The Guy Selling Wireless Tech to Steal Luxury Cars

> "Honestly I can tell you that I have not stolen a car with technology," Evan told Motherboard. "It's very easy to do but the way I see it: why would I get my hands dirty when I can make money just selling the tools to other people."

I know there's a fine line here and it probably varies by jurisdiction, but aren't there laws that depend on your intention? As in, if they guy would sell this with intentions of good use or even with no intentions at all, even if they knew there existed bad uses, it would be legal, but if they sell it with the intention that it would be given a bad use it would be illegal.

I mean, here they're saying that their intention is for buyers to use them to steal cars.

I'm ok with their ability to sell it. I'm not sure how I feel with the way they're openly admitting that they expect to make their money from people stealing cars.

Good smart lightbulbs (was it Ikea?) nowadays have time-of-flight protection against remote attackers with high-gain antennas. You need to physically be within xx centimeters of the device, or else the signals take too long and are discarded. I can't believe car manufacturers haven't thought of that.

The relay attack is pretty wild but it also sounds like all these years later all these cars are mostly using an ancient cipher.

The Cipher was broken so badly that as far back as 2005 it was published how to break it, and it has still never been changed.

If you have regular access to the car (parking garage) you can just break the cipher if you see it on more than one day... no need to relay at all, and no protections against the relay attack would stop it from working.

It's a 40-bit cipher but because of a weakness you can calculate down to 2^16 possible keys and then come back on another day and break it very quickly at which point you've essentially got your own key to the car.

Car manufacturers seem have have had a pretty relaxed attitude to security for ever:

https://www.youtube.com/watch?v=0v1PRHTpK2c

We stored our keys in Faraday cage pouches[0] to (hopefully) prevent this attack. Of course when you're out and about, bringing a Faraday pouch with you is a bit cumbersome.

[0] https://www.amazon.com/gp/product/B01HETGX00

If he's selling the high end model for $12,000 how many cars would you need to steal? I can't imagine the value of stolen car is much considering most have gps tracking and serialized parts

Luxury? Keyless entry and ignition is quickly becoming standard. My 2014 Mazda 6, and my 2018 VW Passat are not luxury cars.