Questions tagged [vehicle]
The vehicle tag has no usage guidance.
29
questions
0
votes
2
answers
2k
views
Do car Bluetooth FM transmitters allow others to eavesdrop on the hands-free phone calls that I make?
My car's entertainment system is only able to play audio CDs and receive AM/FM radio. I am thinking of getting a Bluetooth FM transmitter so that I could use my car's speakers to play my smartphone's ...
1
vote
1
answer
103
views
Detecting signal amplification attacks against PKE keyless fobs
During the early hours of the morning there was an attempt to enter and presumably steal various vehicles on my street, detected well after the fact via householders reviewing CCTV motion detection ...
0
votes
1
answer
278
views
Does a Honda Civic send vehicle telemetry to its servers? [closed]
I recently read an article by the IEEE on Tesla's vehicle telemetry and after reading that, I also realised that Honda Civics also have vehicle infotainment systems, including in-cabin microphones.
...
1
vote
2
answers
973
views
Is the Seed-And-Key Challenge-Response used in Automotive Security really secure?
As an Automotive Security Professional, my state of the art approach to implement a Secure Access would be to have an ECU generate a challenge (nonce + ID), forward it to the tester who can pass the ...
44
votes
2
answers
7k
views
Why don't car keys use algorithms like RFC 4226?
I've been reading a bit into car security and all of the ways cars can be stolen through various alterations of replay attacks. Upon researching whether any of the more modern cars are using anything ...
-2
votes
1
answer
226
views
Keyless entry system
To what extent can cryptography help protect against relay attacks (on vehicles)?
1
vote
1
answer
582
views
Penetration test on a infotainment system platform [closed]
I am pentesting an infotainment platform that is still under development. I did a nmap scan (for all ports with option -p-) of the platform and found a few open ports.
111/tcp open rpcbind
3490/tcp ...
-2
votes
1
answer
138
views
Can you deauth a car, if so what would happen? [closed]
What would happen if someone deauthed a cars mac address?
0
votes
0
answers
142
views
How can the hardware store copy my car keyfob?
I was recently at my local hardware store, where they were offering copies of car keyfobs. They claimed they could copy ''over 90% of cars on the road'' across a number of manufacturers.
I'm ...
1
vote
1
answer
118
views
Remote Keyless Entry physical access to FOB
I know RKE's that can have their codes stolen. However, this requires some setup. I am curious of what is the risk of actually handing over ones fob to valets and car washes. From what I have learned ...
16
votes
1
answer
5k
views
How do rolling code fobs and receivers synchronise?
This is a follow-up question to my earlier one: Does pressing a car remote many times offer denial of service attack for rolling codes?
I want to emphasize that I am asking this question more to shore ...
154
votes
3
answers
23k
views
Does pressing a car remote many times offer denial of service attack for rolling codes?
My understanding of remote car key fobs, and similar security devices with rolling codes, is that the key device is a transmitter that, each time the button is pressed, sends the next secret in a ...
5
votes
0
answers
635
views
Forensic investigation of a vehicle infotainment system [closed]
As far as I know most vehicle infotainment systems are run on a customized Linux system built with Yocto.
Forensic toolkits such as Berla iVe allows to extract information such as GPS data, call log, ...
2
votes
0
answers
157
views
Why do car key remotes not use E2EE?
Background
I read an article about how car keys that remotely open one's car are not secure. This answer also talks about different encryption methods being insecure.
The article mentions that ...
2
votes
1
answer
3k
views
How vulnerable are rolling codes used in car keyfobs to simple replay attacks?
I've read this question - Vehicle remote key security, and I have a few simpler questions that are not addressed in that one.
I just received a whatsapp viral forward raising a few claims regarding ...
1
vote
2
answers
855
views
Is it possible to attack car key fobs with regular RF devices?
I hope most of the key less entry cars are using rolling codes in order to improve the security between the key fob and the car. Is it possible to intercept this communication using a device such as ...
6
votes
1
answer
505
views
Are OBD-II "Connected Car" products (Automatic Pro, Hum) secure?
There is an emerging class of vehicle data devices known as "Connected Car" products. Two examples are Automatic Pro and Hum, which both plug into your car's OBD-II port and are able to log info such ...
25
votes
6
answers
8k
views
Would a CD drive on a driverless car pose a security risk? [closed]
Hackers are smart. Could they hack a self-driving car through its CD drive? From what I understand, malicious code could be uploaded to the driverless car via CD which could give them access to brakes,...
7
votes
1
answer
5k
views
Car Key Security Questions [duplicate]
I am wondering how car key security works.
Do cars keys just send a simple "lock" and "unlock" signal that works with any car from the manufacturer or any car of the same model? Or are specific keys ...
5
votes
4
answers
1k
views
Could technical controls prevent vehicle ramming attacks?
We've just seen another attack where a vehicle was used as a weapon. My thoughts are with all those affected by the tragedy.
Many people are wondering how such attacks can be stopped. It's hard for ...
24
votes
2
answers
4k
views
Hacking a car "in real life"
There are lots of papers concerning car hacking. It is often done with physical access (by the OBD interface for example), sometimes without (Remote Exploitation of an Unaltered Passenger Vehicle).
...
6
votes
1
answer
3k
views
Does CAN bus communication need encryption?
I'm currently researching into CAN security for in-vehicle communication. I would like to know if anyone knows a reason why the CAN payloads of an ECU communication (between CAN nodes) should be ...
78
votes
7
answers
12k
views
How to patch "keyless entry" car keys?
The German automobile club ADAC did a test with several cars which open doors and start the engine with a "keyless entry" system. You don't have to push a button on your car key. If you get near your ...
1
vote
3
answers
377
views
How do I protect security camera footage from an adversary?
I am interested in installing a security camera in my car, but I am worried about an adversary gaining physical access to the camera, and destroying the footage; leaving me with no evidence. ...
4
votes
2
answers
421
views
Car Remote App Security
Car manufactures like BMW, Audi or Mercedes-Benz all provide mobile applications to control your car. All apps share really critical functions like remote lock/unlock or the ability to find your car ...
23
votes
6
answers
7k
views
Infecting a vehicle with a virus?
Referring to the security experts who demonstrated taking control of two popular vehicle models using a laptops connected to ECUs (http://www.bbc.co.uk/news/technology-23443215), what are the ...
51
votes
1
answer
16k
views
Vehicle remote key security
How secure are car remote keys? When you lock or unlock your car, can someone spoof or make another remote key?
How do car remote keys work? Do they use some kind of private/public keys, encryption?
...
2
votes
1
answer
193
views
What kind of monitoring system can we have for existing security systems in the vehicles?
The vehicles are fitted with a security system to track their movements and report it back to their owners if they are moved unauthorized.
My question is: can we have an additional security system ...
-1
votes
5
answers
3k
views
Why do most cars use physical keys and no PIN?
Why do car makers rely on physical start keys, which can be stolen by home burglars and then used to start the vehicle? Why don't they use more secure methods such as a personal PIN, or a pin code to ...