old model on the steering column from an earlier audi , the steering shaft , and column assembly is the same , since you are only using the mechanical lock it is fairly easy .
@Equiluxe1
@Equiluxe1 5 месяцев назад
The faraday pouches do work or at least the ones I have from amazon, that I got four years ago when I got my vehicle. I also got a good quality steering wheel lock so any potential thief has to get past that in order to drive off. Just a few days ago I found that bluetooth can reach over 50 meters, I was at one of these parcel boxes at the local super market and had trouble with the QR code so rang the number, my wife was in the car and had the radio on and when I dialled the contact number I heard the phone ring from the car as my phone was still linked to the car even at 50 odd meters, so any car that uses a blue tooth app is really vulnerable.
@everettrantanen1732
@everettrantanen1732 5 месяцев назад
very interesting and informative video..keep up the great work!
@stephendonkin5497
@stephendonkin5497 5 месяцев назад
Great information Andy 👍
@jasonwalsh9211
@jasonwalsh9211 5 месяцев назад
Great video mate and quite an eye opener.... didn't know about the Bluetooth though 😮
@DinsDale-tx4br
@DinsDale-tx4br 4 месяца назад
Excellent video, My paranoia has just gone off the scale! :-)
@plmsdevelopments
@plmsdevelopments 5 месяцев назад
LOL, as an RF tech I was interested in the content, but the highlight was your ending track :)
@neilsawdon5756
@neilsawdon5756 5 месяцев назад
My old (06) Lexus fob has a inbuilt feature so that the transmitter signal can be turned off completely. initially designed to save battery power when not in use and nowadays makes a nice little security feature.
@hamshackleton
@hamshackleton 5 месяцев назад
A nice locking steel bar through the steering wheel helps, too, if they get in, they cannot steer it!
@flyingdoctor99
@flyingdoctor99 5 месяцев назад
or they cut the wheel and replace it for selling the car, or they just sell the parts. A steel rod on your steering is lost after at least 5 seconds
@timmack2415
@timmack2415 5 месяцев назад
A hacksaw and 20 seconds to cut the steering wheel takes care those. There is a hollow metal tube inside the steering wheel that is simple and easy to cut and the device slips right off. Your best bet is a hidden kill switch. It only costs a few dollars and 20 minutes to install. Cutting power to the ignition or the fuel pump won't allow them to start the car.
@dougtaylor7724
@dougtaylor7724 5 месяцев назад
When I leave my truck in a forest and backpack for a few days, the fuel pump relay is in the pouch with the keys. Takes 20 seconds to pull out.
@sw6188
@sw6188 5 месяцев назад
That was a good idea before the development of battery operated angle grinders with cut-off wheels. Those locks can be removed in a matter of seconds.
@montgomeryrichard
@montgomeryrichard Месяц назад
Always watch to see your indicators flash when leaving the car after setting the alarm. Fit an independent "Thatcham grade 3 alarm system" to the car your insurance will be lower and the car will not be able to be driven away. The alarm will also sound depending on how set up if the door is opened after a short delay if not disarmed separately. Even in a workshop very difficult to remove the alarm system even for an auto electrician talking hours!
@noname-jr9bk
@noname-jr9bk 5 месяцев назад
Many modern car key fobs use rolling code technology, which generates a different code each time the fob is used to unlock the car. This enhances security by making it more challenging for potential intruders to intercept and replicate the signal.
@laulaja-7186
@laulaja-7186 5 месяцев назад
A rolling code blocks sophisticated replay attacks yes. But the simpler idea is for the attacker to jam all remote locking and watch for those car owners who don’t check to notice that their remote locking attempt has failed. A rolling code doesn’t help in a simple jamming scenario.
@noname-jr9bk
@noname-jr9bk 5 месяцев назад
@@laulaja-7186 To prevent attackers from blocking car fob signals, manufacturers often implement anti-jamming technology in their keyless entry systems. This technology detects interference and adjusts the frequency or signal to avoid potential disruptions.
@JohnBaxendale
@JohnBaxendale 5 месяцев назад
@@laulaja-7186It doesn't really block them. The car has to have multiple codes active at once (else an accidental press of the button would mean the car and fob were out of sync and you'd no longer be able to unlock the car). Thieves know this and will jam the car so they can capture a working code (as you press the button multiple times to unlock it). They then let you open and drive away the car, follow you and wait for it to be parked - then replay the earlier saved code (which is still active in the car) and drive your vehicle off.
@demon33
@demon33 4 месяца назад
On VW with keyless entry, if you lock the car with the key-fob lock button, then touch the dimple on the door handle within 5 seconds, it disables keyless entry until the next time you unlock the car (using the unlock button on the key fob)
@PKhanz
@PKhanz 3 месяца назад
MBs newer key fobs deactivate after a few minutes and wake up with motion to help mitigate this. Also, MB fobs since the introduction of keyless entry have been bale to be "deactivated" by double tapping the lock button on the key fob. This puts the remote to sleep and will only strat to transmit once a button is pressed on the remote to activate it again. Unfortunately most owners dont know or utilize this second feature.
@NeverGiveUpYo
@NeverGiveUpYo 3 месяца назад
Nice content. Love the tinySA!
@Choober65
@Choober65 5 месяцев назад
It is possible to swap someones car too. You get a rental the same, swap the number plates and all contents with the target after getting a second set of keys made, and stuff the key under the dash. Any key will now start the car, and you report the car stolen. After a while the police will pull the person over and check the VIN which wont match so now the target has a LOT of explaining to do. Revenge.
@sondrayork6317
@sondrayork6317 5 месяцев назад
On our dodge caravan, you have to actually be pressing the button to get it to unlock. But this is scary though because even my baofeng uv5r could theoretically be used to jam the key fob.
@W8RIT1
@W8RIT1 5 месяцев назад
I've also seen a video of a guy hacking his own car...to learn and figure out the operation he was intending. He was able to control certain functions on his car remotely. He was using a SDR transmitting to his car's computer as if it were the car's TPMS Tire Pressure Monitor Sensor since it then communicated by wire to the car's computer. He had a friend drive his car slowly, like 10-15 MPH, while another friend drove another car pacing his car while he was a passenger using his laptop and SDR. He was able to do things like turn on the windshield wipers, turn the headlights on and off, etc. (not steering or braking)
@Bond2025
@Bond2025 4 месяца назад
This was all possible via the OnSTAR system in GM cars, once in to that you could do anything, so could the control room, law enforcement used to listen in on criminals cars and get GPS data. Cars could also be speed limited, have faults introduced and were ready for the Pay Per Mile system we are getting this year. The engine could also be shut off if the car was stolen and emergency services called if it crashed. Other makes have similar systems and it means law enforcement can bug you without going near the car. It used to only be done when the car was taken in for a service.
@glasslinger
@glasslinger 5 месяцев назад
Ah, my old 1988 Town Car with its old fashioned metal key!
@juliogonzo2718
@juliogonzo2718 5 месяцев назад
My work has a scrap yard. One day about a 92 towncar came in. Wasn't too rusty and had really nice condition leather interior. Person scrapped it after buying it due to the quote for the work required to pass a safety. They put the forks of the loader through the windshield before I saw it. Man I was pissed
@denisohbrien
@denisohbrien 5 месяцев назад
my 2003 bmw still has a metal key, but was the last, one year newer and they changed to the fob. p.s. love your channel.
@glasslinger
@glasslinger 5 месяцев назад
@@juliogonzo2718 If it wasn't wrecked and was complete that was a terrible mistake! Easily worth several thousand bucks!
@johnmknox
@johnmknox Месяц назад
When I was younger I used to have a tiny universal remote. It was designed for TV use. It had a useful feature where you could get it to turn on or off at the time you set or switch to a different channel. It could also learn the code from car key fobs which I tested and it worked. I think this must have been before they switched to changing codes each time. I might have bought it from the innovations catalogue or something like that.
@JehuMcSpooran
@JehuMcSpooran 5 месяцев назад
Very interesting. Seems to me like older cars that have rolling codes but the keyfobs don't receive a signal from the car are more secure. I always felt uncomfortable with cars that auto unlock when you approach them. My OCD makes me check the door handle multiple times so I know it's locked.
@rylanbrowne5658
@rylanbrowne5658 5 месяцев назад
Same
@AdrianC2006Uk
@AdrianC2006Uk 2 месяца назад
Also for rolling codes, they could capture the first signal while blocking it and the second press will send the first signal, keeping a spare in memory
@vanhoteen
@vanhoteen 5 месяцев назад
"If you are truly afraid, I recommend installing a switch on a data power cable for OBS. To prevent radio theft, use a disconnect switch on a starter fuse with a system that requires activation with a separate remote control or has a timer to deactivate that starter fuse during hours when you are at home or asleep."
@oldengineer464
@oldengineer464 5 месяцев назад
My motorcycle has "keyless" ignition just stand near it and the ignition/lock knob works. The keyfob has an on/off switch too, so simple.
@UpcomingJedi
@UpcomingJedi 2 месяца назад
Its amazing how Lursa and Baytor thought of finding your cars sheild frequency in star trek using a cheap visor that was also probably made in China
@thebugg333
@thebugg333 5 месяцев назад
Capturing a signal from a fob and replaying it may de authorize / unsynced you fob that may have a rolling key. You will need to take your key and get it reprogrammed...may need to get the car towed at a dealer also. Most of these attacks are for high valued cars.
@perkulant4629
@perkulant4629 5 месяцев назад
Faraday pouches work very well. The two I tried off Amazon at least.
@JustMeZero988
@JustMeZero988 5 месяцев назад
I've got a Kia and I have a remote for it. My key has to be in the car to start it and warns me if I get out of the car with the key and the engine is running. My car also has buttons on the door handles. so if I walk up to the car with the key on me, the interior light comes on, but the car doesn't unlock. If I press the button on the door, the car unlocks. This is the way i usually get in and out of my car. So would that device pick this up or would the button not be sending a signal? Hope this all makes sense. I'm also going to buy one of those boxes now to put my keys in when I get home so the signal won't get out.
@metahertzuk
@metahertzuk Месяц назад
Porsche keyfobs (at least newer ones) allow you to press lock and unlock together and a red light will flash. This will disable the transmitter on the key until next time one of the buttons is physically pressed, which is great for overnight at home etc.
@jamesmoore6424
@jamesmoore6424 5 месяцев назад
I had a car that you could remove the key from the door with the lock barrel not fully returned home, meaning it would Unlock with an ice block stick. But with our sort of gear could we not block multiple vehicles over a wide area? Then we can go into business selling car alarms that work😂!
@ALL_OUT_OF_BUBBLEGUM
@ALL_OUT_OF_BUBBLEGUM 5 месяцев назад
This is such crucial, interesting and easy to understand information, you tube will probably take it down.
@P.D674
@P.D674 3 месяца назад
Good video, I am not sure how a car remote works, when you press a button does it send a transmit frequency with a Tone code like ctcss ??
@mul555
@mul555 5 месяцев назад
I have tested a pouch, cant verify all on ebay wirk but the one i got does. Fairly low tech so youve been proper scammed if it doesnt work. Same with rfid blocking sleavea for cards, they work too. Rolling codes wise, Subaru's (used to, been a while since we i was researching this) incremened the code by one. You you could convert the transmission to binary then denary and workout the next cide easily.. or brute force from the code you caught very quickly.
@vzivadinovic
@vzivadinovic 3 месяца назад
Most cars can have wireless access and wireless ignition turned off by an OBD diagnostics tool. Then, only buttons for lock/unlock work, and to start the car, there is a special place in cars (check your manual) which is intended to be used in case of a flat battery in the key fob. You'd just put the fob on the designated spot and use the ignition button while holding it on that spot.
@johnharrison373
@johnharrison373 5 месяцев назад
Ford developed a key that goes to sleep if there is no movement of the key. Simple ideas are the best.
@brazoon1
@brazoon1 5 месяцев назад
Which firmware is that? I appear to have the same one but under the frequency number (when in scan mode) I don't have those three series of 4 digits. And it doesn't reliably lock in to my key fob signal. Either I have a slightly different firmware or I need more info on how to operate that particular firmware properly. lol
@railfanphill
@railfanphill 5 месяцев назад
I believe he's using the firmware labeled uv-k5-firmware-fagci-mod-v1.1.2-SSB-lite-test.bin
@brazoon1
@brazoon1 5 месяцев назад
Someone replied to my comment but you seem to be sh@dow banned or something as your reply isn't visible.
@NihilisticHatred
@NihilisticHatred 5 месяцев назад
Is this the uv5k?
@JamesWilliam70
@JamesWilliam70 5 месяцев назад
Thats why i have a dedicated secondary fob style immobiliser and a tracker + subscription and a few other visual items. In the driveway video, a faraday pouch would help.
@threeMetreJim
@threeMetreJim 5 месяцев назад
Moving the fob away from hanging behind the door would help too. The fob to car range is very short for automatic unlocking when you are by the vehicle. If you hang it behind the door (a common place) then forget to lock your door, that is just another way to have the car stolen; if you see videos of people police are looking for, trying doors on a street, it is likely that they are going for car keys rather than burgling while the occupants are home - more gain, less risk.
@laughing_gnome
@laughing_gnome 5 месяцев назад
If my key and mobile phone are close together, IE in the same pocket, and then the car will not start, so I always keep them close to each other when I am not using the car
@MsStevieWoo
@MsStevieWoo 5 месяцев назад
Leyton should have a sleep mode. It’s quite easy to implement. If you can have gyros on a drone FC & game pad then why not in a key fob!? Basically a few mins of inactivity and it’ll shut down its ‘request packet’ what do you think?
@ClickClack_Bam
@ClickClack_Bam 5 месяцев назад
Now what about my situation. I bought a used car (Crown Victoria Police Interceptor) & dunno if there was ever a remote used on it. Can I buy a scanner or something that will try codes in a brute force manner to see if there's a remote that was used?
@billyhatcher643
@billyhatcher643 5 месяцев назад
ive always been interested in short wave radios and other signals but it blows me away how any car can be easily hacked with these things
@Jaylen-zd8vz
@Jaylen-zd8vz 4 месяца назад
does it have to be a portable wifi repeater because it has to be turned on for the signal from the keyfob in the house to pick up and go to the signal on the wifi repeater? right
@rustledjammies8769
@rustledjammies8769 5 месяцев назад
If the frequencies are located within the 70cm Amateur Radio band, and you have a licence, it's technically not illegal to jam them, so long as you stay within your power limits and overlay a Morse signal of your callsign or an audio recording announcing it. Such devices will not be listed on the official band plan, so you could easily claim innocence, especially since not many people, including HAMs, know about this!
@jshoe1986
@jshoe1986 5 месяцев назад
Cheers Andy top notch info 👍
@utube1818
@utube1818 Месяц назад
Putting your keys in a metal box works really well, just don’t forget about the spare key. If you don’t want to keep it in the same place then wrapping it in a couple of layers of tinfoil works just as well.
@spr00sem00se
@spr00sem00se 5 месяцев назад
I moved to spain 15 years ago. First thing i did was put an alarm in my car. Now i find it amusing you need one. I ocassionally forget to lock the doors at night here and dont bother to get out of bed if i remember. I leave the shed door open most nights. Frequently go out for the day with the shed door wide open. There are some advantages to not living in a country full of hooligans
@dougtaylor7724
@dougtaylor7724 5 месяцев назад
I once visited a country town out in the middle of nowhere. We rode around with some girls. It was 1979. I forgot to lock my car. I said if we are going to be gone long, I need to lock my car. One of the girls said if you go back and somebody sees you walk over and lock the car and walk away the locals will take great offense. I should have moved there now that I think about it.
@spr00sem00se
@spr00sem00se 5 месяцев назад
@@dougtaylor7724 yeh i live in a small village, probably more like a hamlet, everyone know who everyone is, like there are literally 40 or 50 houses. I have padlocks on the shed doors etc, but I literally never shut them, theyre just there to give the appearance of being locked. I dont htink it would enjoy living in a city again .
@digitaldreamer5481
@digitaldreamer5481 5 месяцев назад
As a security specialist, I get calls from high end clients such as major hotels who seem to manage to lose 20 customer vehicles at a time and the fix is actually cheap and easy. I always recommend Mylar Ziplock baggies to put customers car keys and key fobs into once the vehicle is parked but getting their employees and business to use this effect tool is another story in itself, meaning, trying to get their valet parking attendants to use these Mylar baggies and tagging the outside of these baggies with the vehicle info is time consuming and I understand. So a real simple fix is rather ingenuous, just simply cut off the AC plug in cable from a discarded microwave oven seems to do the trick for most vehicle alarm systems so the vehicle and the key fob can no longer communicate with each other and can’t be triggered by pulling on the vehicles door handles either. Sometimes the solutions to big problems are rather simple. 👍
@honestlocksmith5428
@honestlocksmith5428 4 месяца назад
Just disable PKE in the infotainment system.
@digitaldreamer5481
@digitaldreamer5481 4 месяца назад
@@honestlocksmith5428 Would be good if it was on topic. I’m retired from government work and mostly do easy stuff in the private sector that makes a few more bucks. Nice try…
@jamesmoore6424
@jamesmoore6424 5 месяцев назад
Also have you done what I did when I got my first transponder key fob. It detects the fob when you test the locked door and promptly unlocks 🤣🤣🤣
@herbertaponte5884
@herbertaponte5884 8 дней назад
I see you have an attachment to the radio antenna. What is that?
@petermainwaringsx
@petermainwaringsx 5 месяцев назад
Andy, does the radio come with the spectrum screen or is a hack? Nice video, thanks for the upload.
@andykirby
@andykirby 5 месяцев назад
Thanks 👍🏼 It's a feature of Fagci firmware.
@daren_waters
@daren_waters 4 месяца назад
My car has keyless entry but it is disabled if the car is locked using the button on the fob. It can only be unlocked by pressing the unlock button. Surely others are the same?
@melvynburchell
@melvynburchell 5 месяцев назад
Andy - you need to beg, steal or borrow and review a HackRF + Portapack! What the Flipper gains in portability the HackRF surpasses in flexibility. I just know that this beast would be right up your street! Of course I would never condone illegal use of these but it is scary that a modern day "coat hanger" could be as effective if not more so - education is the key here as it empowers owners to become more aware and take precautions where possible. P.S Yes Faraday cages do work at medium range.
@Bond2025
@Bond2025 4 месяца назад
You still can't do much with the HackRF and Portapack, it's just a Flipper on steroids.
@markwilliam3162
@markwilliam3162 5 месяцев назад
Another interesting update cheers Andy
@jakep5121
@jakep5121 5 месяцев назад
This felt like a behind the scenes of a real life Gone in 60 seconds.
@W8RIT1
@W8RIT1 5 месяцев назад
Try 30 seconds. Watch this YT video of 2 car thieves stealing a Mercedes with a SDR. ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-KlFPInFxjvY.htmlsi=QYjSkM72TpCtfuoK
@PaulMc-qn7iv
@PaulMc-qn7iv 5 месяцев назад
Love the vids and tunes lad...is there anything you cant do?? Where can u buy this for 20 quid ??
Далее
как это быть басистом?
00:50
Просмотров 127 тыс.
THE RISE OF THE PRIVATE MESSENGER - BUT DO THEY WORK?
15:26
THE MOST ILLEGAL CB RADIO EVER!!?? | QUANSHENG UVK58
11:46
We Stole a Tesla with this $20 Device
11:49
Просмотров 3,1 млн
6 Must-Have Security Gadgets That Fit in Your Pocket
9:03
I Hacked Into My Own Car
20:29
Просмотров 2,7 млн
10 ILLEGAL GADGETS YOU CAN BUY!
9:02
Просмотров 3,5 млн
KNOW THIS ABOUT THE FLIPPER ZERO...
12:32
Просмотров 267 тыс.
Разбил лобовое стекло! 😱
0:20
Просмотров 2,5 млн
G class vs GT43
1:01
Просмотров 2 млн
RedRushCar #тюнинг #приора #неон
1:00