tl:dw for others: It's key programming via an easily accessed OBD port. Pop the window, plug in, program yourself some new 'keys', then go.
The tools used have legitimate purpose. Thieves like this do nothing except make manufacturers lock their shit down even more, putting DIY mechanics in a tighter spot.
Kia/Hyundai had a similar-but-worse problem in the states, that I think they resolved by software update - cutting access to the attack vector after a certain amount of idle time. Their fault entirely though for selling cars without even basic immobilisers. Check me on that, memory not what it used to be.
Moving the port or putting a hidden switch in to disable/enable it are viable options for concerned owners. Alternatively you could put a hidden killswitch on the fuel pump or starter (for ICE cars at least). Might not save your window, but at least the thief will likely abandon the attempt if it's taking too long to find and undo the changes. This attack completely relies on speed to be effective.
Similar as far as "vehicle is easy to steal with minimal physical access". Agree that that one though was much, much easier due to the lack of tools required. Easy enough to demo on tiktok.
No immobilizer was a completey braindead choice. But without the laws to force it in, of course a company is going to save the $ and ship without it.
Even my 13 year old, poverty spec Corsa (Vauxhall/Opel) has one. And that's because it's a mandatory feature here.
VF commodores in Australia have a similar issue.
People are shorting out the horn so the alarm does not make a sound, then using a Scantool to program new keys.
The problem is that since General Motor have liquidated Holden and abandoned their owners, so there isn’t any help on that front.
Besides killswitches and tertiary immobilisers, I have heard of people cross wiring their OBD point with a high-voltage coil which fries the thieves OBD reader.
In response to this, thieves are adding fuses to OBD extension cables.
6 Comments
swizzlestick@lemmy.zip · 7 pts · 1y
tl:dw for others: It's key programming via an easily accessed OBD port. Pop the window, plug in, program yourself some new 'keys', then go.
The tools used have legitimate purpose. Thieves like this do nothing except make manufacturers lock their shit down even more, putting DIY mechanics in a tighter spot.
Kia/Hyundai had a similar-but-worse problem in the states, that I think they resolved by software update - cutting access to the attack vector after a certain amount of idle time. Their fault entirely though for selling cars without even basic immobilisers. Check me on that, memory not what it used to be.
Moving the port or putting a hidden switch in to disable/enable it are viable options for concerned owners. Alternatively you could put a hidden killswitch on the fuel pump or starter (for ICE cars at least). Might not save your window, but at least the thief will likely abandon the attempt if it's taking too long to find and undo the changes. This attack completely relies on speed to be effective.
Delta_V@lemmy.world · 4 pts · 1y
Thank you!
Video has such a slow data transfer rate.
swizzlestick@lemmy.zip · 2 pts · 1y
You're welcome :)
Avg@lemm.ee · 2 pts · 1y
The Hyundai issue was worse and not similar, you didn't need a key at all, there was no immobilizer, something that was standard on cars for decades.
swizzlestick@lemmy.zip · 2 pts · 1y
Similar as far as "vehicle is easy to steal with minimal physical access". Agree that that one though was much, much easier due to the lack of tools required. Easy enough to demo on tiktok.
No immobilizer was a completey braindead choice. But without the laws to force it in, of course a company is going to save the $ and ship without it.
Even my 13 year old, poverty spec Corsa (Vauxhall/Opel) has one. And that's because it's a mandatory feature here.
Salvo@aussie.zone · 2 pts · 1y
VF commodores in Australia have a similar issue. People are shorting out the horn so the alarm does not make a sound, then using a Scantool to program new keys.
The problem is that since General Motor have liquidated Holden and abandoned their owners, so there isn’t any help on that front.
Besides killswitches and tertiary immobilisers, I have heard of people cross wiring their OBD point with a high-voltage coil which fries the thieves OBD reader.
In response to this, thieves are adding fuses to OBD extension cables.