Volvo Wants You To Ditch Car Keys For Its New Smartphone App (dailydot.com)
An anonymous reader quotes an article on DailyDot: Lending your car to a friend could be as easy as sending a text. That's the future Volvo is imaging with its smartphone app that enables keyless entry for the driver -- and anyone with permission to enter. Announced earlier this year and now prominently on display at the New York International Auto Show, the app does away with key fobs and puts the key right on the user's phone. Using the device's Bluetooth capability, the app can do just about everything that a standard key could do -- from unlocking the doors to popping open the trunk to even starting the engine of the vehicle without turning the ignition. Beyond just convenience for the primary holder, the Volvo app also allows others to take the wheel without requiring a physical key. Users are able to grant digital keys to others, allowing them temporary or ongoing access to the car.
Someone will forget to charge their phone when parked in the desert.
134340: I am not a number. I am a free planet!
... that this will be secured in a fashion consistent with the auto industry's stellar record on vehicle security.
Sounds exactly like what Tesla has had for several years now.
This is great news, particularly since Bluetooth is so secure. And nothing could ever go wrong here.
I'm an American. I love this country and the freedoms that we used to have.
I'm not sure how this is more convenient for the main user... compare "get keys out of pocket, click button, put keys in ignition" to "get phone out of pocket, unlock phone, open app, press button on app"... OK, it's one less thing to carry, but then you'd probably end up carrying the keys anyway as backup in case your phone died or the app crashed.
I've been experimenting with home automation. While having lights come on automatically via various rules is nice, it's a pain to go into the app to turn them on and off manually when you need to - easier to get up, walk across the room and flick a switch. This feels similar - a solution in search of a problem
Sigs are so 1990s. No way would I be seen dead with one.
Modern app appers know that ONLY apps can app apps, so when app appers app their car using apps, their car will get apped by an app apping app who apps apps!
Apps!
Everything. So much easier now to hotwire a care.
2016 Jeep, the app on my phone will start the car and unlock the doors - all via wifi connection. Bluetooth unlocks the doors as I approach and touch the door handle (driver or passenger side).
I keep cars through multiple tech cycles. Any car I buy this year, I expect to still be driving as my primary car when only the greybeards remember what Bluetooth was. Stick with dedicated hardware for my car, please.
Sounds exactly like what Tesla has had for several years now.
And now this article .... so, that guy wasn't a smart-ass when I joked that I was going to become a car thief and he said, "There's an app for that."
I know just how often phones get lost or are stolen.
It's way more often than car keys are lost.
At a restaurant, you don't set you car keys on the table while eating. You don't generally set your keys on the counter while paying. You don't have your keys in your hand while walking around not paying attention to your surroundings.
And if all I have to do is push a button to start your car once I have your phone...
We had keys specifically so that a physical device is required. That's a security feature. Otherwise, a combination lock would let anyone with knowledge of the combination to enter -- which could easily be sent by text message.
I don't lend my car to random people, on a whim, without them having a key already. Sorry, that's not a thing.
And, again, I don't need remote access to my car, any more than I needed remote access to my VCR's eject button.
....two weeks ago at the Apple store (iSight camera replacement).
It was like 2-3 hour turnaround, and I left my phone at the store and drove home and then drove back later when it was finished.
I think this is a pretty stupid concept unless it's totally supplementary/optional to having a fob of some sort. My existing Volvo keyless drive fob has an actual key that can be pulled out. I only ever use it to activate the valet lock (locks the glove box and trunk), but if I recall what they told me when I picked it up it can also unlock the driver's door and somehow allow you to start the car, too.
I like the keyless drive setup and can't begin to see how a smartphone app would be more convenient than either a pushbutton fob or even analog keys. The last thing I want to do in -20F is fuck around with my phone and ungloved hand to unlock the damn car.
This goes right up there dangerous ideas like Amazon using a Selfie as a password. Just steal your phone, and bonus...in addition to getting all the data from that phone (who encrypts there phone properly, I ask you...), you'll get their car as well. (Besides doesn't the government claim to having a potential way of bypassing the encryption they were trying to force Apple to break?).
"Imagination is more important than knowledge" - Einstein
what they aren't telling you is who else they have given 'permission' to enter** to
** and start or stop the engine.. or degrade performance of the engine.. or fake running out of fuel... or track your location.. or view 'black box data'... see how fast you're going... or listen in on built-in speakerphone... or look at feeds from car mounted cameras..........
What's wrong with carrying a key fob? So if someone steals my phone they also, by extension, steal my car? Sorry...I'm not willing to put that on a device (phone) that is often stolen and frequently hacked.
I give it about 2.5 hours before it's cracked the first time.
Tesla, a company with roots in technology and computers sucks at security. Microsoft, Google, Apple and slews of others (including the overwhelming Linux, FreeBSD, OpenBSD, etc... community) could not on the best day make Bluetooth secure. I'm buying a BMW i3 right now which is extremely smart phone friendly and already know that simply because it's made by BMW it's an open hack fest since BMW is great at making things like drive trains and leather seats, when it comes to anything electronic, they're idiots.
So, here comes the infamous Volvo... a company who specializes in making automotive dinosaurs and they're going to make technology like this?
I believe Amy (Big Bang Theory) explained Volvo best when she made the statement "She was the only girl who would pass out drunk at wild college parties and wake up with more clothes on". That's Volvo in a nut shell... they could sell cars without any locks or security and people still wouldn't steal them.
Lost your phone? Phone got stolen? Phone ran out of battery? App suddenly won't open? Phone suddenly died? Phone dropped and smashed?
Guess you're walking home then.
That's assuming the car will even be there when you get back to it. Chances are within a month of release an exploit will be found enabling anyone to open and start your car.
Ok, the concept is kind of cool but the immediate question has to be 'What could POSSIBLY go wrong with THIS?'...
Seriously, until these companies coming out with fancy networked tricks can demonstrate they know once ONE about security in their existing vehicles or with respect to the privacy of our data I'll stay away from this like the plague.
For reasons others mentioned (dead battery, etc) it's likely not a total replacement for a key or fob. However, it could be a great extension or companion to a key or fob. E.G. if you lost your fob, or you want to grant access to a friend, to either drive the car, or retrieve items from the car, that part is cool. Even if the bluetooth raises a security concern (and I doubt current key fobs are much if any better), at least with a smart phone app there is the possibility to update the app and fix security issues unlike key fobs.
I can just see this for my sister who loses her phone once a month...
Okay, insurance won't kill you, you might do it to yourself. NEVER EVER lend your car to someone. EVER. In most jurisdictions, if you have an accident, it goes on your personal insurance record, and the insurance record of the car owner. If you own your own car, that means no double dipping. If you lend your car an accident ruins not only your buddy's insurance, but yours too.
You would have to be close family for me to not be pissed off over that. Like a spouse (usually an exception in most laws for that) or my kids (no exception, but they have to learn somehow and most people don't buy their kids their own cars). Everyone else can go to Hertz.
so late one rainy night my husband was leaving a gig (database monkey by day, sax player in a wedding band by night) and dropped his phone in a puddle while juggling his phone into his pocket while carrying all his gear after texting me he was on his way home once he got his money. He fished it out and the screen died out right then, he was 2 hours away. It was 1 AM, if I had to drive out there it would be 3AM before I got there and 5AM when I got back home. Granting access to other devices would be all well and good, but he wasn't carpooling with anyone and if he had to stop on his way home (gas???), he'd be stuck, so even if I had a key on my phone that I could issue to someone else who wasn't physically present, he could still wind up stuck somewhere. There's also the time someone stole his phone out of the *locked* greenroom everyone left their equipment in.
Even fobs usually contain a physical key inside, so if the battery's dead, the driver can still unlock the door. How would one do that if they just have the smartphone app?
What's the point of remote access to any device that is useful only if you are physically present near it?
No sig today.
...you insensitive clod.
No, seriously. I don't have a phone. If I did have a phone, I wouldn't carry it everywhere. This is the opposite of useful.
and if a rent a car place does this you may be on the hook for buying them a new car if it is stolen.
Motor Trend would be disappointed. They dedicated 3 paragraphs of SUV of the year to the Volvo key fob...
Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
Good job, Volvo.
Sigh..
It is if you need to get in to the car to pop the hood (or trunk depending on model) to charge the battery!!
Or are you just planning to walk away and buy a new car?
Seriously, why does every damn thing now need to be controlled by a cellphone? It makes zero sense to network the security of your car.
BeauHD. Worst editor since kdawson.
I've got that already:
"Nope."
Bluetooth is just a way of transmitting data. It doesn't need to be secure. You can send encrypted data over any channel securely. Furthermore, with existing public key cryptography, the private key never leaves the device anyway.
Can you imagine a bad iOS patch or similar bricking thousands of... Volvo keys? Hilarious!
Why on earth would you use public key crypto in an embedded device? The cert alone is many KB - what a waste. Program the remote initially with the same symmetric key the car has, then use zero-information proof of identity (challenge-response) to authenticate - lightweight and more secure than anything with public/private keypairs.
Socialism: a lie told by totalitarians and believed by fools.
Those key fobs are dang expensive. I also would have more control (given a key-revocation scheme) over who has my keys.
And unlock it for the first random who walks past.
Just another dumb idea in what seems lately like a long string of dumb ideas.
Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
So now when you lose your phone, you will have no money, no way to get into your car, have no idea where you are (GPS/map) and no ability to contact someone you can help because you have no clue what anyone's phone numbers are any more, and then on top of that just hand Volvo the key to everything about you since it's a godamn app on your phone and of course would need access to everything, just because.
How about not only no, but go fuck a goat Volvo no.
I for one do not buy into this whole my car is a smart phone bullshit. My car is a car. With a very strong emphasis on the world "MY". If it get's to the point where that is not that case anymore then I'll just drive my old beast until it rusts out from underneath me and give a double middle finger to the car companies on ever buying another.
Key exchange is a security issue. If you get a new phone with a new key, having public key crypto means you don't need to do private key exchange. I don't see how symmetric keys are more secure than asymmetric keys. If anything I would say the opposite is true because of the reason I already stated. Please enlighten me.
Even if I already have a phone, that doesn't necessarily make it a compatible phone. It could be an older Android phone. Or it could be a Windows Phone. Or it could even be a flip phone that just makes and receives calls and receives texts, which the carrier is willing to activate without a data plan.
more like a oil change lock out that makes the check engine light come / and fail smog tests and it's a easy code to reset but they sue jiffy lube for doing it / telling the car owners how to reset it.
I was talking about a keyfob (very limited embedded device), not Volvo's goofy app.
Out-of-band key exchange (e.g., you stick the blank keyfob into a special device) is as secure as your out-of-band process, which can be made more secure than anything done wirelessly.
A phone is different, as it's possible to steal the key stored on a phone without stealing the phone, given an exploit or two. A phone can also easily manage the size of certs and the required processing power. Much different trade-off there.
There are plenty of embedded devices than simply don't have the power to do asymmetric crypto - a problem we struggled with when working on the standard for tape drive hardware encryption.
I don't see how symmetric keys are more secure than asymmetric keys.
Just the theory behind the two. The security for all asymmetric crypto is based on unproven assumptions about the difficulty of some class of problems. A math breakthrough could render any given asymmetric algorithm trivial. Symmetric cyphers (at least the good ones) aren't. E.g., quantum computers don't help at all with AES.
Socialism: a lie told by totalitarians and believed by fools.
Hmm... just when we were starting to think about a Volvo. The "convenience" of this is of little to concern to me. The potential for hacking- much, much more so.
I'm kind of amazed ANYONE thinks this is something people even need- much less a good idea if you think of the potential problems.
Once again- too many people sitting around in offices trying to convince themselves that their idea is brilliant, while *solving* problems that don't really exist in the real world.
Volvo isn't the pre-1999 version of Volvo you're thinking of.. that would actually be *much better*... as of 2010, it's Chinese-owned.. so therefore, today's Volvo will include innovative security technology from prominent Chinese companies, including easy-to-diagnose wireless data transmissions (read: unencrypted), and convenience passwords for maintenance and repair shops (read: fleet-wide default).
of course, we all know how secure Bluetooth is...
Political debates have me rolling my eyes so much I think I got optical whiplash. I should sue. - Foamy The Squirrel
Just the theory behind the two. The security for all asymmetric crypto is based on unproven assumptions about the difficulty of some class of problems. A math breakthrough could render any given asymmetric algorithm trivial. Symmetric cyphers (at least the good ones) aren't. E.g., quantum computers don't help at all with AES.
And if there is ever a solution to the discrete logarithm problem, stolen cars will be the least of our problems, not to mention that a software solution lends itself to updates than a hardware solution.
That seems like an extraordinarily bad idea. What could possibly go wrong, eh.
...that there are some people who's cars really deserved to be keyed.
Without car keys handy, there will be a little less justice in the world.
I live in Norway... Volvo here is as classy as a Ford Fiesta or an AMC Gremlin. As far as I know, even Swedes wouldn't want to be seen in one.
We're talking about an app that will likely weigh in at 195megs to download and a car that probably has 60 microcontrollers with a protocol that transfers up to 24mbit/sec. Public key is ok.... in fact, public key can be used for the whole exchange, it can't be more than a few bytes.
/dev/gpio is child's play. Bluetooth is such a massive cludge that just the radio code is practically a premade rootkit.
That said, hacking into public key encryption is not realistic.
Hacking the Linux Bluetooth stack and writing to
I know what you mean. I live in Luxembourg and the whole Petite Bourgeoisie drives Audis or beamers. (said the Volvo owner) PS: Honestly, what's (really) wrong with Volvos?
So when I get mugged and releaved of my cash and phone, I can't use Uber nor use Apple pay to take the subway nor open my car to drive home where I can't get in because my front door is opened by my phone as well.
SEE FBI crack of phones why this IS BAD
My brother recently bought a Volvo that has an app - he can start the car, set the temp, find the car etc. Volvo provided 90 days free access but in order to keep using the app he needs to purchase a monthly data plan.
Can you imagine having to pay a monthly access fee for your Car Keys? Is it worth: $10, $20, $30 to you?
It's taken a number of decades, but wow, talk about a car company losing its way. So... do you have to use your phone to lock the doors once you're inside the car? Turn on the headlights? Apply the parking brake? Blow the horn? Can we think of any better way to make a single point of failure than to tie everything to a cell phone? I expect to see some event related to this appearing in the Weird News.
Smartphones are not reliable enough to be used as the only source of entry to a vehicle and not secure enough to be an alternate source of entry to a vehicle. Nor is the user interface efficient enough that you would want to use them for controlling vehicle functions rather than using a knob or button on the car itself. Nor do you want people with their head buried in their smartphone while trying to drive the vehicle. Nor does everyone have nor want a smartphone. A many times better solution which already works is a keyless entry fob with a physical key inside in case the battery dies. Stop trying to make smartphones do tasks which are better done with tools specific to the task. Yes, a smartphone can drive a nail, but you will go through a lot of screens before the nail is completely pounded in.
If you are not allowed to question your government then the government has answered your question.
Yes - I'm not so worried about the any specific form of crypto behind SSH/SSL going away - there have been enough exploits now that we've gotten good at wholesale replacement/upgrades. Would suck if it "broke" keyless entry on cars though.
Socialism: a lie told by totalitarians and believed by fools.
I don't think you could be anymore spot on about BMW and electronics. A friend of mine had a BMW which would short out and stop working in any significant rain storm. Some critical electrical bit was placed in a metal tray which was positioned perfectly to catch runoff from somewhere. So whenever it was raining more than a drizzle you just couldn't take it as transportation because it would likely short out and refuse to start again until it dried out.
Well, if it were software based, there is a good chance the software could be updated (cheap) rather than hardware replaced (expensive).
Cars last much longer than smartphones.
50 years old Volvos are not uncommon in Europe.
iOS and Android will be gone by then - how will I open that car ?
I own a 66 Mustang - the keys still work just fine
You seriously realize this shit is all in place and you're a bunch of asinine idiots coming up with retarded what-if scenarios.
No?
Oh, well, now you do.
Hey Vegeta, what's the phone say about the car's power level?
It's dead Jim.
Back in the day they had this thing called a manual transmission. They had this other thing called an ignition coil which used it's own power lead(s) from the alternator. These two things together allowed starting a car using nothing more than gravity or a good push. (Yes, ECU & fuel pump power, etc. etc.)
Interestingly, this is still the case on many motorcycles sold in the US. They are also easier to push, cost less, get 40+MPG, and have no ODB 2 electronics. They can also be parked in places where a car won't fit, and (trump mode engage!) have absolutely no other downside what so ever!
But seriously, if you want an electronics free vehicle, there are options...