Thieves Use Proximity Key Fob Relays to Gain Access.

[ecidiego]

https://vod-progressive.akamaized.net/exp=1652907873~acl=/vimeo-prod-skyfire-std-us/01/879/21/529395389/2492239882.mp4~hmac=681ab23ca72cb5221962f11ff8672b2d8b3cb8804f2139d951a119b01677f8e3/vimeo-prod-skyfire-std-us/01/879/21/529395389/2492239882.mp4?filename=Factory+Fob+Disassembly.mp4.mp4

2:31 here in case anyone is interested. You don't need the fob circuitboard whatsoever to start the truck. Can go key only doing this. No RF signal to replay, no button presses to capture.

https://mythreedom.com/products/key_holder

I wonder how "Easy" it is to hotwire/start one of these without the RFID chip and no RF vector at all.

Sponsored

 

[Artsifrtsi]

https://vod-progressive.akamaized.net/exp=1652907873~acl=/vimeo-prod-skyfire-std-us/01/879/21/529395389/2492239882.mp4~hmac=681ab23ca72cb5221962f11ff8672b2d8b3cb8804f2139d951a119b01677f8e3/vimeo-prod-skyfire-std-us/01/879/21/529395389/2492239882.mp4?filename=Factory+Fob+Disassembly.mp4.mp4

2:31 here in case anyone is interested. You don't need the fob circuitboard whatsoever to start the truck. Can go key only doing this. No RF signal to replay, no button presses to capture.

https://mythreedom.com/products/key_holder

I wonder how "Easy" it is to hotwire/start one of these without the RFID chip and no RF vector at all.

The proximity door locks work via that RFID as well, correct?

If that's the case one could embed the RFID into something like a bracelet and never need to carry the fob at all... Or program a pet chip (or an encapsulated RFID chip of the correct protocol) and implant into your hand...

 

[ecidiego]

The proximity door locks work via that RFID as well, correct?

If that's the case one could embed the RFID into something like a bracelet and never need to carry the fob at all... Or program a pet chip (or an encapsulated RFID chip of the correct protocol) and implant into your hand...

I am not sure, they may just work off the active RF signal from the fob. The range is nearly 0 when using a passive RFID device which is why you literally have to touch the start button with it.

The antennas for the prox locks are in the pillars I think, with metal over them. I doubt you could get the chip close enough.

 

[ecidiego]

Disassembled Jeep fob with RFID circled. Probably no way to trigger prox locks with that. Can start the truck though.

 

[ecidiego]

Confirmed with Threedom in case any doubt!

Proximity attack = defeated
Keypress code attack = defeated

My plan is to have 2 setups:

Fob 1: Fully operational with battery. Keep in faraday box in house and use when going somewhere this isn't an issue.

Fob 2: Remove key and RFID, install onto Threedom key holder. Remove battery. Set aside. Use this when any concerns such as going out in the city etc.

@Threedom great stuff.

 

[Artsifrtsi]

Confirmed with Threedom in case any doubt!

@Threedom great stuff.

Well, that is indeed a bummer...

 

[redriderjf87]

That ain't going to unlock my doors nor get my truck out of gear so they can have at it

 

[ecidiego]

Well, that is indeed a bummer...

I'll let you know how I like it. I don't have prox locks tho so not as much of a downgrade. Back to using keys! I'm fine with that. I live in a major city and park my truck in the driveway so goodbye RF attacks.

 

[ecidiego]

@Threedom seems to be a great vendor.

 

[Medical_Bartender]

Disassembled Jeep fob with RFID circled. Probably no way to trigger prox locks with that. Can start the truck though.

Wait...so if my gladiator has manual windows/locks (aka big a$$ key fob with no buttons) I can disassemble my fob, take out that little thing you circled, attach it to any keyring of my choosing, and it'll start my vehicle???

please say yes. that would be awesome!

 

[ecidiego]

Wait...so if my gladiator has manual windows/locks (aka big a$$ key fob with no buttons) I can disassemble my fob, take out that little thing you circled, attach it to any keyring of my choosing, and it'll start my vehicle???

please say yes. that would be awesome!

Yes. You have to physically touch the key to the start button while pressing though....getting the area of the RFID as close as possible or you may have issues.

This exists so a dead fob won't cause a no start.

You'll need the Threedom key holder with RFID pocket. Pics above. Looks like removing the RFID can be a pain, so watch their videos. You lose or damage that thing you're out the cost for a $350 fob programmed by the dealer.

If you want to test, remove the battery from your fob. Touch the fob to the start button and press it.

 

[Medical_Bartender]

Yes. You have to physically touch the key to the start button while pressing though....getting the area of the RFID as close as possible or you may have issues.

This exists so a dead fob won't cause a no start.

You'll need the Threedom key holder with RFID pocket. Pics above. Looks like removing the RFID can be a pain, so watch their videos. You lose or damage that thing you're out the cost for a $350 fob programmed by the dealer.

Yes! Thank you. Even happier I ordered all manual stuff now that I can ditch the big fob.

 

[ShadowsPapa]

https://vod-progressive.akamaized.net/exp=1652907873~acl=/vimeo-prod-skyfire-std-us/01/879/21/529395389/2492239882.mp4~hmac=681ab23ca72cb5221962f11ff8672b2d8b3cb8804f2139d951a119b01677f8e3/vimeo-prod-skyfire-std-us/01/879/21/529395389/2492239882.mp4?filename=Factory+Fob+Disassembly.mp4.mp4

2:31 here in case anyone is interested. You don't need the fob circuitboard whatsoever to start the truck. Can go key only doing this. No RF signal to replay, no button presses to capture.

https://mythreedom.com/products/key_holder

I wonder how "Easy" it is to hotwire/start one of these without the RFID chip and no RF vector at all.

Not easy at all........
This would be similar to the chip in the key used a decade ago. If the key didn't have the right chip in it, you could turn the ignition switch with "a key" in it all you want, you ain't going anywhere.
You've almost duplicated what my Silverado had.

 

[ecidiego]

Yes! Thank you. Even happier I ordered all manual stuff now that I can ditch the big fob.

Even if you want to keep an RF fob for proximity START, Threedom has much smaller ones you put all your stuff into. The Mini.

I am not affiliated with them at all...just saw their ad today and checked it out. Saw their key holders mentioning RFID pocket and I'm like OH SHIT.

 

[ecidiego]

Not easy at all........
This would be similar to the chip in the key used a decade ago. If the key didn't have the right chip in it, you could turn the ignition switch with "a key" in it all you want, you ain't going anywhere.
You've almost duplicated what my Silverado had.

So the only remaining vector is tow truck or they bring their own ECM/SGW/BCM with fob, install that into my truck.....

Yeah the only remaining vector is tow truck. I'm good with that. Oh...and carjacking. Lol...not for a Gladi tho.

Sponsored