http://www.leftlanenews.com/2006/05/...to-steal-cars/

"With cars as inexpensive as the Toyota Camry offering entirely keyless systems, these concerns a relevant to all consumers."

Although the article didn't speak of how this was done (probably for good reason) I suspect it has to do with using some sort of radio receiver to intercept the signals from both the keyfob and the car. With some knowledge of the algorithms used in the system, it probably wouldn't take much to "spoof" the keyfob.

This sort of vulnerability is why mechanical key with embedded microchop is better -- someone must have both a matching mechanical key, and the digital code. Not only that, but since the communcation between key and computer is done by wire (the key itself) rather than by radio, there's no way to use some sort of sniffer to intercept the communcation.

Also, there's the nonsense of having the car running a receiver all the time "seeking" the keyfob, and a lot more chance of problems such as a car not permitting entry because a battery dies on a keyfob. With a physically linked key, it receives the power it needs for the communication from the car itself, and only when is physically in the ignition. Is it really so much harder to turn a key than to push a button to be worth all that?

A good point that was raised was that both encrption and cracking techniques will improve over time. While in the case of computers, it is trivial to upgrade security software to repair the latest vulnerabilities, upgrading security software on a vehicle ignition will probably be a difficult ordeal -- and another thing to worry about. While top of the line vehicle keyless entry systems could be secure presently, several years down the line, a vulnerability could be found and many current vehicles would still be running non-updated software.

How is this different from using a slim-jim to steal a non-keyless-entry car? If they want your car, they're going to get it somehow... Opening the door is the least of their troubles.

Why don't the auto manufacturers just use biometrics? The technology costs a lot less now than it did 10 years ago. The manufacturer could leave the system open-unprogrammed until the dealer sells the car and then the dealer could program the car with the customers fingerprints. That would be sweet

I just read an article about some college kids creating a device which fits into a backpack that can intercept the code on keyfobs people use to pay for gasoline. Like, the quickpass. They even put it to use! Within minutes of walking pass someone at a gas station that was using it to pay for fuel, the college kids went down the road and bought a tank of gas with it.

They then reported what they found to the gas company (I just don't remember which company!) the company didn't do a thing about it. Their estimated users are in the hundred thousands, and I guess they're thinking it's too costly to replace all those keyfobs since the college kids are just one instance of this being done.

If I can find the article again, I'll post it.

<Best Tank Economy!><Best Tank Endurance!>

Are you kidding! It apparently took the theives a very long time to do this.The 20 minutes they referred to was just how long the cars internal security "might" slow things down if it detected something wrong.
Just a laptop would be useless. You would need a laptop that could send at a certain frequency. They could get an idea of the frequency by getting a key fob, or getting very close to someone when entering the keyfob.
After they have the correct frequency, they still have to send a HUGE numbers of potential codes to the car so it will unlock and work. Anyway along there the car might "get wise" that it is being plundered, and then lock out for the 20 minutes.
I can think of a much easier way to steal a car.Gun in face-give me you car, and key or key fob!!
I though the keyless entry was just a gimmick until I walked up to the car with a heavy load in my arms. It is easy enough to open a door with your hands full, but not so easy to pull a key out of your pocket, and get it in the lock with your hands full.Luck,Charlie
PS-The Prius keyless entry fob has an actual key in it, and it will work with a dead battery-no problem.

Biometrics won't stop auto theft either and might make it easier. Fingerprints can be stolen from a drink can or lifted from a door handle. Gouged out eyeballs are right behind (The Minority Report?).

Alden Bowles
2005 Toyota Prius II HSD