[CanberraCooperS]

http://software.silicon.com/malware/...9127377,00.htm

Primerly Lexus so far... but geeeeeesh whats next????

[AndrewH]

I reckon potential weaknesses in RFID encryption technology (like that used in car immobilisers) this is more concerning. Check this article out

[CanberraCooperS]

Yeah RFID hacking is fairly easy thing to do... Current project at work for Identity Management for a Fed Gov Department has shown how insecure it is.

[AndrewH]

Quote: Originally Posted by CanberraCooperS

Yeah RFID hacking is fairly easy thing to do... Current project at work for Identity Management for a Fed Gov Department has shown how insecure it is.

Time to buy a Chubb steering wheel lock for my car??

[minigolf]

Or just a guy in a uniform with a gun.

[MickyD]

stop talking about your fantasies Liam

[AndrewH]

Hey Giles, I'm guessing that you probably still need the key transponder in order to hack it?? So you still have to go through the home invasion before someone can steel your car - you just might get your key back

[CanberraCooperS]

Quote: Originally Posted by AndrewH

Hey Giles, I'm guessing that you probably still need the key transponder in order to hack it?? So you still have to go through the home invasion before someone can steel your car - you just might get your key back

Depends on the technology in use... some systems will send the key with the lock if you know what i mean?? others are purely a key to the lock...and they are the most comon and easiest to hack..

problem with RFID is that its always authenticated, there is no challenge response to the RFID... eg no pin or 2 factor Authentication.. if you have the card or key your in.

The best way for this to work is to have a challenge response like a pin to Authenticate the ID... like a smartcard or other ID device. I dont like the idea of RFID for quick cash or any funds related thing... there is inadequate security..

[AndrewH]

Quote: Originally Posted by CanberraCooperS

Depends on the technology in use... some systems will send the key with the lock if you know what i mean?? others are purely a key to the lock...and they are the most comon and easiest to hack..

problem with RFID is that its always authenticated, there is no challenge response to the RFID... eg no pin or 2 factor Authentication.. if you have the card or key your in.

The best way for this to work is to have a challenge response like a pin to Authenticate the ID... like a smartcard or other ID device. I dont like the idea of RFID for quick cash or any funds related thing... there is inadequate security..

Ummm interesting

Quote:

The Key Transponder communicates with the immobiliser control module, exchanging Password, Key Identification Information and Changing Codes through the antenna ring.

The key transponder is good for 50000 write/erase cycles, or 50000 start cycles.

The starting sequence of the immobiliser is as follows:

• The key is inserted into the lock cylinder and switched “ON”. The immobiliser control module is powered through KL R and sends a 125kHz AM signal to the ring antenna. The AM signal induces voltage in the key coil and powers up the transponder.

• Powered up, the key transponder sends the key identification code to the immobiliser module. The immobiliser module verifies the key identification code and checks to see if the key is enabled. If the key is correct and enabled, a password is sent to the transponder over the 125kHz AM signal through the ring antenna.

• When the transponder accepts the password, it releases the changing code which it received from the immobiliser module during the last start-up operation to the immobiliser module via the ring antenna.

• The immobiliser module compares the changing code received from the transponder with the code stored in its memory and if they match the process is allowed to continue.

The immobiliser module looks at the other inputs for correct status (e.g. Code function not active, Transmission in P or N or clutch depressed, engine speed below specified RPM) and energizes the the internal relay to begin starter operation.

• While energizing the internal starter relay, the immobiliser module calculates a stored code from the “Rolling Code Table” and sends the calculated results to the DME.

• On receipt of the “Rolling Code” from the immobiliser the EMS calculates it’s own stored code and compares its results with the code it received from the immobiliser
If the “Codes” match the drive away protection is released and injection and ignition are enabled and the engine starts.

If the “Codes” do NOT match, the EMS “rolls forward” to the next code according to the “Rolling Code Table” and makes the same calculations. The EMS continues this “forward roll” up to a maximum of 200 times or until a match is found. Failure to find a match will result in the engine cranking but not starting.