- My Forums
- Tiger Rant
- LSU Recruiting
- SEC Rant
- Saints Talk
- Pelicans Talk
- More Sports Board
- Fantasy Sports
- Golf Board
- Soccer Board
- O-T Lounge
- Tech Board
- Home/Garden Board
- Outdoor Board
- Health/Fitness Board
- Movie/TV Board
- Book Board
- Music Board
- Political Talk
- Money Talk
- Fark Board
- Gaming Board
- Travel Board
- Food/Drink Board
- Ticket Exchange
- TD Help Board
Customize My Forums- View All Forums
- Show Left Links
- Topic Sort Options
- Trending Topics
- Recent Topics
- Active Topics
Started By
Message

Steal a Tesla Model S with raspberry pi
Posted on 9/10/18 at 2:26 pm
Posted on 9/10/18 at 2:26 pm
Researchers proved they could clone a Tesla's key fob quite easily
In their proof-of-concept attack, which they show in the video below, the researchers demonstrate their keyless-entry-system hacking technique with a hardware kit comprising just a Yard Stick One radio, a Proxmark radio, a Raspberry Pi minicomputer, their pre-computed table of keys on a portable hard drive, and some batteries.
After nine months of on-and-off reverse engineering work, the KU Leuven team discovered in the summer of 2017 that the Tesla Model S keyless entry system, built by a manufacturer called Pektron, used only a weak 40-bit cipher to encrypt those key fob codes.
The researchers found that once they gained two codes from any given key fob, they could simply try every possible cryptographic key until they found the one that unlocked the car. They then computed all the possible keys for any combination of code pairs to create a massive, 6-terabyte table of pre-computed keys. With that table and those two codes, the hackers say they can look up the correct cryptographic key to spoof any key fob in just 1.6 seconds.
Tesla responded to the security issue by allowing owners to set up a PIN drivers can enter before being allowed to drive off.
All newly manufactured Tesla's will not be vulnerable
Wired
Youtube proof
In their proof-of-concept attack, which they show in the video below, the researchers demonstrate their keyless-entry-system hacking technique with a hardware kit comprising just a Yard Stick One radio, a Proxmark radio, a Raspberry Pi minicomputer, their pre-computed table of keys on a portable hard drive, and some batteries.
After nine months of on-and-off reverse engineering work, the KU Leuven team discovered in the summer of 2017 that the Tesla Model S keyless entry system, built by a manufacturer called Pektron, used only a weak 40-bit cipher to encrypt those key fob codes.
The researchers found that once they gained two codes from any given key fob, they could simply try every possible cryptographic key until they found the one that unlocked the car. They then computed all the possible keys for any combination of code pairs to create a massive, 6-terabyte table of pre-computed keys. With that table and those two codes, the hackers say they can look up the correct cryptographic key to spoof any key fob in just 1.6 seconds.
Tesla responded to the security issue by allowing owners to set up a PIN drivers can enter before being allowed to drive off.
All newly manufactured Tesla's will not be vulnerable
Wired
Youtube proof
This post was edited on 9/10/18 at 2:27 pm
Posted on 9/10/18 at 2:28 pm to Tigeralum2008
There goes my September Joxy into a fricking tailspin.
Posted on 9/10/18 at 2:29 pm to Tigeralum2008
quote:
once they gained two codes from any given key fob
How is this accomplished?
Posted on 9/10/18 at 2:34 pm to S
quote:
Joxy
I don't even try.
on topic: what was the purpose of that if they're not stealing cars with it? hope tesla pays them as consultants?
Posted on 9/10/18 at 2:42 pm to Eli Goldfinger
quote:
How is this accomplished?
I'm guessing with the 2 radios.
Posted on 9/10/18 at 2:46 pm to georgia
quote:dont even try to talk
Joxy
I don't even try
Posted on 9/10/18 at 2:50 pm to Tigeralum2008
quote:
They then computed all the possible keys for any combination of code pairs to create a massive, 6-terabyte table of pre-computed keys.
So easy even a baby could do it.
Posted on 9/10/18 at 2:54 pm to Tigeralum2008
quote:
After nine months
Posted on 9/10/18 at 2:55 pm to jrodLSUke
quote:
So easy even a baby could do it.
I'm willing to bet the table is already up on Pirate Bay
Posted on 9/10/18 at 2:57 pm to Eli Goldfinger
quote:
How is this accomplished?
They meant they got ahold of just 2 key fobs to find out what their codes were. They could then deduce the code length and placement of letters/numbers within the codes. Once you know the length of the codes, and/or the specific element placements, you can hack the rest of the codes through brute force.
This post was edited on 9/10/18 at 2:57 pm
Posted on 9/10/18 at 2:57 pm to Eli Goldfinger
quote:
How is this accomplished?
Sit out front of a grocery store in an affluent part of town with a radio. Lock, unlock. That's two. The license plate number and $30 at the DMV will tell you where you can go to take 3 AM delivery of your shiny new Tesla.
They ALREADY have the lookup tables and have brute forced everything they need to quickly narrow down how to defeat a particular fob because it's a weak 40 bit encryption scheme. Doing all that is time consuming, but feasible because of the weakness of the key and once you have the shortcut of those tables, well...
Computing those tables is probably what took up a lot of the nine months. Now, getting the proper keycode for a given fob is just looking up entries in a database given the two codes you sniff from the air.
This post was edited on 9/10/18 at 3:06 pm
Posted on 9/10/18 at 3:01 pm to Tigeralum2008
quote:
40-bit cipher
Yikes
Posted on 9/10/18 at 3:04 pm to LordSaintly
quote:
40-bit cipher
Yikes
It's the digital equivalent to securing your $100K with a ziptie
Posted on 9/10/18 at 3:04 pm to Tigeralum2008
Posted on 9/10/18 at 3:04 pm to Rouge
quote:
dont even try to talk
Posted on 9/10/18 at 3:05 pm to Tigeralum2008
quote:
It's the digital equivalent to securing your $100K with a ziptie
I'm floored that these major companies still make these security blunders. It reminds me of PSN storing passwords as plaintext.
Posted on 9/10/18 at 3:06 pm to georgia
quote:Rouge is impossible to Joxy here
whats wrong with you today?
Posted on 9/10/18 at 3:08 pm to Rouge
quote:
Rouge is impossible to Joxy here
Have I ever told you how much I like the titty kitty avatar?
Posted on 9/10/18 at 3:12 pm to Rouge
quote:
Rouge is impossible to Joxy here
ohhhh
I read that as you telling me to stop talking.
My bad!

Popular
Back to top

11








