If the attack causes the original key to no longer work, imo the major threat vector is someone sitting in a parking lot, capturing key presses, performing the attack, and forcing the user to tow+re-program the key as a nuisance, rather than stealing the vehicle

▲

mormegil 6 days ago | parent | next [-]

On what car do you _need_ the remote to enter and drive the car (having tow the only alternative to e.g. the remote battery dying)? In all cars I have used, you could just use the physical key if the remote failed.

	▲	randunel 6 days ago \| parent [-]
		My wife certainly doesn't know how to unlock and start the car without the "keyless" function. Every time the fob runs out of battery, she needs step by step instructions otherwise she's stuck there. She uses and sometimes programs SQL and API calls at work, but knows next to nothing about cars.

▲

summermusic 6 days ago | parent | prev | next [-]

In addition to being able to break in and steal anything that’s kept in the car

▲

ponector 6 days ago | parent [-]

One don't need any keys or other equipment for that. Glass is really fragile unless armored with foil.

	▲	kube-system 6 days ago \| parent [-]
		And still most thieves don't even bother with doing that, they simply walk around and find a car that was inadvertently left unlocked.

▲

protocolture 6 days ago | parent | prev | next [-]

Capture the lock as they walk into a store.

Take the car while they are in the store.

▲

boudin 6 days ago | parent | next [-]

I'm not sure this attack allows starting the car itself.

	▲	protocolture 4 days ago \| parent [-]
		https://i.blackhat.com/USA-22/Thursday/US-22-Csikor-RollBack...

▲

kube-system 6 days ago | parent | prev [-]

This is not that. Keyless radio and remote start radio are typically two different systems.

▲

goda90 6 days ago | parent | prev [-]

Even more nefarious is preventing the victim from using their vehicle as a refuge or escape from a dangerous situation such as an attempted murder or kidnapping.

	▲	kube-system 6 days ago \| parent [-]
		Might make for a good movie plot -- but if someone is putting that much thought into premeditating a murder, there's a lot more straightforward ways to trap someone other than elaborate hacking scenarios.