Our state media CBC pointed at the Flipper, so I ran to Amazon strait away and now the price has nearly doubled. Bought horse paste too before it was banned. Oh, and Azov battalion T shirt with n@tzi symbolism before Amazon pulled the plug.
"Let's come up with something to appear as if we're doing something while not doing really anything." That is always what happens if you give populists your pinkie finger.
For any "panic", politicians will look for anything, regardless if it will actually do more harm than good, so they can to be able to claim they are "addressing the problem".
"'course, one of the best things we can do to prevent auto theft is prevent those thefts from happening in the first place" so to prevent auto theft we should prevent auto theft, Trudeau really does have a way with words doesn't he?
Did Trudeau just say at 0:24 "one of the best things we can do to prevent auto theft is prevent those thefts from happening in the first place"? Not sending their best
Something wrong with him. The clip of him playing felt like i was watching a deepfake, but that's just how he talks. Don't sociopaths have to learn how to act like a regular person?
how about we stop banning the devices to detect specific vulnerabilities and fix all those known vulnerabilities??? like, what is the canadian gov doing
banning the flipper zero just because it "can be used for stealing cars" is like banning matches because they can burn buildings down sometimes in specific scenarios because the building is old and doesnt have any protection against fire
You couldn't be anymore right, you can still buy a raspberry pi and bladerf in Canada, but I guess most criminal don't possess the technical aptitude needed to deploy those devices, and honestly for some cars you can just use a slim jim to get in.
@@improvisedchaos8904 True, if you had to assemble all your guns and socialize with gunsmith clubs to build and own, guns would be seen as status symbols rather than indiscriminate tools, [insert spiderman quote].
@@dertythegrowerHis account itself is 14 years old. Given how late I created a google account (and I am 21), I can imagine his being nowhere near a "kid"
My front door lock on my house is broken so I am using a piece of string to keep it locked. The other day someone broke into my house, presumably using a pair of scissors. I have contacted the government and now they are banning scissors, I feel so much safer!
Best way to explain them to a security novice is perhaps to use the example of the one time passwords sent out when we log in to something with 2FA. It's not quite the same, because with rolling codes the codes exist in advance, but it's a good way to get the idea across to a novice. For anyone who understands paper based cryptographic security protocols just say that it's like using one time pads, only the two copies are held electronically not on pads.
@locksmith5428 yeah so how these dumb car keys work is they send a 'secret' signal for the car to open. However the problem is a thief could just record this signal, and then replay it. This is why the car key should send a different signal every time, and if the thief records and plays that, the car has remembered that it already has seen the signal before, so it doesn't open. But you might think the car thief could just modify the signal himself? No! That is the tricky part, the key can prove that it is him talking. It's like when you sign something in real life, it is hard for someone else to replicate. But this digital signature, is not just difficult to replicate, it is actually impossible to replicate due to cryptography.
for government every thing that has some basic mathematics ( +, -, *, / ) is hard for them to regulate, so anything of engineers or mathematicians is for banning purposes for them.
@@TheAwillz maybe the fact that we've been having the same car security system since the early 2000 and it can be bypassed just by thinking about it hard enough
@@genkugames9616 yeah that’s common knowledge. The op implies “a something else” as I read it at least. Just asking what that would be specifically. But writing this out I sound like a fed sooooooooo yeah
How did no one tell them that flipper zeros aren't the problem? Surely they must speak to someone who knows what they are doing before blanket banning anything, right?
Pretty sure they know, they’ve probably did some sort of research on this even if just opening google and typing it. They just want to point a finger at something so people would start talking about a different subject rather than their own failures.
They're just responding to the public outrage the Flipper Zero has generated, the politicians involved likely know better but they also know that this is a way to get easy points with the crowd that's perpetually scared of what young people are doing online.
Nope, they ban things to show that they are taking steps to progress (without addressing the actual issues) and to remind people that they are in charge and can ban anything they want.
if you're gonna ban the flipper zero, a device used to intercept or create (network) packets, you might as well ban all sorts of tech since any generic old laptop you have in your garage can do the same thing
thats the dumbest take you could possibly have on this. its very well established that making certain things illegal makes them harder to get for criminals too. not in all cases if theres widespread legitimate use for them like drugs, but definitely in the case of totally nonessential things like guns and certain hacking tools. while this ban specifically was moronic, the principle of banning things in general isn't
@@lilyk3734you wasted you're time typing this when Surrey and the DTES exist. I could go across the bridge and purchase a glock it I really wanted to. Repeat with me, "criminals don't follow laws". Treadeus' ass backwards laws affect the law abiding citizen more than the criminals.
Obviously the govt is incompetent, but you are technically allowed to own one, you just can't use it, nor will it be allowed to be shipped into the country anymore.
5:05 0000, 1111, 000000, and 111111 are common default passwords on a lot of PLCs AND HMIs. 😉 There are some variations of these but these are the most common in my experience.
Yeah and more often than not you can find the default password in the manual which is freely available online. That's how I hacked my high school's network.
First? I think you mean "most recent" step, as they've been on this marathon for decades now. Only just now have the general public started to become aware, and it goes much further than you think.
Facts man. I don't care about the warranty it's fair if they remove it from us rooting but just let me do whatever I want for god's sake. Some companies really are annoying, especially with rooting ngl.
I'm a network admin and I use my flipper all the time to scan for vulnerabilities and head off weaknesses I find in our door systems, etc. Plus I can pull it out and change the channel at the restaurant during lunchtime. Turning off "The View" should be seen as public service IMHO.
The thing is: The flipper is one of the most overpromised devices ever. You can’t crack a car with it. It’s not even real hacking. 😂 They banned a toy.
@@nikkimcdonald4562 It is mostly a software defined radio that can send and receive signals, record/replay them, and break some known bad encryption schemes that should never be used anyway.
@@nikkimcdonald4562Mostly cybersecurity enthousiasts or amateurs. Small proof of concepts. Pentesting against common attacks that shouldn't be possible in the first place. Diving in the security rabbit hole makes you realize how easy it would be for someone to just lock pick your front door open. Flipper Zero does make you have the same realization but for digital remote communication.
As a Canadian, this is a bit silly because it's effectively an older Raspberry Pi with a very small handful of extra parts added, but none of that was banned and still comes in fun user-friendly kits
So basically, what they effectively do, even if unknowingly, is gatekeeping hacking as an activity, by restricting accessibility. Enthusiasts who could grow into valuable infosec specialists, are either being held away, or learn to break the law to obtain access anyway, as it's very within the spirit of the whole movement. While people who are REALLY interested in it, have all the means to get sufficient equipment, and will be even more successful at evasion techniques, since they will also have to improvise in this restricted (yet not "regulated", at least by the actual meaning of this word) environment. I believe that hiring a specialist in the area, just to consult with them and make corrections, should be MANDATORY before imposing any sorts of regulations, as those regulations could be unknowingly malicious. And if it's already mandatory, then judging by these news, it's not really doing a good job. Or the intents were different from "muh protection against the evil hackermen", which honestly i'm more and more leaning to.
Probably will, because there are more news stories of how thieves _ACTUALLY_ steal cars now (namely relay attacks or using a transponder reprogrammer), because the Flipper Zero certainly isn't one of them. I guess one thing that it could lower is the Hyundai/Kia thefts (because publicity lets people know that they need to get an immobilizer), but that has been big news for a long time already, so it's probably getting _less_ publicity at this point.
@@jeanlasalle2351Australia.... and china... both are drastically more.... did way more dystopian things and lock down millions in cage camps... or locked indoors with a welder... literally
That video you showed about unlocking the car with the flipper, wouldn't even work from that distance with a stock flipper zero. It has a out 5m of range. You would need to add an rf module to increase distance.
Same as Ben and guns the band will only affect the law biting citizens the criminals by definition do not care for the legislation. We already have laws against stealing and murder, but the criminal still do it, regardless.
@@thewhitefalcon8539 What he is saying is criminals do not care about the law to begin with. This is why law abiders will suffer, because criminals by default do not follow the laws in the first place.
A Flipper is a great way to tell if you have an insecure product. If your product can have any of its security features defeated by a stock Flipper Zero, it’s insecure and should be trusted as much as a luggage lock.
If you've kept up with the news the past few years, Canada's been in a state of turmoil with Trudeau. For example, Trudeau enacted the gun bans and COVID restrictions and has allowed for Canada's VA to suggest medically assisted suicide to veterans seeking help with PTSD. I don't live in Canada, so I don't really know how it is there, but I sure as hell don't want Trudeau in the US.
@@baiomarlaye3165security is already “good enough” for the flipper zero, but obviously burglers don’t use the flipper zero in the first place to steal the car. The government just wants an excuse to ban
@@_MrBread Eh not fully, wasn't too long ago an automaker (i believe it was kia) was caught out for this because they weren't using rolling codes on their key fobs
@@baiomarlaye3165 that’s true, but comparing kia to other cars, kia doesn’t even make the top 10 of the most stolen cars. That’s not to say no Kia’s are being stolen, I just mean that it should have been obvious that the flipper isn’t the main device being used, they’re just using it as a scapegoat.
Knee-jerk reaction. A) either ban any and all SDR, b) make manufacturers employ proper cryptography instead of obfuscation. It's not like the Flipper could actually break proper security.
This is why people need to be more nerdy towards tech and not just made assumptions. In 2024, the more you know about tech, the safer you overall are. Otherwise its very easy to either clickbait, hack or scam someone. Not to mention them knowing your IP adress and finding your home, to which you can of course loose a lot of money under a threat. I'm not mad with people that dont know tech, but i'm just saying, you need to learn, and i can help with that.
for someone in central intelligence.. he was handed a perfect Hollywood movie level setup for the most believable "that's not mine, they planted that", and he decided to go with "it's not that bad if ya think about it" 🤦 no wonder they fired him
Thank god he was dumb lol it’s kinda scary to think about cia and federal employees being able to have exploits for devices and someone like that guy having cheese pizza is worrying
Yeah, tbh they should have been able to tell from his eyebrows. Ai no ducking way those are the eyebrows of a trustworthy man. Looks like the baddie from fecking thunderbirds 😂
you know anyone with technical know-how can build one of these ? to replace the key on a mercedez benz can cost anywhere between $200 to $500 through dealerships . Maybe force auto makers put at least $100 worth of tech in it to make it significantly harder to steal cars?
As someone in the controls industry I can confirm it's not uncommon for installers to never change the default password on PLCs, VFDs, Thermostats, or the like. And yes, most of our HMIs and graphics look like they came straight from the 2000s
Just yesterday I heard a story of somebody in Canada who got their car stolen and had a tracker in it, they tracked it all the way to the shipping container, and the cops wouldn’t do anything, clearly they aren’t actually trying to stop car theft
When you run out of battery on your car key fob, and realize it's been hardwired into the circuit board to prevent replacing it easily, and increase likelihood of damage, you realize the car companies themselves are the thieves. Especially when a replacement costs $300 plus for a circuit board some kid probably made in Indonesia for cents on the dollar.
yeah, because if someone wanted to steal a car by copying the car signals, they would of course do it with a 100-200€ gadget instead of a 17€ baofeng radio
You don't necessarily have to be out of range to copy a rolling code without it being used: You just have to jam the signal while you record one code (since you are the one producing the jamming signal and know exactly what it looks like, you can easily filter it out of the recording). After you have captured one good code you stop the jamming, the remote will usually send several code in the time of a single button press, so the car will still open/close and nobody will notice a thing. To do something like this you need a radio that is capable of transmitting and receiving at the same time, if a single flipper zero can't do that you just use two, or a flipper zero to jam the signal and a digital tv dongle to record the code. Another thing you can probably do, without even needing to record anything, is to bruteforce the code. In theory it would take a very long time, but in practice, with many rolling code implementations, you can pull it off in a couple of minutes by sending and trying multiple codes at once (by exploiting thing such as the receiver accepting more than a single code at any given for convenience of the users, error correction algorithms and other clever tricks).
Didn't even know that modern keyfobs worked like that. It reminds me of how OTP (one time password) generators work. It might not be the same but the outcome is similar where if someone was able to somehow get your OTP it's kind of useless since it would only work for about 30-60 seconds depending on your settings. Without the `secret` there's no way to generate the OTP themselves. For those that don't know a OTP authenticator generator uses what's called a "secret". Basically a very long series of random numbers, letters and symbols that uses a hash function to generate a six digit number that also uses the date and time to generate the number. Something that would impossible to crack until quantum computers are actually a thing.
as a canadian this very much annoys me first google bard got ban because they thought it was a security threat and now the flipper zero. i gotta get outa here
You can use other devices to do the exact same thing so that prohibition doesn't make any sense, the government just should go and put under arrest the criminals that steal things, not going out banning technology.
I live in Canada and I hope I can get one before they’re hard to get your hands on in Canada because I really want to mess around with it Ethically because it has so many uses that are not criminal
I'd be interested in seeing some sort of attempt at civil action from the flipper team. It's a cooperation providing a product that has been defamed and had it's image damaged by a government who has no business commenting on the technicalities. They can ban whatever they like but you can't insinuate something or somebody is a criminal/crime tool without backing it up
Have automakers gone away from immobilizers? Pretty common in cars after 2000s. Flipper zero might help you get inside the car but stealing it after that should be extremely difficult without the original keyfobs.
How about we mandate that all cars support unlocking with your phone so we can ditch hackable fobs? Governments have completely ignored the use of easily hackable fob systems. They could have mandated better fobs 10 years ago that don't allow replay attacks. They exist, companies rejected them due to price.
Funny because a lot of phones have sensors that are used in the flipper but not accessible in a standard OS suite. Like I've copied my RFID badge for work and used it successfully using an app, turned off and changed the channel of public TVs also using an app, as well as accessing a private wifi network using Kali Linux VM loaded onto my phone. It's great that politicians are seeing these potential exploits but banning the flipper is not going to meaningfully change anything. Besides all the components of the flipper can be bought and assembled because the hardware is open source. What us consumers ought to advocate and be very vocal for is better security not a knee-jerk band-aid solution.
Why would the Iranians go after Ireland? Doesn't make any sense. Easy target maybe? It would seem both countries views on Israel are more or less the same.
Also consider.. they may be trying to get them to use an alternative brand that they have a backdoor in.. (something totally possible and a four D chess move)
Religion connection moreso for people in ireland are usually caholic, and did not have a thousand year battle with the folks with the little style of hat
Today I watched a bunch of videos, all of which I found quite engaging and interesting. When I was at this video I looked through my browsing history to subscribe to the channels I saw earlier and then I noticed all of the videos were by you xD
2:32 well .... there is a way to do that with jamming the signal from the fob and listening to the code. As obviously, if your fob is not opening the car, you will try again. The hacker is still jamming the signal, but now they have 2 codes. They will now replay the first code , stop jamming, and your car will open. After you park the car at your destination, the hacker will replay the second code and steal your car
If this worked then accidentally pressing the unlock button when not in range would lock you out of the car. The code only changes when the car is unlocked.
@@unga02 Accidentally pressing the unlock button *too often* while away from your car does lock you out of the car on some systems. If new codes are a product of old codes (and a shared secret) there is nothing preventing the car pre-generating N acceptable unlock codes from the last one it received.
"One of the best things we can do to prevent auto theft is to prevent those thefts from happening in the first place." The guy and his speechwriting staff are so stupid that he literally just said "the best way to prevent something is to prevent it". Yeah, he *totally* knows what he's doing. Of course, this is the same genius who said "the budget will balance itself", so I don't really expect any better out of him.
