Denis Laskov 🇮🇱Gone in 61 seconds.
The keys were left near the front door.
Dickon Hood@it4sec We need to make the manufacturers liable for this. These attacks have been known about for years -- plenty long enough to enact a fix -- and there's simply no excuse for them doing nothing.
CuriousMatter@dickon @it4sec I was just thinking that I've had a keyless push-button start car for 13 years, and I'm pretty sure I knew about this attack before I bought it. I assumed at some point, when cost allowed, they'd reduce the response time-out to limit the physical distance the signal could have traveled (distance bounding). I figured meanwhile, I'd live with the risk, I'm insured.
These days, my car has a strong theft deterrent: It's a 13yo sub-compact.
@CuriousMatter @it4sec Yeah, I think the main reason we're OK is that I drive an '07 reg, fairly beaten-up Golf, and t'other half's is a '13 reg Kia Cee'd with c. 100k mi on the clock.
But it's utterly disgraceful that the manufacturers have done nothing about this in well over a decade, and we all pay in higher insurance premiums as a result.
I mean, I'm not *surprised* -- their software practices are amazing for all the wrong reasons -- but that doesn't make it less of a disgrace.