Slashdot Mirror
Hacker Helps Family Recover Minivan After Losing One-Of-A-Kind Car Key (bleepingcomputer.com)
An anonymous reader writes: A hacker and a mechanic have helped a family regain access to their hybrid car after they've lost their one-of-a-kind car key while on vacation. The car in question is a Toyota Estima minivan, which a Canadian family bought reused and imported from Japan. When they did so, they received only one key, which the father says he lost when he bent down to tie his son's shoelaces.
Because it was a hybrid and the on-board computer was synced to the battery recharge cycles, the car owner couldn't simply replace the car key without risking the car battery to overcharge and catch fire. After offering a reward, going viral on Facebook, in Canadian media, and attempting to find the lost keys using crows, the family finally accepted the help of a local hacker who stripped the car apart and reprogrammed the car immobilizer with new car keys. The whole ordeal cost the family two months of their lives and around $3,500.
Because it was a hybrid and the on-board computer was synced to the battery recharge cycles, the car owner couldn't simply replace the car key without risking the car battery to overcharge and catch fire. After offering a reward, going viral on Facebook, in Canadian media, and attempting to find the lost keys using crows, the family finally accepted the help of a local hacker who stripped the car apart and reprogrammed the car immobilizer with new car keys. The whole ordeal cost the family two months of their lives and around $3,500.
Why would anyone buy a car like that?
owner couldn't simply replace the car key without risking the car battery to overcharge and catch fire
That's a thing?
Crows? Seriously?
" on-board computer was synced to the battery recharge cycles, the car owner couldn't simply replace the car key without risking the car battery to overcharge and catch fire"
Really? You mean the computer cannot detect the charge level of the battery and act appropriately. Sounds broken by design if it really works that way.
This was at the top of the list when advising my 20 something child on buying a car. That wouldn't have helped this family on vacation, at least not right away. However, for the price of these keys and the car itself, it should be as normal as getting four tires.
I really don't want a smart key I've been careful and lost one already.
I've been tempted to just wire my key into my car, so regular keys would just work.
as an average creimer post. Head hurts... Pain...
Now that they have posted pictures of their analog keys, I hope they have replaced those too.
Using the VIN number, they can reproduce ANY key for ANY model the manufacturer carries. Sure it may be a bit of a hassle but with proof of ownership, any dealer can reproduce the keys. I've done it a number of time, a key just to get in the car is often free and a smart key can cost $150-250.
For $3500 you could've flown to Japan, gone down to their HQ and flown back with a key.
Custom electronics and digital signage for your business: www.evcircuits.com
With a megasquirt after the ECU and the keys decided not to like each other. Semi modern cars are wonderful!
batteries could charge until they explode so no safety cut off? if the system fails?
also what is next the system fails if any non dealer work is done?
First of all, SOP after getting your hands on a key for something (car, house, etc) is to make a copy. Smart, dumb, doesn't matter, make one ASAP.
Secondly, "Hacker Helps Family Recover Minivan After Losing One-Of-A-Kind Car Key" sounds like a benevolent clever person decided to give these people a hand out of kindness or for the challenge. Then they mention a reward.
More like "opportunist decides to claim reward".
And finally
Because it was a hybrid and the on-board computer was synced to the battery recharge cycles, the car owner couldn't simply replace the car key without risking the car battery to overcharge and catch fire.
I... what?
i like to slap my ass and go WEE WEE WEE all the way home!
What!? You have to replace the key, and there is some uncontrollable/unresettable battery charging failure? I find that difficult to believe. It suggests that the on-board estimate of battery capacity (which goes down over time, and has to be considered when recharging) somehow gets reset when you replace the key, and that this is somehow uncorrectable. Or alternately, that it writes the battery capacity to the key somehow, which seems inconceivable.
Add to that the fact that you can go to any dealer and get a key with the same code (which means the on-board software has no idea that it is different) for something like a few hundred dollars, and there is a bit of a fishy smell about this story.
I am pretty sure that Toyota did not fail to consider the possibility of a lost key, and if you try to replace it, the car blows up/catches fire.
All they needed was a new blank cut and Toyota Techstream software with an OBD2 cable to add it to the ECU Immobilizer.
So then,,,,, if a hacker can make a new key, what was the point of these microchip keys again?
And anyway, why would they not just contact a dealer or the manufacturer in Japan to make some new keys, and overnight-ship them? Seems a lot cheaper than $3500 and faster than two months,,,
I recall reading at one point that such systems were "un-hackable",,,, tho that was a while back now. They don't say that much anymore.
"You keep using that word... I don't think it means what you think it means..."
RHD Japanese cars in Canada get no sympathy, people buy them because they are cheap and stupid, not the cars, the people. Every JDM car in Canada has stupid issues like this key thing (most of the story is retarded but the fact that the dealer can't get the key for them likely is not bullshit)
and every JDM car in canada is driven by an asshole who can't stay in their lane, signal or check the mirrors.
so I'm glad they pissed away all that time and money on it, it's an expensive lesson about being cheap and stupid.
This is similar to the bug they used in Operation Pacifier. That one they used a bug in the Adobe Flash plugin (it ignored TOR and went over standard IP).
I won't say they are unhackable, but they are a lot harder to steal than they used to be. In the old days the thief would use a screwdriver and force the lock to start the car. I remember all of the goofy alarm systems and other anti-theft systems that people came up with - they were all a pain, but getting your car stolen was even more of a pain. These days they basically need to use a tow truck.
Because it was a hybrid and the on-board computer was synced to the battery recharge cycles, the car owner couldn't simply replace the car key without risking the car battery to overcharge and catch fire.
...what?
systemd is Roko's Basilisk.
The specifics vary from one manufacturer to the next. With VW, there was a 4-digit PIN number in the ECU that you needed to adapt keys, and generally VW wouldn't give you that number. The people that can chip your engine generally have the know-how to retrieve that number - whether they will or not is another matter, but I had the PINs for both of our cars at one point. At one point, my wife had lost one of her keys. We had another made and paid thee dealer $$ to adapt it. Then we found the missing key. By then I had the PIN number, so I re-adapt the keys myself with a laptop and special software that I already had on-hand. I suspect a lot of the pain here is that since the vehicle was out of market that the local dealers couldn't help.
I posted upthread but modern cars often have fairly involved networks onboard with multiple systems where serialized modules are "known" to the network as secure. Tamper with the module, and dealer software can refuse to work. There is a cottage industry of people disassembling electronic modules and doing "brain transplants" by transplanting an EPROM or affixing a kludged daughterboard to new ones so that dealer computers are willing to talk to the car. Yes, the dealers can do something, but they often quote entire subsystem replacements, multiple units and 5-6 figures so that all the components are "new" and "match" (i.e. come from the factory already talking), so customers end up buying a grey-market ECU or whatever unit, then shipping their old one and the new one to transplanters to do the switch.
The article was nonspecific, but I imagine it was more like for the dealer to do it the "right way per the dealer" they'd have had to ship the car back to its original market, then shell out half its value to have a bunch of stuff replaced/reprogrammed.
If you can only get a dealer quote from overseas, and the dealer quote is like $10k on top of that, then "impossible" is an apropos word.
STOP . AMERICA . NOW
Does anyone know just how much this particular model of car is selling for used?
Because at 3500 CDN or USD I would think it is dangerously close to being cheaper to sell the vehicle whole or for parts and buying a new one than paying that much for repairs.
If I had to spend $3500 and hire a hacker, I'd want that custom immobilizer never to immobilize again. A purely mechanical key would be fine.
So why won't you jail him?
"the car owner couldn't simply replace the car key without risking the car battery to overcharge and catch fire"
Yeah, that sounds almost plausable. Michael Bay, is this your car?
Are people so stupid that they can't spot fake stories like this?
Here is a little clue: "they were trying to find the lost keys using crows"
Aren't these two the same? What if the two of them walk into a bar?
Remember when you could just go to the hardware store and get keys made for a few bucks? I bought a new car recently and the damn dealership already lost a key fob even before car was even sold. Apparently according to the guy they sent me too this happens a lot. They have a guy on call that basically goes around to dealership programing keys. Costs somewhere around $200 or more for a key fob. I thought to myself, what a bunch of idiots at these dealerships to loose these keys even before the damn car is sold. Push button start is the absolute worst ideal engineers have ever had with cars. Anymore I would rather fix up a old car with crank windows, old style stereo, and 4 speed manual shift, with a old straight six then today's finicky technology cars. All these high tech cars will be crap in 5 years and too expensive to repair.
They were idiots the moment they accepted for delivery a car with only one key, any car, period. Because any sensible person would have said to the dealer, I want a backup key. In most cases the dealer would just oblige. In this case, they would have quickly found out that there was only one key possible and then a sensible person would have said "oh my, that has the potential to be a real mess if I ever lost the key, which happens to people all the fricking time, so I'd better find another car."
But I also think it's possible there is a lot left out of this story. I find it hard to believe after all those shenannigans that it wasn't just as cheap to junk the car and buy another used car with the $3500 they spent on getting this one running. $3500 and months of lost time is a lot to throw at a brick.
If you buy a newer used car that has an electronic key, and you only get one key, it's ALWAYS worth the $200 something to go to the dealer and get an extra before this happens.
-- I am. Therefore, I think!
I doubt a new key would be $3,500
Maybe $1,000 at the most.
Yes. The whole story is more or less BS.
1) who buys a RHD car as an import from JP for use in Canada ?
2) Battery exploding after losing track of charge cycles. Complete and utter bullshit.
3) Dealer cannot reprogram the Immo. could be.
4) Manufacturer cannot reprogram the Immo. Bullshit.
5) key image is photoshopped
aaaaaaa
So, car manufacturers, why don't you store the number of battery charge cycles in something that wouldn't get lost, like... the battery? :/
Just so they can act all smug that they have a "hybrid" Those silly vehicle cost more to produce, and have more of a carbon footprint than a traditional vehicle, have more toxic materials...but, because they are "green" everyone overlooks that!
Google this: Toyota Estima
(the Japanese means "lost the key").
I found 3 sites immediately that discuss Toyota Estima. A couple mentioned charges of about 80 USD while another seemed more detailed. It seems that it is a difficult job that requires rewriting the car's computer, but that it can be done in 60 minutes. They quote a cost of about $165 for Osaka area.
TFA says the Japanese partner (should be Toyota) could not do it and that the importer split the cost so they paid around $2000. It sounds expensive but conceivably there was no cheaper alternative in their location, and since they got the importer to pay half it sounds like the importer also could have already tried to help.
https://translate.google.com/t...
https://translate.google.com/t...
This is absolute bullshit. That's not how battery chargers work.
I live in Japan and am super into cars.
You usually get 2 to 4 keys with a new car, always 2 standard with fob/chip, often 1 backup key without fob/chip, and sometimes 1 "valet" key. When you get the keys you get a code tag that you use to order additional keys at any time - loose the tag and you can still order as long as you have an existing key, but you need to send the key in to have the tag info cross referenced. So basically as long as you don't loose the tag and *all* of the fob/chip keys you're totally fine.
And the whole issue was due to the immobilizer, which was DOING EXACTLY WHAT IT WAS SUPPOSED TO BE DOING. The idea is it makes it very difficult to hot-wire a car, and even if someone does somehow (with a trailer?) steal your car they won't be able to actually use it or sell it without putting in a huge amount of effort.
So what do you do if you loose all your keys and tag? You bring it to the dealer or an authorized/licensed mechanic who deals with that brand and have the immobilizer unit replaced. I just looked it up, and the cost for that on a newer Estima looks to be about $900USD.
The dealer/importer should have been able to figure this out much easier but I'm guessing they're just one of those places that grabs cache stock from auto auctions and kludges the paperwork.
If you happen to have an upper-level car (in my case Model S), you can run an app on your tablet or smartphone that links to your car and can be used in place of your car's key to open the doors, start the engine, and drive off. There is the downside that this fails if either your phone or the car cant make a cellular connection (or, usually, local WiFi).
But no key required here.
https://app.box.com/WitthoftResume Code: https://github.com/cellocgw
Attach a Tile and a Trackr Bravo next time. You're a moron.