Shop OBEX P1 Docs P2 Docs Learn Events
Prop or Arduino? — Parallax Forums

Prop or Arduino?

ercoerco Posts: 20,256
edited 2014-06-27 01:11 in General Discussion
Which processor is preferred by discriminating auto hacker thieves? "Law enforcement technology experts" are working to identify the mysterious new little black box that opens locked cars and defeats security systems. Probably not something featured on Hack-A-Day or Kickstarter. :)

https://www.youtube.com/embed/l7OadDz3Ums

Comments

  • davejamesdavejames Posts: 4,047
    edited 2014-06-23 16:15
    ...seriously? The experts and authorities have no idea what this box is?

    Someone has fingered out the communication protocol for the "key-less" fobs. Once that's done, just start spewing unlock codes until a car opens up. The approach may not unlock every car, but walking through a parking lot would present many opportunities for nefarious business.

    ...and to answer your subject line question: which ever works.
  • LoopyBytelooseLoopyByteloose Posts: 12,537
    edited 2014-06-24 09:04
    It is likely made abroad in some Asian region well-known for making cheap electronics. Since it is predominantly an rf device, any microprocessor will just be in a support role. With more memory on-board a single chip, it is likely to be an AVR device that manages a database of configurations. Or it could be source from the Russian mafia.

    Sorry, but I doubt it is eithr a Propeller or an Arduino, but it could use a Raspberry Pi for the storage resources.

    It is all rather silly.. First you put $50,000USD more of value on wheels with the ability for a quick getaway. And then you expect to safely lock and unlock it by remote control.


    If you think about it, having a timed lockout that won't open the car doors until morning would prevent these guys from operating in the wee hours of the night. In an emergency, a normal key could open the car.
  • Heater.Heater. Posts: 21,230
    edited 2014-06-24 09:56
    Loopy,

    Why do you home in on the Raspeberry Pi as a solution to car lock hacking?

    Sure it's possible but then so are a thousand other solutions that are easily available.

    Anyway isn't this a story a year or more old? I'm sure of seen that same video, or very similar, of guys opening cars a long, long time ago.

    Two amusing points:

    1) "Not even the auto makers know how it is done". Well of course not, they never do. If they knew they would not have designed their crappy locks like that.

    2) The insurance guys name, "Bender"

    Further: "In an emergency, a normal key could open the car." Yeah right, normal keys are even less secure. Checkout DEFCON for why.
  • LoopyBytelooseLoopyByteloose Posts: 12,537
    edited 2014-06-24 10:09
    Why Pi? Well is is a good inexpensive credit card sized mass storage device that is programmable in C and ideal for a hand-held device. Just the kind of device the Russian Mafia loves to work with. They use the Nvidia video cards to hack encryption and the massive parallel processing in their video cards is ideal for such.

    Sure there are a thousand other solutions, but these guys grab whatever they can that is easy and cheap. I don't think the 32k Propeller would be the easiest for them. They do know Linux and C.

    Don't be so sensitive. I did say any microprocessor will support it. But databases do usually mean a file system and an SOC chip provides all that.

    I suppose it may just be an IPhone modification. R U happy.
  • Heater.Heater. Posts: 21,230
    edited 2014-06-24 10:19
    Sensitive, who me ?

    I was just curious why you homed in on the Pi. Database probably implies file system. File system can be done on a Propeller or a million other devices.

    The big question here is what is the hole in the wireless link protocol?
  • ercoerco Posts: 20,256
    edited 2014-06-24 10:35
    Not sure about the Russian Mafia, but I love a good conspiracy theory as much as anyone. If these units suddenly appeared in multiple places, there is the possibility that a common source is enabling all these coordinated break-ins, which appear to be stealing the vehicle contents, not stealing the car. With GPS and Lojack tracking, that's still too risky. So now that the security genie is out of the bottle, hacking a car's wireless is quicker and easier than picking a mechanical lock. I wonder if there's a patch to prevent this from happening.

    I wonder how the bad guys operate. Is it a franchise, and a commission, or a pyramid scheme? I'll tell two friends and we all get the hardware for free if we give 20% of the loot back? Honor system, right?
  • LoopyBytelooseLoopyByteloose Posts: 12,537
    edited 2014-06-24 11:07
    My dad loved his cars. We had an Alfa Romeo Spyder, a Lancia Apia, a couple of MBs.

    Since he was a medical doctor he demanded that we never lock the car and leave nothing of value in it. There was always a hospital parking lot decal on the windows. And that meant drug addicts would smash windows or break the lock if the car wasn't open.

    The Alfa was stolen though. The next door neighbor's son took the space house key and went joy ridding while the family was on vacation.

    +++++++++++++++++
    Given a big data base in a file system, won't the Raspberry Pi out perform the Propeller. It is about the search speed that I am thinking. And with millions sold, the police would never track down the source that is modifying them.

    I guess I just have a criminal mind.
  • GenetixGenetix Posts: 1,754
    edited 2014-06-24 13:47
    More people are aware of the Arduino than the Propeller but without understanding how the device works it's difficult to determine what it's made with.
  • GadgetmanGadgetman Posts: 2,436
    edited 2014-06-24 14:09
    Databases are funny...

    If the database only contains fixed-length fields, you don't really need a traditional file-system.
    Actually, you don't need a file-system even if the fields aren't fixed-length.
    All you really need is a storage that is large enough and a way of accessing it in a timely manner.

    But my guess is that the device is a simple recorder/player. It may have been placed near the car earlier(in a parking lot maybe.) and it recorded the unlocking sequence when the owner got into his car and drove off. Then they just follow the owner(or find his address sme other way) and do a late night visit and replay the code sequence.
    They may also have used a sensitive antenna to 'snipe' the transmission at a distance.
  • GordonMcCombGordonMcComb Posts: 3,366
    edited 2014-06-24 14:09
    The issue is not what microcontroller (or what programming language) they're using, but the poor security in things like coded car and garage systems. A long time ago the banks realized a determined thief could -- often in less than 10 tries -- guess someone's password for their ATM card. So nearly all banks flag the account if more than three bad attempts. If the card was accepted into the ATM machine, the machine keeps it.

    These keyless entry systems youlc *easily* be programmed to simply stop accepting the codes after the first five or six bad ones in quick succession. You're not going to get that many even in a packed car garage. The only time it would occur is when someone is trying to hack into the system.

    As for recording the codes, the *good* security systems don't allow this either. The keyfob sends out a keyed signal that is a hash unique between the car and the controller. The system will never use the same code twice, because the hashed result is always different.

    Car theft is very lucrative. There are two ways to largely prevent it: either get an alarm system that was programmed by someone with more than just a basic understanding of security, or drive a Corvair.
  • Heater.Heater. Posts: 21,230
    edited 2014-06-24 14:25
    Gordon,
    These keyless entry systems youlc *easily* be programmed to simply stop accepting the codes after the first five or six bad ones in quick succession. You're not going to get that many even in a packed car garage. The only time it would occur is when someone is trying to hack into the system.
    Oh I would have fun if car locks worked like that and I were a teenager. We'd be "bricking" peoples cars all day long just for the fun of it. We can't get in but, ha ha, neither can the owner.

    Not an acceptable solution.
  • GadgetmanGadgetman Posts: 2,436
    edited 2014-06-24 14:44
    The 'denial' function of a lock could be set to reset after 10 seconds...
    A brute-force system needs to spew out thousands of codes to find the right code to unlock a car. So even a short period where the lock doesn't accept new codes will be an effective deterrent, especially if the lock doesn't signal in any way that it is in 'denial' mode.

    The Hashed codes...
    This assumes that the algorithm used to create these codes is any good...
    If the algorithm is as poor as many others used(ever seen one of those that has been peer-reviewed?) it may be possible to guesstimate other codes if you can recover one or more transmissions.
  • GordonMcCombGordonMcComb Posts: 3,366
    edited 2014-06-24 14:58
    Heater. wrote: »
    Gordon,

    Oh I would have fun if car locks worked like that and I were a teenager. We'd be "bricking" peoples cars all day long just for the fun of it. We can't get in but, ha ha, neither can the owner.

    Not an acceptable solution.

    Not at all how they work. The time out only has to be for a few seconds. In that period of time, hundreds of codes would have been ignored. Makes it much harder to come up with a match. In any such system I've seen the reset is less than a minute.

    GM, there's probably not a completely secure system anywhere on the planet, but being one-way only, hashes are pretty good while maintaining simplicity. If the hash solution ever got out there, the fobs for that model would be susceptible. But of course, you never rely (like they did for DVD encryption) on one system for everything going forward. Manufacturers have all the freedom to change their algorithms frequently. These things require matching keysets anyway.
  • ercoerco Posts: 20,256
    edited 2014-06-24 17:35
    ... or drive a Corvair.

    Phew, I haven't driven a Corvair in ten years!
  • LoopyBytelooseLoopyByteloose Posts: 12,537
    edited 2014-06-24 23:57
    With my VW Bug, I was lucky if the door locks would decide to let me it. There were many times in a downpour that I ended up soaking wet before a door would open.

    If you don't leave anything of value in the car, you don't have to lock it and these thieves will move on.

    There was a time in San Francisco when just about everyone in the city that parked on the street had a busted trunk lock. Thieves would just hammer in a big screwdriver and turn until something gave and the trunk opened. It stopped when people just quit fixing the locks.

    If you make the perfect lock, they will just smash the window.
  • Too_Many_ToolsToo_Many_Tools Posts: 765
    edited 2014-06-25 00:43
    Not at all how they work. The time out only has to be for a few seconds. In that period of time, hundreds of codes would have been ignored. Makes it much harder to come up with a match. In any such system I've seen the reset is less than a minute.

    GM, there's probably not a completely secure system anywhere on the planet, but being one-way only, hashes are pretty good while maintaining simplicity. If the hash solution ever got out there, the fobs for that model would be susceptible. But of course, you never rely (like they did for DVD encryption) on one system for everything going forward. Manufacturers have all the freedom to change their algorithms frequently. These things require matching keysets anyway.

    Bet you somebody outsourced this .... ;<)
  • TorTor Posts: 2,010
    edited 2014-06-25 02:53
    If you make the perfect lock, they will just smash the window.
    That is the problem. Criminals aren't bound to play by the rules. But many people believe they do, including those who impose security rules here and there. And those who think it's a good idea to collect and store all data traffic to catch certain illegal internet activity.

    But you can't catch fish if your net is impenetrable.

    -Tor
  • GadgetmanGadgetman Posts: 2,436
    edited 2014-06-25 03:33
    Sure you can...

    But you need to know where the fish is beforehand so that you an set the net around it...
  • lardomlardom Posts: 1,659
    edited 2014-06-25 06:34
    What if a new code was created each time the key was in the ignition switch? Several levels of encryption hard wired would be tough to crack.
  • GordonMcCombGordonMcComb Posts: 3,366
    edited 2014-06-25 15:06
    Bet you somebody outsourced this .... ;<)

    I haven't bought a new car in a long time, but most of the really good security systems are third-party add-ons. Unless it's built into the car, you should never buy the security system installed by the dealer. The thing costs maybe $35, and they charge something like $350. If you fall for that, they have some undercoating protection to sell you, too...
  • NWCCTVNWCCTV Posts: 3,629
    edited 2014-06-26 19:46
    ignition switch?
    Apparently all auto manufacturers are moving away from keys, especially after the GM fiasco. The news program I watched said in roughly 5 years keys will be a thing of the past.
  • LoopyBytelooseLoopyByteloose Posts: 12,537
    edited 2014-06-27 01:11
    As long as the wealthy expect valet parking and are willing to hand their keys over to a parking attendent while they dine for a few hours, the situation is rather hopeless.

    The parking attendent can help some one copy the key, the radio codes, and gain the home address off the car registration and insurance info in the car. It seems obvious that this is why the theifts are happening in a place like Long Beach. You dine out frequently and park your car overnight in the open.
Sign In or Register to comment.