Black Hat Report - "Unlock via SMS" - Mercedes Benz SLK Forum

General Discussion Topics must pertain to all 3 generations of SLK - R170, R171 and R172

 
LinkBack Thread Tools
#1 Old 08-04-2011
aka John

 
UK-C200's Avatar
 
Join Date: May 2008
Location: Richmond, Tx
Vehicle: LHD Black SLK350, LHD Firemist SLK55
Other Toys: Nacra F18
Posts: 13,012
Country:
Chats: 1143
Mentioned: 13 Post(s)
Tagged: 0 Thread(s)
Quoted: 30 Post(s)
Thanks: 1,712
Thanked 2,920 Times in 2,028 Posts
(Thread Starter)
Black Hat Report - "Unlock via SMS"

Well, was bound to start happening as cars get dumped onto GSM networks. Be interesting to see how much detail he eventually releases. Immediate question that springs to mind is "Ok, so you can unlock the car doors. Do you know what car you've just unlocked?"


http://edition.cnn.com/2011/TECH/mob...ing/index.html



UK-C200 is offline  
The Following User Says Thank You to UK-C200 For This Useful Post:
Sponsored Links
Advertisement
 
#2 Old 08-04-2011
Registered Users
 
Join Date: Nov 2009
Location: Lebanon
Vehicle: 2001 Silver SLK230
Other Toys: 1991 Toyota 4Runner
Posts: 525
Country:
Chats: 2
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Thanks: 111
Thanked 106 Times in 79 Posts
Garage
You've definitely heard about that trick that if you lock your key in the car, you can have someone with the spare key call you on the cell phone and press the unlock key on the other end of the line and the car is unlocked!!

Anyway, the thing is, the more we get connected, the more vulnerable we become.
GusSLK is offline  
#3 Old 08-04-2011
Sadly Woolly has passed away

 
Woolly's Avatar
 
Join Date: Jun 2006
Location: Co. Durham, UK
Vehicle: SLK350 MT
Other Toys: CLK 270CDI (Slushbox!!)
Posts: 17,375
Country:
Chats: 1297
Mentioned: 10 Post(s)
Tagged: 0 Thread(s)
Quoted: 120 Post(s)
Thanks: 2,912
Thanked 3,515 Times in 2,416 Posts
Garage
Quote:
Originally Posted by GusSLK View Post
You've definitely heard about that trick that if you lock your key in the car, you can have someone with the spare key call you on the cell phone and press the unlock key on the other end of the line and the car is unlocked!!
Total myth - mobile phones do not operate in the frequency that would be required for this, and the receiver in the car requires an RF signal, not an audio one..






To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

MB SLK 350 Andradite Green (6 speed manual)

To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.


Woolly is offline  
The Following User Says Thank You to Woolly For This Useful Post:
 
#4 Old 08-04-2011
Premium Member
 
PropDr's Avatar
 
Join Date: Jun 2009
Location: Eugene,OR
Vehicle: 2008 SLK 55 AMG 030 with SC
Other Toys: 2012 Ford Raptor, 06 BMW R1200 RT
Posts: 3,248
Country:
Chats: 0
Mentioned: 4 Post(s)
Tagged: 0 Thread(s)
Quoted: 18 Post(s)
Thanks: 277
Thanked 622 Times in 455 Posts
Garage
They did it to a Subaru http://www.tgdaily.com/security-feat...k-car-via-text


To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

My Beautiful Black Walküre (Valkyrie)
PropDr is offline  
#5 Old 08-04-2011
Sadly Woolly has passed away

 
Woolly's Avatar
 
Join Date: Jun 2006
Location: Co. Durham, UK
Vehicle: SLK350 MT
Other Toys: CLK 270CDI (Slushbox!!)
Posts: 17,375
Country:
Chats: 1297
Mentioned: 10 Post(s)
Tagged: 0 Thread(s)
Quoted: 120 Post(s)
Thanks: 2,912
Thanked 3,515 Times in 2,416 Posts
Garage
Quote:
Originally Posted by PropDr View Post
That's what John originally posted, effectively hacking into the cars network, which obviously is possible. What Gus was alluding to was mimicking the RF signal from a key fob, and using the phone to 'transmit' the RF code which can't work.






To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

MB SLK 350 Andradite Green (6 speed manual)

To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.


Woolly is offline  
#6 Old 08-04-2011
aka John

 
UK-C200's Avatar
 
Join Date: May 2008
Location: Richmond, Tx
Vehicle: LHD Black SLK350, LHD Firemist SLK55
Other Toys: Nacra F18
Posts: 13,012
Country:
Chats: 1143
Mentioned: 13 Post(s)
Tagged: 0 Thread(s)
Quoted: 30 Post(s)
Thanks: 1,712
Thanked 2,920 Times in 2,028 Posts
(Thread Starter)
Yeah, and yeah. I sorta figured it had to be a man in the middle attack to work. When the mobile carriers started selling home pico cells, it was only a matter of time until someone hacked one.

Good news is that from what's been published so far, they would have to have the target car identified, have it registered with their pico cell, and then have the user legally unlock it. Then they have the code and where to send it...



UK-C200 is offline  
#7 Old 08-04-2011
Sadly Woolly has passed away

 
Woolly's Avatar
 
Join Date: Jun 2006
Location: Co. Durham, UK
Vehicle: SLK350 MT
Other Toys: CLK 270CDI (Slushbox!!)
Posts: 17,375
Country:
Chats: 1297
Mentioned: 10 Post(s)
Tagged: 0 Thread(s)
Quoted: 120 Post(s)
Thanks: 2,912
Thanked 3,515 Times in 2,416 Posts
Garage
Quote:
Originally Posted by UK-C200 View Post
. . . and then have the user legally unlock it. Then they have the code and where to send it...
Which (unless it's my car ) is going to happen on a fairly regular basis, so the cars key (encryption, not physical!! ) can be picked up fairly readily.






To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

MB SLK 350 Andradite Green (6 speed manual)

To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.


Woolly is offline  
#8 Old 08-04-2011
aka John

 
UK-C200's Avatar
 
Join Date: May 2008
Location: Richmond, Tx
Vehicle: LHD Black SLK350, LHD Firemist SLK55
Other Toys: Nacra F18
Posts: 13,012
Country:
Chats: 1143
Mentioned: 13 Post(s)
Tagged: 0 Thread(s)
Quoted: 30 Post(s)
Thanks: 1,712
Thanked 2,920 Times in 2,028 Posts
(Thread Starter)
Quote:
Originally Posted by Woolly View Post
Which (unless it's my car ) is going to happen on a fairly regular basis, so the cars key (encryption, not physical!! ) can be picked up fairly readily.

Nah, sorry - you have to have it unlocked via SMS for the hack to work - eg mBrace. The RF rotating keys are different....



UK-C200 is offline  
#9 Old 08-04-2011
Premium Member
 
PropDr's Avatar
 
Join Date: Jun 2009
Location: Eugene,OR
Vehicle: 2008 SLK 55 AMG 030 with SC
Other Toys: 2012 Ford Raptor, 06 BMW R1200 RT
Posts: 3,248
Country:
Chats: 0
Mentioned: 4 Post(s)
Tagged: 0 Thread(s)
Quoted: 18 Post(s)
Thanks: 277
Thanked 622 Times in 455 Posts
Garage
Quote:
Originally Posted by UK-C200 View Post
Nah, sorry - you have to have it unlocked via SMS for the hack to work - eg mBrace. The RF rotating keys are different....
That is the way I understand it!
Like a Smart Phone applet to remotely unlock and start some cars


To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

My Beautiful Black Walküre (Valkyrie)
PropDr is offline  
#10 Old 08-05-2011
Sadly Woolly has passed away

 
Woolly's Avatar
 
Join Date: Jun 2006
Location: Co. Durham, UK
Vehicle: SLK350 MT
Other Toys: CLK 270CDI (Slushbox!!)
Posts: 17,375
Country:
Chats: 1297
Mentioned: 10 Post(s)
Tagged: 0 Thread(s)
Quoted: 120 Post(s)
Thanks: 2,912
Thanked 3,515 Times in 2,416 Posts
Garage
Quote:
Originally Posted by UK-C200 View Post
Nah, sorry - you have to have it unlocked via SMS for the hack to work - eg mBrace. The RF rotating keys are different....







To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

MB SLK 350 Andradite Green (6 speed manual)

To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.


Woolly is offline  
#11 Old 08-05-2011
Registered Users
 
Join Date: Nov 2009
Location: Lebanon
Vehicle: 2001 Silver SLK230
Other Toys: 1991 Toyota 4Runner
Posts: 525
Country:
Chats: 2
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Thanks: 111
Thanked 106 Times in 79 Posts
Garage
Quote:
Originally Posted by Woolly View Post
Total myth - mobile phones do not operate in the frequency that would be required for this, and the receiver in the car requires an RF signal, not an audio one..
Just to make things clear, I believed in that thing as much as I believed in the "hanging the CD to avoid speed radars" thing!!
GusSLK is offline  
Sponsored Links
Advertisement
 
Reply

  Lower Navigation
Go Back   Mercedes Benz SLK Forum > General Discussion about Mercedes Benz SLKs > General Discussion

Bookmarks

Quick Reply
Message:
Options
Upload your files to MEGAUPLOAD
Upload your images to ImageShack

Register Now



In order to be able to post messages on the Mercedes Benz SLK Forum forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.

User Name:
Password
Please enter a password for your user account. Note that passwords are case-sensitive.

Password:


Confirm Password:
Email Address
Please enter a valid email address for yourself.

Email Address:
OR

Log-in











Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
User Tag List

Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page



Similar Threads
Thread Thread Starter Forum Replies Last Post
Blacked out slk230 AgentOnge SLK R170 General Discussion 27 08-22-2016 05:08 PM
R172 Detail Specs UK-C200 SLK R172 General Discussion 5 01-19-2011 05:10 PM
UK Auction report 15/01/09 TheLamb General Discussion 3 01-18-2009 02:36 PM
2009 SL65 AMG Black Series HwoALanG Off Topic 13 04-16-2008 02:31 PM

Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

 
For the best viewing experience please update your browser to Google Chrome
 

Clubs, Garage Plus vBulletin Plugins by Drive Thru Online, Inc.