Hack Created to Bypass Keyless Car Locks and Garage Doors

Security researcher Samy Kamkar has developed a tiny $30 dollar device capable of cracking the codes used by remote car unlockers and garage door openers. It works by using a method similar to intercepting a 3 way handshake when hacking a WPA encrypted wireless network. When the victim attempts to unlock his car remotely, it doesn't work the first time, but it will work the second time. This is because the first signal gets intercepted by Kamkar's device instead of reaching the intended vehicle. The device now has the code necessary to unlock the target car at any given time.

Samy Kamkar has given this information to automotive companies and as a result they created the "rolling code". This method ensures that the same wireless code can't be used to unlock the car twice. Shortly after this release Kamkar came up with a follow up hack. When a target sends a signal to unlock their car, Kamkar blocks that first signal and stores it. Then when the target makes a second attempt to unlock the car Karmkars device blocks and stores the second signal and sends the code from the first signal to unlock the car. The code he obtained from the targets second attempt to unlock the car is saved and can be used at a later time. This hack has not yet been patched by all automakers. Car makers that are currently affected include Nissan, Toyota Volkswagen and others.






Source: Wired