We Stole a Tesla with this $20 Device

[@charlesedwards4169]

Thank you! I always wanted a Tesla but couldn’t afford it until now! $20 is a steal.

[@higamerXD]

yea! well worth it for that price

[@TimoVerducci]

enjoy it! but tesla's have a tracking system on them. if its reported stolen the police will find it in under 15 mins lmao

[@dragonfrost5015]

hold up

[@rocketbroom4781]

@@TimoVerducci not if I strip the entire thing first

[@LeBornMajes]

@@TimoVerducci nord vpn

[@Ultra77737]

jeremiah definitely on a watch list for all the stuff he’s looking up

[@alexknouse9133]

If you're not on at least a few watchlists, are you really living?

[@memeconnect4489]

aren't we all

[@salmanazam9444]

@@alexknouse9133 😂😂 You have a point.

[@michaelluong6484]

Prob already on a list for interfering with radar...

[@themrjones]

I know he has friends with guns and big ass 100 round mags and auto reset triggers with a bump stocks. Probably sold some too the cartel by now. Did he ever pay you for that quarter pound you fronted him and how's the doctor shopping pill mill thing working or are you just getting the fake blues from your cartel connect. Kisses

[@Wilbsss]

I love how pleased yet simultaneously chill Sultan is with the "this makes me happy" whilst everyone is going off chops. Cool guy who enjoys his work, great to see.

[@knutlovhoiden]

Dude is an engineer. This is how they are.

[@stheil]

@@knutlovhoiden Am an engineer, can confirm. Guy was probably hootin' and hollerin' on the inside (and rightfully so) XD

[@Telesgoooo]

@@stheil too feckin right man just outsmarted Elon rofl 🤣😂 I would be extremely pumped on the inside aswell xD

[@lonzie]

@@Telesgoooo Teslas have an option to require a code to be typed in on the screen before you can drive it. It doesn't stop someone getting into the car but it does stop them driving away

[@ObeyCamp]

Talking about using the dark web and then doing a Google search after setting it to dark mode is one of the funniest bits I've seen in a while lmao. That got a genuine laugh out of me XD

[@billdude1564]

People will think that’s how you do it now.

[@ranss]

yeah that was the good stuff for sure

[@knopigames]

Yeah, bro That was so funny! Hahaahaa XD🤣😂

[@scitor]

Yeah, that cracked me up as well 😆 🤣

[@xnx304]

yeah, I laughed so hard 🤣🤣🤣

[@_korykordich_]

It’s great seeing Justin come more and more out of his shell. He seemed a little nervous at first (as I think we all would be) but now is handling these shows like a proper host! Glad to see it

[@shaneoz4006]

I won't lie I kinda felt his coyness but I was like it's only natural considering he's new and is in the company of larger than life characters but he's settling in good. I agree with you

[@RumHamwich]

He's definitely settling in really nice, I'm constantly amazed at all the people Donut adds, they're AMAZING! Please don't tell James and Nolan that Jeremiah is my new favorite ;)

[@scottbenton1822]

@@RumHamwich I think Jeremiah is a lot of people's favorite. But then again they're all awesome. Still wishing for an Up To Speed on Donut.

[@LoliLoveJuice]

so did everyone, james didnt start like what he is today, its pretty cool seeing the changes

[@muddyguns]

You guys are like the women on the View.. all gossip.

[@pimpinondemhos101]

I love this tutorial on how to steal modern vehicles. It’s about time Donut fights against the ridiculous car market we’re in right now

[@DoctorDipshits]

You say that like it’s going to end 😂

[@4DD1S0ND3W1TT]

I mean, we're going to have to start jailbreaking our cars to access features like heated seats so I feel like we'll be seeing more literal car hacks in the future.

[@randallracer]

@@4DD1S0ND3W1TT shit. Aint that the truth?

[@keithlarsen8423]

@@4DD1S0ND3W1TT "capitalism breeds innovation" the innovation

[@deluxejay69]

I hate to break it to you but old cars were even easier to steal. What are you even trying to say? My dad was a repo guy in the 70's and he had 20 keys on his key ring, and they would unlock and start literally every single car. Each manufacturer only ever made a couple of different cuts, and this practice took place well into the 90's.

[@-Jethro-]

Tesla offers a feature called “PIN to drive” which at least prevents the driving portion of this hack. I’m not sure what percentage of owners know about it or use it.

[@RetroExhibitCollective]

Not enough. A lot of owners don’t know much about their vehicles. It’s crazy, but I make sure to have the PIN to drive

[@-Jethro-]

@@RetroExhibitCollective True, it should probably be enabled by default. Also, it doesn’t prevent opening the doors.

[@kevinmontoya7318]

​@@RetroExhibitCollective they should make it thumbprint to drive, and have 5 slots of available thumbprints to use.

[@SimonSays137]

Except everyone's PIN is 42069

[@adamsiek6438]

This should be upvoted for all Tesla owners. I actually work in Cyber Security and this vuln was brought up about 6 months ago I believe. All Tesla owners should always set pin to drive. I do on mine.

[@yogybear3]

Whoever is editing these videos with the sound effects definitely needs a raise. It makes the videos much more entertaining and has me cracking up

[@davidk9382]

First thing I did was look for a comment about the sohnd design. Why is it so good LMAO

[@simonlyssyj5277]

Glad to see Justin comfortable in front of the camera, he's a great addition to the donut team.

[@monochrome_ilya]

I miss Aaron a lot!!

[@filipp_212]

Alternative title: *"Jeremiah trying to steal his own car for 11 minutes straight"*

[@WhopperJrNoCheese]

*”And then getting the shits”*

[@superdepressif6047]

@@WhopperJrNoCheese lmao

[@TheKoltenparker]

Also, if keyfobs use "rolling codes" how did he get into the Camero or James's car?

[@rohankoripalli]

@@TheKoltenparker they pressed unlock on the key once outside the range of the car. The car didn't detect the button press so that one code is active until the button is pressed again

[@superdepressif6047]

@@TheKoltenparker I think he recorded the key far from the car so the code wasn't "heard" making it still valid ? just speculating tho

[@buringfyra]

Me: laughing at a car that needs to be unlocked with $12 worth of supplies. My car: scared of a coathanger and some crossed wires.

[@falalogo]

I opened my own car in less than 30 seconds using a metal bucket bucket handle 🤡, and its not even that old, its a 2013 model

[@ianybanez6884]

@@falalogo I can unlock most cars in 30 seconds..... Do yourself a favor and invest in an alarm lol.

[@John-zp2jm]

@@ianybanez6884 I can’t afford it 😭 I only have an Apple air tag so if they steal it I’ll at least know where they left it

[@KamenRiderGumo]

I once got into my 1994 Buick with a sword. Got on a small ladder, pried the top part of the door away from the frame and slid the blade of a decorative Highlander claymore in he gap to hit the unlock button.

[@johannkuhn5685]

There are ways to mess with thieves. Some ways (depending on the car) would mean that they could only drive maybe a block or so. Others can REALLY mess with them to the point of deterring further attempts to steal the car. The trick is to get creative, and stay away from off-the-shelf systems. Sure, some cars can be started with literally two lengths of wire (no breaking panels, no cutting wiring, no punching the ignition barrel, once you're in the engine bay it's really that simple). But there are still ways to protect a car even if that's the case.

[@jochemw97]

The editing team and animators are delivering top notch work!!

[@reuben583]

Love you boys... hope you continue to grow and prosper.

[@ummwhodidnt]

Same

[@asher666]

I give it another 30mins before this Video gets Gagged and NDA'd hope Donut don't get sued

[@Qqqqqqqqpodjd]

@Don't Read My Profile Photo nerd

[@darnellANDasher]

The amount of times they've given us the resources to steal stuff 😂

[@carnage50x]

The more awareness. The more pressure the auto industry has to make safer products. As well as, educate the public about false security products.

[@TheKoltenparker]

Except he didn't explain how he got the Camero or James's car open? He said the keyfobbs use "rolling codes" so they are constantly changing.. well how did he unlock it then?? 😂

[@imaadfaki5585]

@@TheKoltenparker Essentially when he recorded the unlock with the key the car didn't pick it up yet so the key is on the next code while the car is still on the previous code

[@misseselise3864]

or told us where to buy illegal stuff

[@rideroftheforce5245]

@@TheKoltenparker The code doesn't change if the car is out of range of the key. Notice how he kept going inside (out of range of the car) when he recorded the keys code.

[@andydufresne8034]

I'd love to see you guys do a whole series on security. Like how to avoid trackers and keep people from following you home and other useful tips and tricks we might not know.

[@pidzotech1322]

He just said switch off your Bluetooth. That's all you need to do for now 🤣

[@deletefacebook8419]

Take three lefts in a row and if they are still following you call 911

[@HairyCheese]

Andy, is that an apple air in your glovebox or does your gf not trust you?

[@biggwill21931]

@@deletefacebook8419 LOL!

[@2ProTecK]

@@HairyCheese your iphone or ipad will tell you there is a device tracking you.

[@scottmcelhiney323]

Left out that if you set PIN to drive, this won't help you steal the vehicle, you'd also have to hack the PIN number needed to start the car once you are in it.

[@dronyland]

Yup, setting that PIN to drive was the first thing I did, right after getting the Tesla ! 😁

[@DerFettePandaLP]

@@dronyland Pretty sure they already fixed this "hack", by having the App check the phones location when it recieves a bluetooth signal to open so dont worry lol

[@ydt_antony]

@@DerFettePandaLPthe easiest thing in the world is to mock your location both in iOS and android so what u just said is dumb

[@tannerlane9669]

All comes up when you put the vin into a website

[@DerFettePandaLP]

@@tannerlane9669 Bruh, the VIN tells you where the car was built and what configuration it is. It cant give you any informations about the PIN lmao

[@archerstown]

Being in Cybersecurity I've known just how just how fragile and insecure our world is. I love that you're doing videos on this to keep people aware. It doesn't need to teach them everything, just give them the basic knowledge to start with and continue their own research from there. (Also yeah hacking is not just plug and play but as you can see, it's not THAT hard...)

[@rzrxox]

dude you got Discord? i need some tips as i plan to become a pentester

[@s14dorikin]

I always say, “anything man-made can be man-hacked”. Where there’s a will, there’s a way.

[@theglitch99]

99.95% of ppl will do nothing with this info!!

[@dblackviper2k3]

The good old safety/security vs convenience tug of war

[@josepha.9952]

okay well tell that to Google. not research just a google search

[@shaneoz4006]

I love how James is like "you wanna steal my car, I know what the videos about"😂 You guys are just so cool. Love this channel

[@avalanche450]

Jeremiah and Justin killed it in this video as well as the production quality from the crew. It felt like I was watching a TV show the whole time. Would definitely watch something on a topic like this again.

[@Ryukachoo]

3:00 Are we not going to talk about the fact he's doing this while taking a sh!t

[@emmyali920]

I’m an old lady who watches these videos for all the handsome and funny young men. I LOVE Jeremiah and this was GREAT. Sorry to hear about your diarrhea buddy, hope you feel better. Justin, you did amazing sweetie!! Please keep these great eye candy videos coming!!! ❤️❤️

[@izjalen]

wtff😭

[@ummwhodidnt]

I’m a visual appearance redesign of a video game’s asset that watches these videos for all the handsome and funny….

[@YHK_YT]

Loool

[@richardidgaf8002]

Ayoooooo ?! There no way you dead ass someones dried up thirsty grandma. Either that or you gotta be smokin' that pack fr

[@ademaydogan3834]

AYOOO 📸📸

[@Portocala69]

Hardware cost: $ 20 Software, time, knowledge cost: $ 200.000

[@juanin200]

Didn't he mention he does it with free software?

[@Pienimusta]

Probably 100 different versions available in GitHub. So make the software, time, and knowledge more of 10 cents.

[@aiexzs]

vs code is free

[@kevinmenard6792]

@@cat-le1hf maybe your time is free but most people’s time has a value.

[@semahj]

@@juanin200 yeah but the knowledge to do it is what costs is what they’re saying

[@vitalino1981]

It's not just 20$. It's 20$ and years upon years of software and hardware engineering of the guy, who made it for You. Props to him 👍🏻

[@BatCaveOz]

Gosh, some people will look for any opportunity to complain.

[@SchleichDi]

@@BatCaveOzshuddup

[@thomasschwarting5108]

Honestly, is it worth it for someone to be so DISHONEST?

[@thunderb00m]

As an embedded software engineer, I could build the hack device system into a product in a month. No need of laptop. It would under 50 and probably be it easy enough for anyone to use, but I won't.

[@rikkirikki4892]

@@thomasschwarting5108 Yes. Tesla owners deserve to be stolen from.

[@riekumar6999]

This just made me feel less paranoid for setting a pin to drive, but even more paranoid that someone can break into my car at anytime with $20

[@sidneylorentz4810]

I imagine turning on PIN to drive would also keep someone from driving away in the car with this sort of attack. Still cool/crazy to see this in action though.

[@JaysonGamboa]

Probably, but it wouldn't really stop them from stealing all your stuff in the car

[@sidneylorentz4810]

@@JaysonGamboa stuff in your car, vs your $50,000 car.

[@valiumdemon]

@@sidneylorentz4810 what about $50,000 stuff in your car

[@-jackinspokane6648]

@@JaysonGamboa ...either would a brick

[@earlpipe9713]

I bet most people are unwilling to do dashboard only pin entry tho, as they want the pavlovian satisfaction of having the vehicle start when they press the fob

[@NoTimeForBreakfast244]

Mad props to Justin for stepping in halfway through and being able to pick up where Jerry left off, that couldn’t have been easy to do 😂

[@litecoinawarenessphoenix34]

I noticed alot of youtubers getting sick as of late. Wonder if its a trend..

[@billstevens720]

That guys cool as shit I hope you bring him back for other things. Dudes as sharp as that deserve more screen time

[@RikHeijmen]

Great vid! That's why I had an on-screen 4 digit pin code in my Tesla. Don't know of any other keyless entry car that has that.

[@lazarcrnadak9900]

Great video as usual, but we need old B2B series again!

[@Jonssi05]

Bro this video just came out 4 minute ago and its 11 mins long...

[@ChrisRaptisMGS_Greece]

@Don't Read My Profile Photo ok

[@Antoine_ZR1]

@@Jonssi05 lol

[@ummwhodidnt]

We need everything this channel blesses us with. Best all around channel in all of KZbin fr

[@ummwhodidnt]

@Don't Read My Profile Photo bro you aren’t doing anything…

[@SoCloseToToast]

Lol love the part where Justin has a little Donut cheering section

[@raven4k998]

I love how thieves watching this video are going to be lets steal some tesla's if he can do it so can we🤣

[@oliferous]

"STEAL! THAT! TESSLAAA!!! 🤣@@kokopellione

[@valfreyja2107]

Damn Jeremiah! You did some real solid investigative work!! Love this!

[@TheKoltenparker]

If keyfobs use rolling codes, how did he get into the camero or James's car?

[@alxkw6355]

@@TheKoltenparker Yeah it's that hard to understand ;) when you record the keyfob while out of range, this recorded code will work...just once. You'll need another press to record the next code...

[@Digojaim]

Shame that diarrhea got in his way

[@hiredgoon4269]

I think you mean liquid investigative work.

[@missionpassed4584]

In the future they will have to come up with something like a key that you will physically need.

[@club3g82]

Not really, such an easy way to keep someone from stealing your Tesla.

[@mikejost8112]

There is a key that comes with the car

[@torroloco95]

One thing I love about Donut is you don’t HAVE to be a black thumb or mechanic type to love there stuff. I love detailing cars , and can do basic oil changes and stuff and I feel like I’m part of the club

[@Neckername1]

I'd like to let you know (experience in infosec here) that rolling codes, even though they help, are inherently flawed, and therefore exploitable as well. If you say had that key sniffer posted at a place where people may frequent multiple times, like a parking lot for a place people work at; you can eventually get the entire rolling key if you capture enough unlock signals

[@cristianramos7343]

Yup, and then iterate all of them untill one works with the car

[@2ProTecK]

A parking lot would suck, you would have so many codes you wouldn't know which car they belong too.

[@jesseclutterbuck6617]

Rolling codes are good fun. Take the key out of range of the car. Press the key 300 times. Return key back to car. Rolling code is now out of sync with car. Key fob no longer works

[@2ProTecK]

@@jesseclutterbuck6617 except they are designed to resynch. What low budget keyfob are you using?

[@earlpipe9713]

Clever clever

[@brodymanandts]

In my old car I kept having stuff stolen out of my car. I though the first few times that I must have not locked my car. A cop finally came to my car and looked under the car and found a box with a receiver on it that was attached with a magnet. Apparently, its a big problem in cars that are parked in the same location often. Like people who have to street park or park in their driveways. People put them on the car and come back the next day or a few days latter and they can easily get everything from the car. The cop told me the best way to solve this is by hitting lock twice. It picks up on the first code and not the second that is done in quick succession.

[@MarloSoBalJr]

I thought I had an OCD obsession with double- or even triple-tapping the lock on my key fob but turns outs to be a legit deterrent

[@brianmaher2662]

When cars were first stolen by relay attacks insurance companies were not paying out because in their minds if you still had both sets of keyfobs then it must have been an inside job.

[@litecoinawarenessphoenix34]

So the cops where stealing from you.

[@kanedaku]

I don't know if thats true or not for your cars made for the US market; but in the UK, and stated in the Vauxhall manual, it explains that if you hit lock twice, what that disables is the proximity sensor so your car wont unlock until the key is pressed again, and therefore not by the signal being close by (either your approach to the car or by relay attack). Best to just disable the proximity sensor soon as you get your car. More secure, even before relay attacks started back in the day.

[@RedJerk5]

I usually lock my car with the switch on the inside so there isn't a signal being broadcast

[@CKM_808]

Thieves watching this: "WRITE THAT DOWN WRITE THAT DOWN"

[@Dreamzzz3]

My friend's 2019 CRV was stolen last year from the parking lot of his grocery store using a ~20$ Signal Amplifier. They amplified his signal while he was inside and they just left with the car. He later saw the CCTV footage and no one could tell that they were stealing that car. It just looked super casual and quick as if you unlocked the car with a key. Few days later the police found the car at the port waiting to be shipped in a container. (Possibly in Russia as it's the most sought after car model there). Edit: The CRV is keyless entry and start, that's why they could pull this off with just the amplifier

[@justina3506]

Dudes pulled a Gone in 60 Seconds move

[@maxistudios3092]

Most likely to be shipped somewhere in West Africa.

[@Hi-db5cd]

@@maxistudios3092 or balkans.

[@keyherobln]

this amplifier they used is this 15k one he showed in the video

[@Sniperboy5551]

@dennisoeztuerkk No it’s not, it’s incredibly cheap to make something like this as long as you understand electrical hardware and programming.

[@AlcornOfficial]

I love this channel and it makes me really happy to see this video, I'm very into cyber security and i think it's important for people to see these vulnerabilities in action so they know how realistic it is in a day-to-day scenario and are maybe able to take better precautions on to help themselves stay secure

[@Randomperson0467]

Scam

[@kshitijchavanphoto]

Bluetooth had vulnerabilities since the day it was launched, i remember back in nokia times you can reverse bluetooth access anyones phone like full access lol

[@asher666]

It got so Bad in UK / Europe they started fitting Bluetooth Jammers in Bars 🍸

[@Alexlfm]

I’m not sure that I’d really classify this as a vulnerability. This sort of attack is always going to be inherent to this type of low-energy open protocol. Latency requirements mean that this requires a good Wi-Fi link, at minimum, between the two relays to work so it’s of limited usefulness unless one is a high value target.

[@ILoveTinfoilHats]

@@Alexlfm An outdoors wifi repeater can go miles in the right circumstance. And nothing states it has to be wifi. Something like 3G would have the bandwidth and latency to easily go dozens of miles, given enough power.

[@lasskinn474]

when did "reverse bluetooth full access" happen with early bluetooth nokias? heck the bootloaders didn't even get hacked until they weren't current. what was possible was to obex whatever over like .sis files or whatever and the owner of the phone might install it or not. edit: early s60 if you got the owner to pair it you could silent install through it same as nokia pc-suite, it was pretty handy for development.

[@Alexlfm]

@@ILoveTinfoilHats A cell connection won’t work. Latency limits are going to limit it to under 100ms of latency (at the most) and anything that goes out to the wider internet will introduce a higher chance of dropped or out of order packets. When you add in processing/OS overhead and the number of cycles that eats up, you need something with, I’d say no more then 10-20ms of latency for the link and ideally point to point. 2.4ghz Wi-Fi would likely be too slow and WAY too unreliable with interference leaving 5ghz which is going to have a limited range when not in line of sight.

[@RvGJK]

Great video! The cheapest way to protect your car from a relay attack, is wrap your car key up in tinfoil and fold it over itself. That will genuinely stop the signal from being able to be read. I use Costco foil, as it's better quality but it will work with any! For proof, give it a try for yourself. You shouldn't be able to open the doors even when the key is held against the car. Problem solved!! Now time to go grab a beer, an chill again haha

[@Nashcaster]

I’m a loser because I laughed too hard at the dark web and you clicked dark theme. Nailed it! 🤣🤣 🙌

[@emmyali920]

That was very funny!!

[@BikerTrashWolf]

Same. Wife couldn't understand why I was laughing

[@wontonii232]

Just gotta say I love how you guys filmed all around the office instead of in front of a lame green screen. We need to see more of the office in videos! Gives more of a bts feel that I like.

[@DillandShaj]

Justin is the perfect addition to the team, the last few videos he's been on have been very entertaining and just seems like a cool dude to be around!

[@jamesdrives993]

Forget the high tech locking system. I just take the steering wheel and gear knob with me.

[@jamaljones6568]

Vehicle markups are crazy thank you for showing me a cheaper way to get a car🙏🏾

[@hackman669]

Wait until market slows and buy a used older model. Less Hassel, less money 💰

[@finnmurtons8727]

I've said this before but for those with keyless entry systems, the best and cheapest way to foil a relay attack is to put your keys in a covered Danish cookie tin. The cookie tin acts as a faraday cage and does not allow RF out. Make sure the the container is 1) made of steel and 2) actually seals. Hope this helps.

[@adamsbja]

Doesn't fit in the pocket as easily though.

[@ChristAcolyte]

They sell copper mesh lined pouches that also do this same thing for wallets and passports.

[@GBR9794]

Doesn't work, the newest method now is to reprogram your key with OBD2 ports or your ECU while using factory keyfobs to unlock the door.

[@rabokarabekian409]

aluminium or mylar foil a BIT easier -n- cheaper, innit?

[@joesmith942]

What do you do with the cookies?

[@Charlielizard]

That was freaking incredible. High Five on the research.👍👍👍

[@johnkaprese36]

Turning bluetooth off is obviously not the solution. It’s a tesla, you don’t want to use it like a legacy car. Just turn on PIN to drive.

[@ScottyFlysFast]

Donuts next video: CAR THIEVES ARE GETTING OUT OF HAND

[@grojas1694]

As a telecom engineer, who likes cars, and works in the cybersecurity industry, I approve this video! (Except for the "dark web" part LOL)

[@GrumpyIan]

The dark web is just over rated. The site you found to buy that legally questionable basil is just going to scam you.

[@iwasnothere2]

It got sp00ky on the dark web.

[@jesseclutterbuck6617]

So you work for telecom in cyber security yet you approve a imsi catcher for public use?

[@jaskirat1999]

You can’t just turn your Bluetooth off when so many functions rely on it. A viable solution would be to activate pin-to-drive so no one can steal your car.

[@AveragePicker]

I’m not sure when the last time I turned Bluetooth on on my phone….nor can I think of anything I have that relies on it.

[@nietcykablyat9998]

@@AveragePicker I only have my Bluetooth on for music but honestly it would be a quick switch if I just plugged my phone in for that feature instead.

[@jaskirat1999]

@@AveragePicker I guess different people live different lives, I can’t remember the last time I turned it off. I use it for everything from smart locks, car key, music streaming, airdrop, even my digital scale pairs with bluetooth to record the data. Too many things stop working if I turn it off.

[@thierryvt]

@@AveragePicker most people don't live in the stone age though. A lot of people actually have stuff like bluetooth earbuds or headphones, or use it in their cars like a normal 21st century person lmao.

[@crimsondecade7420]

I never had my Bluetooth on until I got a Tesla and the first thing I did was enable pin to drive . I realize that someone can get into the car but in the past I left it unlocked anyways and if you have something expensive in the car they will break the window to get it .

[@yorkshire_tea_innit8097]

Another thing you can do is not leave your car keys near the front door or maybe put them in a faraday cage. As you can usually pick up a key fob to relay by standing next to someone's front door (in the middle of the night ofcourse).

[@Dallas_Blasek]

Genuinely love seeing things about cyber security on cars, I graduated this year in the field and it’s interesting to see another vector of attack on new tech

[@tesla_3_performance]

Should've used the "PIN to drive" feature; extra layer of security that this hack doesn't provide

[@Leeteezy]

I said the same thing, they should had added that to the video as variable. I believe most ppl use the pin to drive

[@currenlydying]

There's an exploit to pin to drive where you can still get the car to drive by sending a bluetooth command.

[@seevanmaroge]

As a internet and network specialist, this is scary. Airline carriers want to put this kind of tech into airplane cockpits. They don't want to follow the KISS rule.

[@AlexandarHullRichter]

Other than small GA craft, airplanes don't have security features beyond a locking cockpit door. They use being parked in secure areas, and the large amount of knowledge needed to start one up and fly it as their security. How do they want to apply this sort of tech in an airplane?

[@zaydabbas1609]

I'm also curious, how would this apply to passenger/commercial aircraft? Especially where pilots swap, revoking access seems like it would be an issue

[@exothermal.sprocket]

There's just stuff in this world that should NEVER EVER get digitized.

[@SvetGolovkin1462]

Donut Media is the MOST INFORMATIVE automotive channel in the goddamn planet! Uncle Jerē, James, Zach, Nolan, Eddie, and Freeman, thank you guys for doing this show. Legend status 👊🏿💯😎

[@namenamenamename7224]

This video slaps, more car software/hardware exploit content would be great!

[@thatoneguybrian2365]

Sus... Yo in got a friend called "AlibiAlibiAlibi"?? 🤣😂

[@guywhoknows4chords459]

This stuff is interesting! How about an exploit that controls your car and one where the car remotely shuts off during motion!

[@jiface]

Love Jerry’s solo vids, such a cheeky chap

[@Magicinstalls]

Seems to be the Bluetooth attack wouldn't work if you were aware of your surroundings

[@daveblock4061]

I have a 3 way foolproof system to keep thieves at bay: 1) Doors and ignition ONLY work with the key. 2) Battery interrupter key. 3) Manual gearbox. Bring a flatbed...

[@TheKoltenparker]

Also, keyfobs use rolling codes, so how did he open the camero and James's car?

[@cheesecurd100s]

@@TheKoltenparker older Camero like that won't use rolling code. And yeah problem around my area is a lot of cars/trucks get stolen with tow trucks

[@DragonKnightX12]

Switch to a card to a actually start the car. Or have a pin code required by the infotainment.

[@daveblock1688]

@@DragonKnightX12 A what?!

[@LinusAkaPano]

@@daveblock1688 Wtf why is there two of you, and why are you using different angles profile pictures?!

[@lj516]

Best Video Ever. I knew tesla's would be a prime target for this kind of attack! Great job guys!

[@bavarianhero]

Clean set up on the Catfish! What wheels are those?

[@mocheen4837]

Teslas can be tracked on the phone app. The app allows you to add a speed limiter or change the car to valet mode remotely. The cars also record you.

[@user-white007]

I’ve heard of hellcats getting stolen with the key in the house and they can just get close to the house to boost it enough to start and drive away. There is an update to stop this now tho

[@MarloSoBalJr]

Some Honda Accords are like that. You can legit just drive off without ever placing the key in the ignition

[@umernaeem6655]

It’s so great watching little bits and pieces of the donut office. Im pretty sure a lot of people, me included, would love it if you guys could do an office tour. 💛

[@theELiTEboarder]

Donut: Don't steal stuff Also Donut: Here's exactly how to steal stuff

[@lonyo5377]

"Here's how easy it is to steal stuff, be secure"

[@mossegaming]

The 15 second unskippable ad was worth it

[@keiseyku]

Btw if you're worried about fob relay/skimmers you can buy a fob signal blocking sleeve / faraday box to place your fob when at home or away. Apparently tinfoil works just as well.

[@keiseyku]

If you're really desperate then just take the fob battery out

[@alexknouse9133]

Foil can work, but a Faraday bag/pouch is the way to go. More expensive but much more convenient and reliable

[@Matij1648]

There's a company called NavTV that makes a specialized sleeve for certain batteries. The sleeve will cut power from flowing from the battery to the key when it detects the key hasn't been moved for like 10-15m or something like that. When it senses movement again, it closes the connection and allows the battery to power the key fob again. Pretty neat stuff.

[@alexknouse9133]

@@Matij1648 It sounds like cool tech, I'll have to give it a look. I think that KISS is the best policy when dealing with electronics more complicated than toasters, but that might just be me 😅

[@Ange1ofD4rkness]

@@Matij1648 Something like that seems rather large, and not something you could place on a keyfob battery

[@campbellgentle7418]

My parents are actually afraid of keyless entry to cars - now they have reason

[@AveragePicker]

Why? Key’ed entry has always been openable.

[@campbellgentle7418]

@@AveragePicker They are just afraid off new tech in general :\

[@hankwells2637]

Question: I have a RFID blocker on my wallet and it prevents my auto open from working when my key is in that pocket, would this stop someone from boosting my signal?

[@alexknouse9133]

Maybe: RFID blockers rely on contact to the object the chip is imbedded in. They're basically resistors that prevent a phishing signal from powering up the object and initiating the RFID handshake. Look up "Deviant Ollam", he has a really great video on RFID tech

[@ethancooksey123]

doesnt this only work for phones with bluetooth on though? im not sure it matters for your key card. Or am I totally missing something?😅

[@alexknouse9133]

@@ethancooksey123 It absolutely matters for any RFID card (including tap-pay bank cards). Deviant Ollam right here on KZbin can do a much better job explaining how RFID works than I can, look him up 😁

[@VincentGonz]

TBH Even though I'm not a fan of EVs I have to give Tesla props for continuously patching their cars.

[@mcmaschio]

Love how he just turned on dark theme and he is the dark web 😂

[@LonneLpp]

this was funny

[@dmagik8]

Love Jerry, Love Justin. Awesome Video. 10 outta 10, would boat

[@ummwhodidnt]

Boat?

[@BizzyVlogs]

11:03 "FIX IT ELON" hahahahah

[@navtektv]

The fact that Jerry actually tried to build that hacking signal thing himself, tells me that he's way more smarter than he let's on.

[@Josstrigaming]

I feel like you could also get an RFID reader and scan the Tesla key card, and clone that as well possibly, but you would probably have to get pretty close to the target to get the read

[@kzed]

yeah you’d probably have to get within a few centimetres, so if you could get that close you might as well just take it

[@pauliusvindzigelskis2224]

phone as a key feature is to avoid carrying RFID card with You. For now only way to overcome is to enable Pin to drive until Elon and boys make a patch (some sorts)

[@jahames4334]

thanks for the lesson boys 🤣 but in all seriousness that’s a worry how easy it is to steal a tesla

[@carloscampos9297]

They have a pin to drive feature as well so if someone were able to break in they would need to know the pin too, but solid point this needs to get fixed

[@TheKoltenparker]

And in the normal cars! He said that keyfobs use rolling codes, but how did he get in to the camero and James's car?

[@Dayashii]

@@TheKoltenparker they wait for the most recent lock and unlock then use the most recent code to unlock the car. People do this irl and stake out expensive cars park near them and do this

[@Amares69]

@@TheKoltenparker there's even a crazier method that uses scrambling in addition. So, the thief glues a devide to a hidden spot on your car, like the belly, and next time a key is used (sending key signal A), it quickly grabs it and floods the frequency so the car can't pick it up. The owner, thinking the key didn't work, hits it again, sending key signal B. Then, the device captures key signal B and gives the car key signal A. This repeats every time the key is used, so the device always has a fresh key ready and the thief can just hop in anytime. Worst of it is the only clue you're gonna get is your keyfob malfunctioning just one. Single. Time. Crazy.

[@alxkw6355]

Well the guy said bluetooth is harder then the other keyless entry cars. But Tesla gives more views and reactions, fanboys, trolls and haters need to be fed :)

[@SaKOTR]

"This makes me happy" Bruh.... I would hope so. Because I would be expecting a phone call from Tesla offering a 6-7 figure salary job to help close their loopholes.

[@dcgregorya5434]

Nah they know how to close them it just happens rarely enough that they don't see any point in it. Security can never be perfect...when its not good enough you add another layer...and another...and another. Thats why old cars you could steal with a coat hanger and a small piece of wire...then you needed a screwdriver...now you need a computer and special software and etc.

[@WitherRage]

Bro getting mega diarrhea on the day Sultan got there is relatable af

[@rileybriggs4731]

Only problem with keyfob signal skimming is that you need their keyfob. So just steal their key. Don't make things more complicated than they need to be. It's pretty easy to just steal someone's key and drive away.

[@velvetlies8923]

How do you know?

[@Jashan3052]

@@velvetlies8923 it's his daily job bro

[@-Ricky_Spanish-]

You just need to be close enough when they lock their doors. That's why I never use a fob to lock my doors, either press the button or lock it manually.

[@vrcmf3172]

No you can easily copy key using a device. It’s big issues in Europe

[@vrcmf3172]

@@-Ricky_Spanish- they can copy your key. Wrap your key in tin foil if you have keyless entry.

[@bruhnt5063]

Day 431 of asking Donut to bring old B2B back

[@nou2097]

Commitment is insane

[@NateClay]

Weird, it's like no matter how much security against something you put, unless you make it impossible, they're gonna keep doing it.

[@sakhsdragunof]

Installing a kill switch somewhere is a good way to delay the theves. Well, on gas cars at least. Good luck though with the EV's

[@osheveeretv700]

In some cases you will still need a 4 digit code to drive the Tesla so that’s another security

[@vertigo545]

I laughed WAAAAAAY too long when he said mega-diarrhea... I guess my wife was right about me never growing up lol

[@Sniperboy5551]

As someone who was suffering from the same thing all day today, it gave me some PTSD flashbacks lol

[@wadecookston1605]

At 2:42, he’s got the pants all the way off. Poor guys fighting for his life in there and still bringing us content

[@travisstamp7428]

A car in my neighborhood was just broken into a cpl weeks ago, and the owner swore that the thieves had a key to their car or something.

[@DRTerabyte]

Two laptops and two Bluetooth extenders plus being in close range (literally inches) of the phone required does not really equal a real hack in anyway. The cars are just as secure and if you're paranoid turn off Bluetooth. They're simply relaying the same information from the phone, just a simple booster but for Bluetooth, very basic.

[@StealthyJim]

This was more of a dirt cheap proof of concept. The laptops would not be necessary with a cheap SBC like Raspberry Pi or Arduino to handle all the software/signal encoding, and range could be boosted with a more powerful Bluetooth radio/better antenna. The whole kit could be condensed into a handheld device for like $100-200.

[@LogicLurker]

Great seeing Justin so relaxed now. great addition to the team!

[@rekire___]

_Elon want to know your location_

[@Zantsak]

I would love to hear how Elon responds to this…. Well done Donut!

[@TheSmithdub]

this is an issue with more then tesla tbf. if people really want your car theres always a way

[@Zantsak]

@@TheSmithdub I agree, I am not an Elon hater but I am curious to hear his take on this. Look how quickly he responded to the Russian / Starlink issue.

[@alxkw6355]

@@Zantsak As this is news from a couple of months ago, I think there was a tweet at the time

[@ayushghosh3326]

Also Teslas have a 4digit PIN to Drive system. Most owners use it so even if someone gets in your car there’s no way they can drive off with it. You can also setup a PIN for the glovebox too. I think it would be super cool to have this Pin to Drive system in all cars regardless of whether it’s an EV.

[@tupera1]

3:47 - The Windows error sound was hilarious!

[@stanleysteemer3544]

Until the Tesla owner has password to drive 😬

[@gregbits6109]

You would assume that the car’s radio frequency would be encrypted or something, and not let a relay just copy and extend it 😂

[@-Jethro-]

Preventing replay attacks requires bidirectional communication with the key fob, which depletes key fob batteries faster. This allows a challenge / response protocol, proving that the device claiming to be the key actually has access to the secret it claims. This is what Bluetooth phone-as-key systems do (like Tesla), but then they are susceptible to relay attacks.

[@handlealreadytaken]

You completely missed the entire point and explanation of how this works. Bluetooth has a very limited range and the relay is just extending it beyond 10m by transmitting the physical signal at both ends. There is nothing done at the digital level which is where encryption happens. The standard unfortunately never took into account a relay attack which could be prevented by a witness or time decay.

[@rolls_8798]

not really how 'radio frequencies' work. you can't really get away from this type of attack. not using pointless and lazy tech does help though

[@brianmaher2662]

The problem was they believed their transmission could only go so far so it proves the keyfob is near and that's your security. To start the car it must detect the signal from inside. The only thing the relay does is change the frequency and power of the signal to go further, then put is back to the original frequency and power at the other end.

[@rolls_8798]

@@brianmaher2662 yeah, I thought it was pretty interesting that the mode of security was just the range of the signal

[@Squirrel-zq6oe]

That error sound the first time he tries to open the door after trying to unlock it is gold.

[@Brandon-eq8mj]

Great! Thanks for showing everybody and spreading the word about this. Awesome job Donut.

[@raven4k998]

diarrhea cha cha cha

[@pinkace]

6:59 The Dark Web HAHAHHA

[@davidmaslak]

Good joke that was

[@miscstuff7473]

Wow. Great video. Very interesting. Question though - the owner of the Tesla can track the car on their phone as well. They could just tell the cops where to go to get the car (and thieves). Is there a software hack that makes the car invisible to both the owner and Tesla (as they can track every car in their system as well). Also, I assume the supercharger ability will be turned off once reported to Tesla (ask RichRebuilds). I can't imagine any car thief willing to risk being tracked in real time by the owner and Tesla and the cops. So while this is interesting, it isn't a real risk to owners as the thief will be caught immediately

[@sultanqasim]

A thief could always disconnect antennas for the telematics unit to prevent tracking after they get in the car. The car would just think it's in a place with bad reception (like an underground car park or remote area).

[@Oddman1980]

Before a thief would have to worry about being tracked, the police would have to actually do something. Get a car stolen and they'll come out in two hours to fill out a report, and never follow up or try to track the car.

[@Mindpron]

A simple radio jammer can block the GPS signal with noise. You can get a GPS jammer good for 100 yards for less than $100. They aren't all that hard to make since GPS isn't a secure system.

[@Dubtee]

@@Oddman1980 depends. Most cops would respond, if the victim was an old white lady.

[@Oddman1980]

@@Dubtee A rich old white lady, maybe.

[@User-bq4qm]

NO, not every key FOB in us uses 315MHz Some are in the 433MHz and newer Fords are in the 900mHz range.... Did you know that your (Keyless) car answers back on a low frequency such as 135KHz?

[@ThatCarGuyYT]

Thanks I really needed an affordable way to change my battery on my tesla😂😂