Keyless relay attack - in action.

[Ted]

This really true? How come car battery tend to go flatter in the winter??


Sent from my iPhone using Tapatalk Pro

Negative temperature coefficient.
The internal impedence of the battery goes up as the temperature goes down.
Add in the thicker oil at lower temps, making the engine harder to crank, and increased use of electrical acessories - particularly on tickover in a traffic jam, and the performance of a good battery can be halved.
The increased loads can also cause cells in an older battery to fail.

 

[whitenemesis]

This really true? How come car battery tend to go flatter in the winter??
Sent from my iPhone using Tapatalk Pro

Because electricity is created through a chemical reaction and this proceeds more slowly in cold temperatures. Conversely an unused battery will loose it's charge more slowly at lower temps

This Is Why Batteries Die When It's Cold

 

[190]

I think we have to separate storage of batteries at low temperature and how they perform at low temperature.

The question was about storage life. As already stated the self discharge rate reduces at low temperatures because the internal resistance increases. Most things last longer when they are cold because chemical reactions slow down.

When you ask how they perform when being discharged in cold temperatures then that same internal resistance increase causes performance to drop because it limits the maximum discharge current available. It's simple ohms law.

 

[claspknife]

I emailed Mercedes with my concern for keyless theft and this is their official reply.

I anonymised the links and the names in this email.

28th November 2017

Ref: LK-1-13965577039

Dear *****

Thank you for contacting Mercedes-Benz Customer Service regarding the concerns you have over the Keyless Go feature following recent press articles. I understand that you have written to our Head Office in Stuttgart for a response. However, as a UK customer they have forwarded this to us to respond.

In regards to your concerns I can assure you that all Mercedes-Benz Cars have extensive security and anti-theft protection systems in place. Data security, data protection and anti-theft protection are important elements in our research and development activities. The development of protection and safety mechanisms is continued over the entire life cycle of our cars. When enhancing our protective mechanisms, I can assure you that we take into account the latest knowledge about criminal methods and attacks on security systems. To offer further assurances, all our cars undergo strict development and investigation to ensure they meet the relevant insurance requirements and EU Regulations. Preventative actions are now available, for example, on our latest cars we now offer our customers the option of deactivating the radio signal with two clicks of the key in order to prevent abuse, which you have confirmed you now do.

As I am sure you can appreciate, this technology is available throughout the motor industry and we cannot guarantee that criminals may try to gain entry and therefore cannot be held responsible for the actions of criminals. Please rest assured, we are continuing to work with the relevant authorities to continue to improve the security and safety of our customers.

I do hope that this does help to put your mind at ease, however should you have any further requirements please do not hesitate to contact me or one of my colleagues.

If you are unhappy with this final decision or feel this matter is unresolved, you can seek advice with an CTSI Certified Alternative Dispute Resolution provider. We are prepared to engage with The Motor Ombudsman to resolve your dispute. Further details can be found at www.themotorombudsman.org, or alternatively their telephone number is 0345 241 3008 selecting option 1.

So we can be as responsive as possible, be so kind as to approve your contact details at Error
And please let us know how we’re doing so we can continue to improve how we serve you: wccac.net/qm/ukencsw (reference number: 1-18737099)

Yours sincerely

la*** k***li*nh
Customer Service UK

Mercedes-Benz UK Customer Service can be contacted by telephone on 008 009 777 7777 or 0207 660 9993, Monday - Friday between 08:00 & 18:00.

Mercedes-Benz Customer Assistance Center Maastricht N.V. Gelissendomein 5, 6229 GK Maastricht , Netherlands. Register No.: K.v.K. Limburg 33014909

If you are not the addressee please inform us immediately that you have received this e-mail by mistake and delete it. We thank you for your support. [ACTIVITY ID:1-6EUKR55][CASE ID:1-6EUKR0R]


Sent from my iPhone using Tapatalk Pro

 

[540YMX]

I emailed Mercedes with my concern for keyless theft and this is their official reply.

I anonymised the links and the names in this email.

28th November 2017

Ref: LK-1-13965577039

Dear *****

Blah blah blah blah

Reply doesn't amount to much

The double clicking is handy but hardly foolproof as it has to be done everytime you lock the car and you can accidentally re-activate the key or the spare key is still active.

 

[whitenemesis]

For those feeling smug with their non-KeylessGo fobs...

"The other theoretical hack is called RollJam, and it works by stealing the coded unlock command your key sends to your car when you actively press its unlock button. For this attack, a Faraday box won’t help. If your car can receive the signals, then so can an attacker’s device, and that’s when you can get compromised.

But if you’re paying attention, you might at least notice that an attack could be underway. If you press your remote and the car doesn’t unlock the first time, but does the second time, there is the possibility that your code was just stolen. RollJam works by stealing your code and then jamming the signal so your car doesn’t unlock the first time, but it does the second time. So if you never press the unlock button on your remote, RollJam won’t work. Yes, that means you might want to use the physical key part of your key fob… if you have one."

 

[540YMX]

The keyless entry fob guards arrived today so I thought I would experiment.

My car is a June 2017 C63

A warning when using the double-press to deactivate keyless entry, if you press any of the buttons i.e. the lock or boot release then the key is re-activated and keyless entry is operational again so this much heralded additional security feature is not that great.
Make sure you deactivate the spare key as well

Lock car with remote from inside the house
Put key in fob guard (spare key in other fob guard left inside house)
Try keyless entry, fails as expected
Take key out and unlock car
Start car
Put key in fob guard, no warning about key not present
Drive 3 miles with no indication anything is different, engine not quite up to temperature so stop/start doesn't kick.
Switch car off & lock.

Return journey
Unlock car
Start car
Put key in fob guard, no warning about key not present
Open/close driver's door, dashboard warning & boing sound
Drive off, dashboard warning & boing cycles every 30 seconds
Drive 3 miles with no indication anything is different, car is showing stop/start is available but decided not to try this on the open road
Stop on the drive, engine switches off
Release brake, longer delay than normal but engine starts & I can drive away

The above sort of mimics the scumbags managing to unlock & start the car, it gives them plenty of time disappear.

 

[whitenemesis]

Stop on the drive, engine switches off
Release brake, longer delay than normal but engine starts & I can drive away

But what would happen if one were to switch off the IGN, not just stop? I would expect the engine would not restart on switching IGN on.

 

[540YMX]

But what would happen if one were to switch off the IGN, not just stop? I would expect the engine would not restart on switching IGN on.

It won't start as you would expect, what happens next is anyone's guess. Broken up for parts, recoded with new keys or disappears off abroad.