5th Gen Theft

[BearsFanRyan]

I recently saw on the Chicago news how the gangs are coming to the suburbs now and stealing cars. One guy, in a nice fancy rich neighborhood who got his car stolen from his driveway said and I quote, "I guess the days of leaving the keys in the cup holder are over" REALLY?? If you are that dumb, you deserve to get your car stolen!

 

[BlackWorksInc]

The tech behind the rfid and remote key codes in Toyotas can be circumvented in seconds. Keys can be generated via vin. I'm sure the vin to key cut database is dark net public now.

Sort of how the GSM cell A5/1 cipher stream is easily circumvented now, or WEP.

Note: I would never take something that doesn't belong to me.

Not entirely sure how the Smart Keys are bypassed as that's a rolling code and a bit tougher to "Crack."

Keys aren't generated by VIN, the parts department has to input the VIN to the Toyota database to get a key code returned (a more involved process is required for "reseeding an immobilizer module). So I'm not entirely sure how they'd obtain the key code to cut a key without talking to Toyota (even locksmiths obtain the key codes this way and they are regulated and vetted pretty tightly these days.)

I'm not saying it's not possible, but it would require having a backdoor into various Toyota Servers without them ever noticing; which seems a bit unlikely.

 

[snapple13]

So I got a message from a friend. This 5th gen was stolen from the Oregon area. I'm in SoCal. He's stated that he's seen more of these postings as of late. Where do you guys live and what do you think. Deterrents?

[MENTION=138181]GzTEP[/MENTION] this 4runner was stolen in north vancouver, BC. not sure where u got oregon from lol

 

[mizzouxc]

Not entirely sure how the Smart Keys are bypassed as that's a rolling code and a bit tougher to "Crack."

Keys aren't generated by VIN, the parts department has to input the VIN to the Toyota database to get a key code returned (a more involved process is required for "reseeding an immobilizer module). So I'm not entirely sure how they'd obtain the key code to cut a key without talking to Toyota (even locksmiths obtain the key codes this way and they are regulated and vetted pretty tightly these days.)

I'm not saying it's not possible, but it would require having a backdoor into various Toyota Servers without them ever noticing; which seems a bit unlikely.

While technically true, my point is the rolling code system has inherent flaws and can be bypassed in approximately 15 seconds with a modern laptop, especially in the driveway parked overnight with the real key within about 200-500 feet. There's also a $17 device that can also bypass the security. In the black hat world, getting into systems is almost never accomplished via the more difficult front door. Exploits are performed that allow you to walk right in the back door. Doing things right (the dealer/toyota way) = hard, walking in the back door = easy.

I'll be 100% clear. How to make keys of any ~6 month old Toyota 4runner is now possible with the vin number. The database is public as is the correlation of the data in the database to cut a key. The OPM lost all of my most personal information required to get a clearance, it's fathomable (and true) that Toyota is vulnerable to the exact same attack(s).

Do some creative google searching on how to bypass the RFID found in 4runners. I'm not going to encourage or post that capability here.

Car companies are slow to introduce modern technology and security; just look at entune. What consumers and the public sees as "modern tech" to engineers like myself is 10 years old. While the public was watching star wars as complete science fiction in the 1970's, the military was building the F-117, a completely revolutionary aircraft. Heck, the public still flies planes from the 1950's with 5.9L engines producing less HP (210) than a 4runner using carbs and leaded fuel.

I'm just saying, 1990's security tech in 4runners is old and broken.

 

[GzTEP]

[MENTION=138181]GzTEP[/MENTION] this 4runner was stolen in north vancouver, BC. not sure where u got oregon from lol

Was on Instagram. Buddy just remembered it was somewhere in that vacinity I guess.