Hondas PWNed

[freebeard]

Not that I care, I drive a Chevrolet XFi.

rollingpwn.github.io/rolling-pwn/

The Rolling-PWN bug is a serious vulnerability. We found it in a vulnerable version of the rolling codes mechanism, which is implemented in huge amounts of Honda vehicles. A rolling code system in keyless entry systems is to prevent replay attack. After each keyfob button pressed the rolling codes synchronizing counter is increased. However, the vehicle receiver will accept a sliding window of codes, to avoid accidental key pressed by design. By sending the commands in a consecutive sequence to the Honda vehicles, it will be resynchronizing the counter. Once counter resynced, commands from the previous cycle of the counter worked again. Therefore, those commands can be used later to unlock the car at will.

These new Artificial Intelligences (they're multiplying like rabbits) should be tasked with finding bugs in software.

[redpoint5]

I leave my cars unlocked so the windows don't get smashed out. Keep nothing in value in them too, or if I do, hide it where nobody would look.

[freebeard]

When I was on jury duty I learned that the local custom was to walk up to a Honda Civic, pull out the top of the window to get a shim into the latch, use a shaved key in the ignition, and then congregate behind some box box retailer and trade cars around to obscure the provenance.

I guess times change?

[redpoint5]

Some would appreciate custom artwork in the form of a face pressed into steel sheet metal. Playing the game is tacit acceptance that losing is a possibility.

Chaos by a society will only be tolerated until a certain point. People might think property crime is not crime, but some will prove it's not.

[freebeard]

This isn't The Lounge. This thread is about buggy software. ....and benevolent AI.

[redpoint5]

It wasn't the second the topic was prevention. That's a cultural problem, not a technical one. Everyone that believes it's a technical problem isn't even in the conversation.

Locks have always been a joke for anyone with greater than zero determination to bypass them.