Hacker Newsnew | past | comments | ask | show | jobs | submit | HackingInHeart's commentslogin

It is not fake, and Honda does NOT have rolling codes. This assumption is why the problem was never found. Even I assumed they had rolling codes until I performed a rolljam attack on a Honda and found that the keys NEVER expired, meaning they DO NOT ROLL.


Then do a simple video - press unlock or RES with the key in vehicle range. Record that RF Tx and then replay the message. See if it does the same operation on the vehicle. Preferably with the key not disappearing out of the frame.

Dude uC used for keys come withe special sections of rolling code to have extended lifetime compared to conventional EEPROM. Same way they come with Transponder built in.

P.S. And the second key in the frame as well...


You can also try it for yourself, but I'll gladly record a new demo soon.


Hello, I am the creator of this attack. I was very impressed by the traffic this URL drove to my Github. After reading closely:

No, it isn't fake. I'd love to show you more videos! This attack does require the target to use their FOB, the range that is required is quite long! This can be performed from great distances away. Though recreation of this part of the attack, we know it's possible to convert a "lock" command (or any command at all) into any other command, and unlike the rolljam attack, these codes will work forever (until the key gets reset by a dealer).


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: