Do the Rivian's use BLE for the fob or phone-as-a-key?

[psklenar]

Do the Rivian vehicles use BLE (Bluetooth Low Energy) for the Fob and Phone as a Key?

https://blog.malwarebytes.com/hacki...warned-of-another-theft-enabling-relay-attack

?

pat----

Sponsored

 

[godfodder0901]

Both. This specific relay type attack may be why the FOB is active only right now. This means there needs to be a physical press of a button on the FOB in order for it to work.

The phone is a different story and, in theory, would be susceptible to this type of attack.

To be clear, though, any passive system could be compromised using this technique whether they use BLE or another RF protocol.

Prevention is easy:
Keep your passive key systems far away from the vehicle or use a Faraday bag/cage to prevent RF transmission. For your phone, turn off PaaK or Bluetooth. Enable PIN to drive if your vehicle is capable.

 

[BoltEVowner]

Does the phone as a key require the phone app to be running all the time, or not?

 

[godfodder0901]

Does the phone as a key require the phone app to be running all the time, or not?

Yes.

 

[pc500]

Both. This specific relay type attack may be why the FOB is active only right now. This means there needs to be a physical press of a button on the FOB in order for it to work.

The phone is a different story and, in theory, would be susceptible to this type of attack.

To be clear, though, any passive system could be compromised using this technique whether they use BLE or another RF protocol.

Prevention is easy:
Keep your passive key systems far away from the vehicle or use a Faraday bag/cage to prevent RF transmission. For your phone, turn off PaaK or Bluetooth. Enable PIN to drive if your vehicle is capable.

The phone can be addressed by cryptography fairly easily, pre-arranged via data networks

 

[godfodder0901]

The phone can be addressed by cryptography fairly easily, pre-arranged via data networks

Yes and no. The vulnerable BLE "feature" affects all implementations, including the phone.

 

[pc500]

Yes and no. The vulnerable BLE "feature" affects all implementations, including the phone.

Yeah my bad I thought you said replay not relay.

There's not much they can do here, although virtually any keyless entry vehicle can have this same attack. It's not really ble specifically. Works with nfc credit cards too.

Sponsored