Keyless entry fobs result in rash of vehicle thefts

in security on 2015-05-11 14:56 (#8TR4)

As vehicles become more technologically advanced, thieves are becoming technologically savvy, too. Cars with a hands-free key fobs typically unlock a car within about 30 centimeters. But across the USA, thieves have begun using a device called a power amplifier to help unlock cars. The amplifier, which can cost less than $20 over the Internet - takes the signal from the car and projects it as far as 100 meters, so your car can find your key fob in your purse, pocket or the table where you dump your stuff when you come in the door.

In Toronto, Los Angeles, Long Beach, New York, Springfield, and more cities, police have reported a spike in thefts from Toyota and Lexus SUVs, Priuses, and more vehicles, all parked in owners' driveways with no signs of damage. As more people buy cars with these no-push key fobs, what's the solution to stopping this type of break-in? "Use a microwave" or wrap your keys in aluminum foil. The heavy metal cages block the signal. It's another case of convenience becoming a two-edged sword.

Re: I can't say I understand this 100% (Score: 1)

by kerrany@pipedot.org on 2015-05-11 21:00 (#8VD2)

The idea that the key is constantly generating a signal is a little difficult to believe - receiving signals is cheap, battery-wise, but sending would surely wear that sucker out in a year or less. More likely it only 'wakes' when it detects a ping from the car that passes whatever authentication it has built in, probably with some form of RFID passive receiver. Thus the car is doing the generating, and the thieves have access to the car because it's parked on the street or in a driveway.

The scenario goes something like this. The thief pulls up to the sidewalk in getaway car and hits the button. The amplifier amplifies the signal the car is constantly sending to the key. The key responds to the amplified "Key where are you?" signal with its usual "Itsa me, the key!" signal, et voila, the car is unlocked.

Surely it wouldn't be that easy, but the evidence seems to suggest it is. There seems to be no validation beyond sign and countersign. Maybe they'll patch that up by adding more tests to the car's routine, but the key is probably always going to be a dumb device (unless they make it a smartphone app) due to battery life.