|
Theives unlocking cars remotely
Few months back, the old neighbourhood watch guy handed out a notice from the police about theives using some sort of remote code grabber/whatever and gaining access to vehicles and nicking whatever than can find in there (satnavs, laptops etc). I laughed it off as the language used was technical crap; and probably based on old cars with crappy remote locking systems that can be easily cloned like, MG-Rovers etc.
Well my R32 is off the road at the moment and I'm using the fabled and mouldy BMW e46 325. I parked it outside on the drive next to our other BMW (e39 530). This morning I came to it and found it unlocked. Dammit, I must have caught the remote or forgot to lock it (remote is a bit dodgy), someone had been inside it as the glove box and cubby holes were all open. Luckily the only thing missing was some keys to a house that was knocked down last year (they'll have fun breaking into there :lol1: ). Feeling stupid, I went about loading my junk in the back and noted the other BMW was unlocked...now that was definetly locked last night!! :eek: Luckily nothing missing barring the keys, as there was nothing of worth kept in either car, but I'm left stunned that what I thought was a pretty secure remote locking has actually been hacked! There are no signs of forced entry and the doors deadlock so can't be opened from the inside, and opening with a key would trigger the alarm. I'll try to catch some other BMW owners on the estate and see if they've been victim. The only thing I noted last night was a black Audi Q-thing parked across our drive entrance, but I assumed it was someone visting next door. Either way, I'm pretty freaked out. |
Possibly just borrowed your keys?
|
Grabbers but also they use a jammer when you use the remote, you assume it's locked but its not. ALWAYS check the handle to ensure it's locked :)
|
Sounds like when they used to clone cell phones back in the day.
|
There was a thread about the same thing on Pistonheads a few weeks ago, it's happening a lot
|
Originally Posted by 53WRX
(Post 9646967)
Grabbers but also they use a jammer when you use the remote, you assume it's locked but its not. ALWAYS check the handle to ensure it's locked :)
Turn your audiable chirp option on if available. They rely on you not looking at your vehicle as you arm/lock it with the remote.:Suspiciou |
Most remotes can't be captured these days as they send multiple random signals. A sort of "hello I'm the remote" and a "I'm the car, can you send a different number based on this xyz?" as so on.
Never thought about a jammer, that is quite easy and would work well. Steve |
Originally Posted by 53WRX
(Post 9646967)
Grabbers but also they use a jammer when you use the remote, you assume it's locked but its not. ALWAYS check the handle to ensure it's locked :)
In recent months i have noticed that my "plinker" sometimes doesn't work (whether locking or unlocking) and i am sure that someone is using a jammer nearby (the last time was in an Asda car park). A jammer is pretty indiscriminate, but it only takes one person in the vicinity to fail to lock their doors to make it worthwhile for the scummy underclass :( mb |
Originally Posted by boxst
(Post 9647073)
Never thought about a jammer, that is quite easy and would work well.
Steve |
|
Originally Posted by boomer
(Post 9647095)
+1
In recent months i have noticed that my "plinker" sometimes doesn't work (whether locking or unlocking) and i am sure that someone is using a jammer nearby (the last time was in an Asda car park). A jammer is pretty indiscriminate, but it only takes one person in the vicinity to fail to lock their doors to make it worthwhile for the scummy underclass :( mb |
Latest alarms have rolling codes ie always different every time you plip the alarm ... is your alarm from the prehistoric age :lol1:
TX. |
Originally Posted by Terminator X
(Post 9647126)
Latest alarms have rolling codes ie always different every time you plip the alarm ... is your alarm from the prehistoric age :lol1:
TX. |
Originally Posted by tony de wonderful
(Post 9647112)
The jammer should be easy to home it on w/ a directional antenna.
|
2 years ago about 15 cars over several nearby Closes were robbed in one night in an unexplained way , including our 07 Forester.
I went to the car and found it unlocked (car gave the wrong beep) and saw that it had been rifled through but there was nothing to steal. Oddly, the interior light had been turned off and the passenger door left slightly open but still on its latch. For those robbed neighbours who checked, they also had the same door just slightly open. As these are small Closes where we know each other and their cars, anyone hanging around would have been very obvious - so the break-ins were a bit odd and thankfully none have happened since. |
My neighbour had this done to him a few months back. He found his transit unlocked one morning with no sign of forced entry.
All his tools were gone... |
Thing is, I'm fairly savvy of the systems in use; it uses a rolling code algorithm of quite a long bit length (40bits is often quoted). Grabbing the remote signal should not pose any risk to security. It would take a serious mathematician to work out the next code sequence and backwards engineer the algorithm to anticipate the next "random" code, and then it would need someone with programming skills to code it into a microcontroller and automate it (probably a PIC of some sort I guess), then an electronics whizz to integrate the microcontroller with a reciever/transmitter. What I'm saying is this far from plug and play technology here.
The only other way I'd guess is to bombared the car with random codes repeatedly until opened. Bearing in mind the car would only accept a certain amount of codes in a given time so this would take quite some time. Either way the equipment required seems a bit excessive for a scroat after ipods and satnavs? Or is that what the "pros" are after these days? Seems a bit small fry if you ask me. :wonder: |
Brute force attack or someone on the inside of the security business is selling secrets....? :wonder:
|
<tin foil hat >
What are the odds that the CIA already have such equipment ;) < /foil hat > |
Originally Posted by b13bat
(Post 9647020)
Yeah the jammer devices where on tv last week.
Turn your audiable chirp option on if available. They rely on you not looking at your vehicle as you arm/lock it with the remote.:Suspiciou Seems like me being neurotic may be useful afterall. :lol1: |
Originally Posted by tony de wonderful
(Post 9647112)
The jammer should be easy to home it on w/ a directional antenna.
mb |
Originally Posted by boomer
(Post 9647611)
Any suggestions for the best (off the shelf) model to get??
mb So you could use this to locate the 'jammer' signal which would presumably be continuously broadcasting at the same frequency. http://www.raven-research.com/graphi...page/HHRDF.gif |
Originally Posted by Lisawrx
(Post 9647509)
... Seems like me being neurotic may be useful afterall. :lol1:
Dave |
Originally Posted by tony de wonderful
(Post 9647644)
A quick google reveals that euro remote keyless entry devices broadcast at ~433.92MHz.
So you could use this to locate the 'jammer' signal which would presumably be continuously broadcasting at the same frequency. http://www.raven-research.com/graphi...page/HHRDF.gif |
Originally Posted by ALi-B
(Post 9646870)
Few months back, the old neighbourhood watch guy handed out a notice from the police about theives using some sort of remote code grabber/whatever and gaining access to vehicles and nicking whatever than can find in there (satnavs, laptops etc). I laughed it off as the language used was technical crap; and probably based on old cars with crappy remote locking systems that can be easily cloned like, MG-Rovers etc.
Well my R32 is off the road at the moment and I'm using the fabled and mouldy BMW e46 325. I parked it outside on the drive next to our other BMW (e39 530). This morning I came to it and found it unlocked. Dammit, I must have caught the remote or forgot to lock it (remote is a bit dodgy), someone had been inside it as the glove box and cubby holes were all open. Luckily the only thing missing was some keys to a house that was knocked down last year (they'll have fun breaking into there :lol1: ). Feeling stupid, I went about loading my junk in the back and noted the other BMW was unlocked...now that was definetly locked last night!! :eek: Luckily nothing missing barring the keys, as there was nothing of worth kept in either car, but I'm left stunned that what I thought was a pretty secure remote locking has actually been hacked! There are no signs of forced entry and the doors deadlock so can't be opened from the inside, and opening with a key would trigger the alarm. I'll try to catch some other BMW owners on the estate and see if they've been victim. The only thing I noted last night was a black Audi Q-thing parked across our drive entrance, but I assumed it was someone visting next door. Either way, I'm pretty freaked out. Les |
The 530 was definetly locked though I remember hearing the motors, seeing the locking pins go down and me checking the handle.
The 325 I'll have to give benefit of doubt as the locking motors are quiet, and I don't recall checking it last night as my hands were full. However, there is a problem with the control unit in the rear roof spoiler (it houses the aerial for the radio and alarm amongst other things), as such, the range is about 6ft. So because of this at the very least I look for visual and audible confirmation of the central locking motors cycling. Because of this I don't think either car was jammed. Its actually been opened. The one BMW is a certainty, there was no way it was left unlocked, it definetely was locked. I've taken it as a warning shot not to keep expensive stuff in the cars. I rarely do though as I've been paranoid ever since soneone tried to nick my Escort twelve years ago :lol1: |
Originally Posted by ALi-B
(Post 9647695)
The 530 was definetly locked though I remember hearing the motors, seeing the locking pins go down and me checking the handle.
The 325 I'll have to give benefit of doubt as the locking motors are quiet, and I don't recall checking it last night as my hands were full. However, there is a problem with the control unit in the rear roof spoiler (it houses the aerial for the radio and alarm amongst other things), as such, the range is about 6ft. So because of this at the very least I look for visual and audible confirmation of the central locking motors cycling. Because of this I don't think either car was jammed. Its actually been opened. The one BMW is a certainty, there was no way it was left unlocked, it definetely was locked. I've taken it as a warning shot not to keep expensive stuff in the cars. I rarely do though as I've been paranoid ever since soneone tried to nick my Escort twelve years ago :lol1: |
Don't think so on those year cars. But the equipment I have available to me that can interface with BMWs is somewhat limited to fault codes, live data, adaptions and output tests (MT Pro and Launch X-431).
|
It is worrying if they have managed to crack the ECU ability to cycle the code needed to unlock it again. That basically will give them unforced silent entry to any car who uses a compromised alarm system. Basically there is nothing we can do to stop that.
Most probably they have found a way around the security. Just as in trying to get through the front door of a windows computer is hard, there are still lots of backways in. Issue with cars is that they are a lot harder to update, and I don't see any manufacturer's coming forward to tell us that they know their system has been successfully hacked so that we can do something :( If this becomes wide spread we will all have to go back to using good old fashioned keys to get into a car. |
Hopefully its just BMW related in this case. If it happens again, that's just what I'll do; pull the fuse on the remote locking and just use the key.
Doors won't dead lock that way though - although deadlocking is bit pointless as all you need to do is punch out the door lock (old fashioned keyless entry ;) ). |
| All times are GMT +1. The time now is 03:44 AM. |
© 2024 MH Sub I, LLC dba Internet Brands