[LINK] Thieves using a $17 power amplifier to break into cars with remote keyless systems

[Jim Birch]

David Lochrin wrote:

However I could imagine a break-in device which simply recorded the
> response when the owner was nearby and played it back when they were away,
> a form of man-in-the-middle attack


Does that mean there is no challenge/response protocol in this system?
Hard to believe - except that even more pissweak security mechanisms seem
to be regularly attempted by people who should know better.  I guess
nothing happens until the proximity sensor changes from a selling feature
to do-not-buy feature.

It might be possible to develop signalling strategies that detect a
repeater signal.  It might also be possible to backrev a good old entry
button (or an off switch) into the key.

Paywave could also add a button or some contacts to enable the card
response.

Jim