Volkswagen Created A 'Backdoor' To Basically All Its Cars… And Now Hackers Can Open All Of Them
from the backdoors-are-bad-m'kay? dept
And… for our latest example for why requiring companies to build backdoors into encryption or similar technologies is a bad idea comes from automaker Volkswagen. Researchers are now revealing that approximately 100 million VW vehicles can be easily opened via a simple wireless hack. The underlying issue: a static key used on basically all of the wireless locks in VWs.
The researchers found that with some ?tedious reverse engineering? of one component inside a Volkswagen?s internal network, they were able to extract a single cryptographic key value shared among millions of Volkswagen vehicles. By then using their radio hardware to intercept another value that?s unique to the target vehicle and included in the signal sent every time a driver presses the key fob?s buttons, they can combine the two supposedly secret numbers to clone the key fob and access to the car. ?You only need to eavesdrop once,? says Birmingham researcher David Oswald. ?From that point on you can make a clone of the original remote control that locks and unlocks a vehicle as many times as you want.?
In other words, VW created a backdoor, and assumed that it would remain hidden. But it did not.
This is exactly the kind of point that we’ve been making about the problems of requiring any kind of backdoor and not enabling strong encryption. Using a single encryption key across every device is simply bad security. Forcing any kind of backdoor into any security system creates just these kinds of vulnerabilities — and eventually someone’s going to figure out how they work.
On a related note, the article points out that the researchers who found this vulnerability are the same ones who also found another vulnerability a few years ago that allowed them to start the ignition of a bunch of VW vehicles. And VW’s response… was to sue them and try to keep the vulnerability secret for nearly two years. Perhaps, rather than trying to sue these researchers, they should have thrown a bunch of money at them to continue their work, alert VW and help VW make their cars safer and better protected.
Filed Under: backdoors, cars, encryption, hackers, research
Companies: volkswagen
Comments on “Volkswagen Created A 'Backdoor' To Basically All Its Cars… And Now Hackers Can Open All Of Them”
What's the harm?
So one exploit allows you to unlock the vehicle, another allows you to start it, what possible use could those two exploits have to anyone with nefarious intent?
Re: What's the harm?
Staring the VW while it’s inside someone’s garage. Carbon monoxide, etc.
Re: Re: Simple solution
Outlaw garages.
Re: What's the harm?
Terrorists will mass start vehicles all over the world to cause a combo of global warming and shortage of hydrocarbons. Unless the evil empire of the West embraces some God.
TERROR!
Ahem.
Re: What's the harm?
We need to make a law to stop these criminals from doing the crime!
Re: Re: going after the criminals
BRB. Shorting VW…
Re: Re:
You’ve got a BUNCH of shortin’ to do… the researchers apparently disclosed to VW (who has responded energetically) late last year, but is still working through the disclosure-and-response process with several other manufacturers.
Re: Re: Re:
Well, that does not surprice me at all. I have a very strobg feeling this sort of hack will soon be extended to ALL cars sold since 1995. I mean, serioulsy, can you really expect an encryption scheme developed to work in a car in 1995 stand any chance against modern computers?
Good thing though, I am sure it is easy to just update your fob and car with the upcoming security update!
As bad as this is, it’s limited by the technology of the time. Today’s vehicles have the potential for more harm.
Re: Re:
You mean like almost every vehicle produced by VW till 2016 wouldn’t rely on a 10-yr-old+ security scheme? Would it? Derp.
Re: Re:
According to the linked article, the problem affects “close to all the 100 million” vehicles sold in the last twenty years. Only the most recent (basically, current) model years of some cars are not affected.
Not what you think.
Hey guys, this is not a back door. More like a passenger side door. Where they can get in, but the consumer is still behind the wheel. So it is a okay.
Somewhere in a corner office at the FBI James Comey’s eyes are welling up with tears of joy that his message on how backdoors are needed is finally coming to fruition
Re: Re:
What about those of us who prefer a hatchback?
Look at it another way
They’re just trying to help police / FBI get into people’s cars without a trace. For example, when you are in your car, the door is locked and the police are screaming / demanding to search your car for no stated reason.
If Apple would be as cooperative as VW, then the police / FBI could search your phone too.
And VW’s backdoor unlock technique would never be abused. Hear that Apple! (sarcasm)
this is why i don’t drive hatch-backs
They didn’t use that Magic Unicorn Powder (TM) produced by pixies. That’s why they failed. But our implementation of the Magic Gate (TM) with a Golden Key (TM) will be flawless. – Law enforcement
Simple, really
VW just needs to make sure the backdoor key only works for good guys. Duh.
Re: Simple, really
I prefer the Mr. Bean method of car security myself.
It's easier and cheaper to pay lawyers to suppress unwelcome news...
Than it is to, you know, ACTUALLY DO YOUR JOB. At least until the customer lawsuits start in earnest. Then it’s easier and cheaper to pay off politicians to change the laws so that you’re not liable…
VW needs to nerd harder
Sounds like VW needs to nerd harder. We all know you can have back doors/golden keys that can only be used by the good guys.
But of course we all know how well suing someone will keep that information secret. I mean no one has ever heard of the Streisand effect, right?
One good thing!
One good thing out of this: we now have a real-life car analogy for encryption backdoors!
All they need to do is make reverse engineering something illegal.
Re: Re:
With DRM that’s close to already being the case. If you have to break or remove the DRM to have access to the core code in order to reverse engineer it then doing so is illegal.
Re: Re: Re:
That’s why I let the Library of Congress or Archive.org remove the DRM for me. Once that’s removed, I’m in the clear for personal use 🙂
Nerd Harder
“In other words, VW created a backdoor, and assumed that it would remain hidden. But it did not.”
VW did NOT nerd hard enough.
if it isn't broke don't fix it.
I know that most readers here focus a lot on security. However, there is a lot of other considerations that need to be made when designing a larger system of systems.
Using the same key for every car is silly from a security point of view. However when designing and manufacturing a product you can’t only consider security as the most important thing.
If they used different keys that would also mean needing to maintain different copies of the firmware or at least track which car has which key. Manufacturers also might need to have access to keys. Then if VW has to issue a recall for a firmware update it becomes a bigger hassle for repairmen, owners, manufacturers.
In the end maintaining multiple keys over 20+ years might be more expensive than issuing out a blanket update later on or replacing the car’s parts if needed.
Security costs money but the company might lose more than money if crap hits the fan.
I think in this particular case VW was just being lazy because it hadn’t been broken for so long they figured it was okay.
Just some stuff to consider.
Re: if it isn't broke don't fix it.
“If they used different keys that would also mean needing to maintain different copies of the firmware or at least track which car has which key. Manufacturers also might need to have access to keys.”
Ummm, no.
Re: if it isn't broke don't fix it.
Yeah that’s a nope, not how this stuff works.
Re: if it isn't broke don't fix it.
Physical keys: Unless you get a new set of locks installed, the manufacturer can look up your car and find the correct key code, and manufacture a new key from that. Had to get a NEW key made to the old code for my car because the key I had for the driver’s door was no longer working on the trunk due to 25 years of wear.
Any digital keys would require no significant additional database storage. And you can bet your boots that they do indeed retain (digital) key information. Any changes to the key (or fob) required by firmware updates would be retained as well … and the firmware update would be added to the record for your car.
As the data is stored per-car, the firmware portion of the key can be varied per car as well.
Remember that this attack captures the “user” portion of the key via the fob. So long as the firmware key is not varied per-car, a simple dictionary attack will crack the car open easily.
Heck, if the key size is small enough, you can brute force it even if they vary it per-car. Especially as you have the fob’s key already.
… or you can simply gain access to the manufacturer’s database and game over, man.
Whose bright idea was it to make your car radio controlled in the first place?
Re: Re: if it isn't broke don't fix it.
No firmware changes are required to support each car having a unique key. Also, there is no technical reason why the car manufacturer would have to have a record of the key that goes with each car.
“So long as the firmware key is not varied per-car, a simple dictionary attack will crack the car open easily.”
This isn’t correct. Most remote car unlockers use a rotating key system or a computational exchange, specifically to foil dictionary attacks or attackers sniffing the unlock signal to reproduce it. There are a few different ways this is done, some better than others, but the net effect is that a different key is needed for each unlock.
Re: Re: Re: if it isn't broke don't fix it.
VW: Officer Donut, arrest that man ! ! !
Re: if it isn't broke don't fix it.
They already do that, as each car comes with a unique key for the purchasers use.
When tech fails sometimes you have to KISS
Eh.. can’t you just pull the fuse for the power locks and use the key as was originally intended. Isn’t that why most cars have a physical key lock on the driver side door?
Shooting the messenger has been an accepted method of dealing with problems for millennia, and is just as effective now as it was on the first application.
>Volkswagen Created A ‘Backdoor’ To Basically All Its Cars […]
I believe they call it the trunk…
Re: Re:
Yes, although that is recent. In the old days, before it was leaked, they used to call it the hood.
This was planned, they needed a way to remotely flip the VW Beetle back over by popping the trunk!
Want to find out if your used car is stolen?
CarDotCheck is a UK Car History Check Web Portal, that specialises in generating car history reports for used cars such as outstanding finance, written-off, keeper history, <a href="https://cardotcheck.co.uk“>stolen car check</a> and much more.
Visit: <a href="https://cardotcheck.co.uk“>Stolen Car Check</a>
Find out if your car is stolen