Sponsored

Protect You Jeep From Being Stolen - CAN Bus Immobilizers Information Thread

ecidiego

Well-Known Member
First Name
Chris
Joined
Nov 3, 2021
Threads
62
Messages
3,634
Reaction score
5,585
Location
San Diego
Vehicle(s)
2021 Gladiator Mojave
Occupation
IT
This is literally a public, Google top hit 'how-to' thread for thieves to learn.

@JAY can't there be a private forum or something that requires 1 year of membership or something to join?
 
Last edited:

ShadowsPapa

Well-Known Member
First Name
Bill
Joined
Oct 12, 2019
Threads
247
Messages
40,514
Reaction score
54,041
Location
Runnells, Iowa
Vehicle(s)
'25 JTMX, '23 JLU 4xe, '82 SX4, '73 Javelin
Occupation
Retired auto mechanic, frmr gov't ntwrk security admin
Vehicle Showcase
3
When first powered on, the CAN Injector does nothing: it’s listening for a particular CAN message to know that the car is ready. When it receives this CAN message it does two things: it starts sending a burst of CAN messages (at about 20 times per second) and it activates that extra circuit connected to its CAN transceiver. The burst of CAN messages contains a ‘smart key is valid’ signal, and the gateway will relay this to the engine management ECU on the other bus. Normally, this would cause confusion on the control CAN bus: CAN messages from the real smart key controller would clash with the imposter messages from the CAN Injector, and this could prevent the gateway from forwarding the injected message. This is where that extra circuit comes in: it changes the way a CAN bus operates so that other ECUs on that bus cannot talk. The gateway can still listen to messages, and can of course still send messages on to the powertrain CAN bus. The burst repeats 20 times a second because the setup is fragile, and sometimes the gateway is not listening because its CAN hardware is resetting itself (because it thinks that being unable to talk is an indication of a fault - which in a way it is).

There is a ‘Play’ button on the JBL Bluetooth speaker case, and this is wired into the PIC18F chip. When this button is pressed, the burst of CAN messages changes slightly and they instruct the door ECU to unlock the doors (as if the ‘unlock’ button on the wireless key had been pressed). The thieves can then unhook the CAN Injector, get into the car, and drive it away.

Under 20 bucks worth of electronics, access to a twisted pair of CANbus wiring..........
 
OP
OP
dayusmc

dayusmc

Well-Known Member
Joined
Mar 6, 2023
Threads
60
Messages
969
Reaction score
698
Location
Jersey Shore
Vehicle(s)
2020 Gobi Mojave & 2022 JLU High-Tide
Occupation
Retired Marine
There is been a thousand posts on this way and that way
. No need to reinvent the wheel, can bus immobilizer have been used in the EU where car theft is out of control with success.
THIS IS NOT THAT DIFFICULT- buy a can bus immobilizer, like one I listed in the FIRST post, and have it installed by a good installer who can hide it appropriately or make a Tazer relocation harness, like I described in the First post and install it like I did by NOT grabbing the wires at the OBD port and hide it well and you will be fine.
Fake OBD ports? What is that going to do - Nothing.
Biggest problem, people jump in on a thread many pages deep and don’t read it from the start, then start replying to it with “fixes” or “cures” that have already been addressed.
For anyone reading this - GO BACK TO PAGE 1 OF THIS THREAD AND READ IT FROM THE BEGINNING - all this stuff people keep chiming in with has been addressed.
 

ShadowsPapa

Well-Known Member
First Name
Bill
Joined
Oct 12, 2019
Threads
247
Messages
40,514
Reaction score
54,041
Location
Runnells, Iowa
Vehicle(s)
'25 JTMX, '23 JLU 4xe, '82 SX4, '73 Javelin
Occupation
Retired auto mechanic, frmr gov't ntwrk security admin
Vehicle Showcase
3
There is been a thousand posts on this way and that way
. No need to reinvent the wheel, can bus immobilizer have been used in the EU where car theft is out of control with success.
THIS IS NOT THAT DIFFICULT- buy a can bus immobilizer, like one I listed in the FIRST post, and have it installed by a good installer who can hide it appropriately or make a Tazer relocation harness, like I described in the First post and install it like I did by NOT grabbing the wires at the OBD port and hide it well and you will be fine.
Fake OBD ports? What is that going to do - Nothing.
Biggest problem, people jump in on a thread many pages deep and don’t read it from the start, then start replying to it with “fixes” or “cures” that have already been addressed.
For anyone reading this - GO BACK TO PAGE 1 OF THIS THREAD AND READ IT FROM THE BEGINNING - all this stuff people keep chiming in with has been addressed.
Yes, basically my bit on how those injection attacks was to show - there's really no way short of something like you have written about to prevent such things.
100% - what you just said.
Sponsored

 
 







Top