Yet another security threat.


http://dailym.ai/2rd9OZy G reg 2.5VM Vogue Portofino red 1991- 1999
V reg 2.5td P38 Rioja red 1999- 2006
53 reg td6 Vogue Oslo blue 2006- 2015
11 reg 4.4 TdV8 Vogue SE. Baltic blue 2015- date.
https://www.fullfatrr.com/forum/topic56162...tty+affair

It may unlock the car but does it allow it to be started?

I thought the smart key fob had to be physically present for the engine to start and steering lock disengage etc.
. 2021 D350 Fifty Edition - Carpathian Grey
2017 4.4 SDV8 Autobiography (2021-2024) - Santorini Black
2012 4.4 TDV8 Westminster (2016-2021) - Santorini Black

It only unlocks the vehicle, not starts it. All they can do is rob your belongings, and they'll just smash a window anyway if they see something. Makes no odds if they could start it as they just drag them on to a transporter if they want them. Suppose being able to start one would make it easy for the opportunist but they tend to take motors they think aren't tracked, ie, beemers and Defenders etc.

Once they get in through this keyless entry weakness, don't they plug into the OBD and then program a new key?

Since L322's in the UK don't have keyless entry, am I right that this is a L405 worry and not a L322?

. Cheers, Greg
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2011 Vogue SE 4.4 with lots of toys in Stornaway

Unless I'm much mistaken, they've been doing this for years on remote locking / unlocking vehicles. But they'll still need the smart key to start it unless, as said above, they can plug in and code a new key to start it. I was under the assumption that feature was dealer only though for obvious reasons.

I believe it started on Range Rovers (in this way) in 2013 with the introduction of keyless entry (L405). LR might have issued a software update to eliminate the OBD port hack, which is that people reprogram a new key via the port.

L322's are vulnerable via the ODB port unless you take some measures. But they'd have to break a window or get in somehow first.

This is my understanding after a good few hours, please let me know anyone if you know any different...

. Cheers, Greg
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2011 Vogue SE 4.4 with lots of toys in Stornaway

My tracker has the option to cut the power to the fuel pump via a relay, either automatically when it moves outside its geofence or when you send an SMS instruction.

Almost tempted to wire a manual version using a switch inside the car so I can leave it turned off when parked up....
. 2021 D350 Fifty Edition - Carpathian Grey
2017 4.4 SDV8 Autobiography (2021-2024) - Santorini Black
2012 4.4 TDV8 Westminster (2016-2021) - Santorini Black

I used to remove the rotor arm from the distributor when parking up my Dad's old Series 2a

Modern cars eh, they're just not secure  2007 Zermatt Silver TDV8 Vogue SE - now sold but was a great car!

god pal your showing your age

if they want it no matter what you do they will have it, I remember hearing a story years ago about a Ferrari being driven with mole grips due to the owner having the momo removable steering wheel in the house

Security is a hard thing, put to much out there your suggesting you have something worth protecting ( to you you fatty, to others could be anything) put no security on and you will have the opportunist's taking a gamble having a go

personaly if they nick it I would be happier, I never want to see it again, doing damage can cost more

Quote:

god pal your showing your age

We've still got a 2A, and I still have my D1

My Macan got stolen using this technology just weeks after delivery. I was actually thankful when it got written off as a result of the damage. I would never have wanted it back anyway. However, when replacing the car, I decided it was perhaps best to avoid the keyless entry and drive.

In my humble opinion, and having an inherent fear of tech, daft for someone my age, they can do a lot more than just steal your car by entering it. Its the same reason I never save 'home' into a car, and reset the previous destinations monthly. Ok, maybe I'm paranoid...  ------------------------------------------------------
Range Rover TDV8 4.4 Vogue (2011)
Audi TT Coupe (2015)
Porsche Macan (2016)
Porsche 997 Carrera 4S Coupe PDK (2008)
Rolls-Royce Silver Ghost (1922)
Rolls-Royce Wraith (1939)
Bentley Le Mans (1934)
Mercedes 300SL Gullwing Alloy (1955)
Jaguar XK120 OTS (1951)

Met a guy yesterday with a sticker over his webcam... Just how far do you go?

. Cheers, Greg
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2011 Vogue SE 4.4 with lots of toys in Stornaway

Paranoia knows no bounds........
. 2021 D350 Fifty Edition - Carpathian Grey
2017 4.4 SDV8 Autobiography (2021-2024) - Santorini Black
2012 4.4 TDV8 Westminster (2016-2021) - Santorini Black

so does anyone know:

1. Can 405's be made secure with a software update to eliminate the OBD port hack that allows people to reprogram a new key via the port?

2. Are L322's are vulnerable via the ODB port, but they'd have to break a window or get in somehow first?

Have done a lot a research on this and not 100% sure and would be good to understand for sure that these are the definite vulnerabilities.

. Cheers, Greg
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2011 Vogue SE 4.4 with lots of toys in Stornaway

L405s now have a read-only KVM, so new keys cannot be coded via the ODB. Older L405s get the read-only KVM fitted FOC.