Amazing video, rare to find any content on CAN bus attacks on TH-cam, especially this informative. In general i'm surprised as hell you don't have more subs. A lot of people are making videos on new cars appearing on top 10 most stolen car lists, but no one really attributes it to thieves using CAN bus invading devices. Here, in the UK, a lot of thefts happening with Lexus RX450h (2016-2022) and Toyota Rav4's (as shown in the video) because they are very common, and most importantly the headlight's control unit is right in front of the passenger side wheel arch (might be driver side in the states), as soon as you rip open the plastic fenders and pull away at the front bumper they unplug the headlight and do their thing. Worst part is RX450h/rav4 platform is that its so damn widespread, we're talking in addition to the aforementioned; Highlanders, LX, the Subaru equivalent of the rav4 etc... Funny thing is, apparently Lexus's were beginning to be targeted in Japan because information about where the headlight control unit was located was leaked from a Lexus dealership, and apparently that was the reason why CAN bus attacks got popularised. But yeah, rav4 and cars sharing the same platform are something to be weary about. Had to fit an aftermarket immobiliser on the RX; Also quick tip, in addition to steering locks and other visual deterrents, add stickers on the windows saying you have an immobiliser, make sure they aren't the same brand as the actual immobiliser you have though (if you have one), no point telling thieves which countermeasures to have. Godspeed.
I’ve used the hidden kill switch on my vehicles and motorbikes since the early 90’s. I’ve had 2 failed attempts and caught a third in progress that I beat down with a bo staff.
Engineer here. GPS, ironically is the easiest thing to defeat, no jammer needed, simple $50 spectral analyzer will detect any radio frequency emitting from the car (bluetooth, GPS, etc). Some anti-car theft stuff even uses longwave and VHF, where a garage might not help, doesn't matter though. Cars are stolen, swept for trackers with spectral analyzer, and go right to the local port where they're sent out to sea and tracking doesn't matter anymore. They just don't want cops raiding the port containers. Can bus attack is also hilariously easy, not new either, they used to use slim jims, and get your canbus behind the dashboard. Only the headlight thing is kinda new as SOME manufacturers starting putting headlights on the same bus the ECU is on - not all of them do this and cars tend to have more than one can bus
New cars have such sensitive circuits for dtc's but meanwhile if a module goes nuts and wakes up the canbus or someones doing can injection, the cars just like "this is fine :)"
That's nice to know. Thanks. I've found out the key battery shut down procedure recently too. Funny the dealer sales person never said a word that I bought one of the most popular stolen cars on the block.
Don't quite understand how connecting to the headlamp bulb socket gives you access to a CAN network. Headlamp module that powers a bulb is more likely on a LIN bus or some other low speed CAN bus. The bulb itself doesn't use data packets...lol. Most modern vehicles use encrypted passwords between the immobilizer and the engine ECU that are generated once the ECUs learn each other. Since 2017 Chrysler has been using security gateways to only allow you onto the network as long as your tool is logged into their server. How many vehicles are stolen through hijacking the vehicles' network to enable the vehicle to start in the United States?
The bulb socket itself, no. They connect to the actuators that move the headlights and down, or the brights/dim sensor. I shortened a complex topic and skipped the whole gateway discussion that explains how different networks communicate.
Really liked the technical details and examples! The only part that I’m puzzled about is how to ensure that a hidden fuel pump kill switch “fails open”. Do you have any examples of switches with that attribute? Thanks in advance.
@@MikeTheBackyardMechanic Sorry, my original question wasn't clearly phrased. I didn't realize that it was possible... to choose which mode a switch fails in (closed vs on). I'm not saying isn't possible, I've just never heard of that as something an engineer (or consumer) could choose. If you know of any brand names, keywords, or other things I could search for to find a switch that fails open (or closed), I'd love to know. Cheers!
Hidden kill switch that honks the horn when they activate the starter. Idea modified from the original idea from a dude somewhere here in TH-cam…good luck, y’all!
Will the IGLA device protect your car from theft? It adds a passcode combination requirement to start the car and disables injection attacks into the system. A Compustar alarm in addition to the IGLA device would be helpful to draw attention to the auto thief and notify you about the auto thief attempt in real time. Adding those devices would probably provide cause the auto thief to steal an unprotected car instead.
The igla or ghost2 (same things) run about $1200-1500 cad installed. Ghost is distributed by Autowatch uk. And is only available to authorized retail install shops.
I had a holden and the key wouldn't remotely unlock it so I used the key and the alarm went off and that was the last time I ever drive it , apparently it needed a new ecu... 😅 I tried to Google and look how to bypass the anti theft... but I suppose it shouldn't really be well known but it was frustrating 😂...
My truck is 22 years old and never thought anybody would want it. It is mint in box but still ……. I have a simple kill switch, 1911. I recommend everybody install a real kill switch.
🎯 Key Takeaways for quick navigation: 00:00 🚗 *Introduction to CAN Injection* - Understanding the basics of Control Area Network (CAN) and its role in vehicle communication. - Overview of sensors and electronic control units (ECUs) in a car. - Explanation of how devices in a car communicate through the CAN bus. 02:59 🛠️ *How Thieves Exploit CAN Injection* - Explanation of how thieves use CAN Injection to steal cars, primarily targeting smart headlights. - Methods used by thieves to access the CAN bus through the headlight socket. - Overview of the device (JBL Bluetooth speaker) used for CAN Injection. 04:40 🚘 *Which Cars Are Targeted and Manufacturers' Response* - Information about the types of cars targeted for CAN Injection attacks, including older vehicles with smart headlights. - Discussion of auto manufacturers' response and the challenges in addressing this issue. 06:04 🔒 *Preventing CAN Injection and Car Theft* - Tips on preventing CAN Injection attacks and car theft, including the importance of insurance. - Advice on parking, security gadgets, immobilization, and other preventive measures. - Highlighting the role of a well-hidden kill switch, wheel boot, and steering wheel locks as deterrents. 10:09 🤣 *Wrapping Up with a Sense of Humor* - Closing remarks and a touch of humor to engage the audience. - Acknowledgment of additional resources for further information on car security. Made with HARPA AI
Mike. Why don't vehicle manufacturers just a include a unique vehicle matched "one of a kind" piece of software incorporated into the keyfob that contains a complete CAN BUSS circuit controller key (not the old immobilizer BS) but a totally seperate part of the CAN BUSS in key fob that must be present for communication to occur, kinda like a router with a specific "matched" MAC address. just my opinion
I'm just guessing, but it sounds like it would make replacing a lost key much harder and costlier. And it would still need to be transmitted wirelessly.
I work in this industry vehicle security and I’m sorry, but this is just not a viable solution for that unless it’s for the super wealthy only which I think they could probably afford a garage 🤷🏻♂️
nice. I'm guessing because it lacks auto-motion/smart headlights. plus, doesn't your Mustang require a physical key to start (even if the immobilizer were defeated in a CAN attack)?
What do you think of the idea of connecting a dummy push-start button to a taser, simultaneously triggering the release of a swarm of angry Africanized bees, and locking down all doors? Not recommended for those with short-term memory problems. I don't know...it just might work. 🤣🤣🤣
2nd best way to never have your car stolen is to own a 27 year old, rusting piece of crap like I have! 1st best way is to just NEVER own a car.....and I am quite close to that endeavour with my piece of $hit vehicle.....any day now! 🙄😂😂
That's a massive inconvenience factor, and also disables the car alarm if you have one. It's also easy to figure out, after they've entered your car with a slim jim. But along those lines, you could pull the fuse to the fuel pump.
![[LIVE] : ONE ลุมพินี 83 วันนี้!! คู่เอก "พันฤทธิ์ vs ซุปเปอร์บอล วันของโอม MBK"](http://i.ytimg.com/vi/1b4pkKHa_Fk/mqdefault.jpg)
That feeling when you find your car stolen or had a home burglary and stuff stolen is the worst....can't even begin to describe it.
Amazing video, rare to find any content on CAN bus attacks on TH-cam, especially this informative. In general i'm surprised as hell you don't have more subs. A lot of people are making videos on new cars appearing on top 10 most stolen car lists, but no one really attributes it to thieves using CAN bus invading devices. Here, in the UK, a lot of thefts happening with Lexus RX450h (2016-2022) and Toyota Rav4's (as shown in the video) because they are very common, and most importantly the headlight's control unit is right in front of the passenger side wheel arch (might be driver side in the states), as soon as you rip open the plastic fenders and pull away at the front bumper they unplug the headlight and do their thing. Worst part is RX450h/rav4 platform is that its so damn widespread, we're talking in addition to the aforementioned; Highlanders, LX, the Subaru equivalent of the rav4 etc... Funny thing is, apparently Lexus's were beginning to be targeted in Japan because information about where the headlight control unit was located was leaked from a Lexus dealership, and apparently that was the reason why CAN bus attacks got popularised. But yeah, rav4 and cars sharing the same platform are something to be weary about. Had to fit an aftermarket immobiliser on the RX; Also quick tip, in addition to steering locks and other visual deterrents, add stickers on the windows saying you have an immobiliser, make sure they aren't the same brand as the actual immobiliser you have though (if you have one), no point telling thieves which countermeasures to have. Godspeed.
Thanks for the insight of other countries. And I agree, any kind of deterrent helps.
I’ve used the hidden kill switch on my vehicles and motorbikes since the early 90’s. I’ve had 2 failed attempts and caught a third in progress that I beat down with a bo staff.
Kiyah!
😃 Loved the example of the mood sensor resulting in playing your favorite song!
Thanks! 😃
Engineer here. GPS, ironically is the easiest thing to defeat, no jammer needed, simple $50 spectral analyzer will detect any radio frequency emitting from the car (bluetooth, GPS, etc). Some anti-car theft stuff even uses longwave and VHF, where a garage might not help, doesn't matter though. Cars are stolen, swept for trackers with spectral analyzer, and go right to the local port where they're sent out to sea and tracking doesn't matter anymore. They just don't want cops raiding the port containers. Can bus attack is also hilariously easy, not new either, they used to use slim jims, and get your canbus behind the dashboard. Only the headlight thing is kinda new as SOME manufacturers starting putting headlights on the same bus the ECU is on - not all of them do this and cars tend to have more than one can bus
Great info, thanks!
New cars have such sensitive circuits for dtc's but meanwhile if a module goes nuts and wakes up the canbus or someones doing can injection, the cars just like "this is fine :)"
"I can't get enough of that." THAT'S WHAT SHE SAID!!
Too bad she meant child support. 🤣🤣🤣
Later Rav4s are fitted with a Can Bus shield, which can also be fitted to older models.
That's nice to know. Thanks. I've found out the key battery shut down procedure recently too. Funny the dealer sales person never said a word that I bought one of the most popular stolen cars on the block.
Don't quite understand how connecting to the headlamp bulb socket gives you access to a CAN network. Headlamp module that powers a bulb is more likely on a LIN bus or some other low speed CAN bus. The bulb itself doesn't use data packets...lol. Most modern vehicles use encrypted passwords between the immobilizer and the engine ECU that are generated once the ECUs learn each other. Since 2017 Chrysler has been using security gateways to only allow you onto the network as long as your tool is logged into their server. How many vehicles are stolen through hijacking the vehicles' network to enable the vehicle to start in the United States?
The bulb socket itself, no. They connect to the actuators that move the headlights and down, or the brights/dim sensor.
I shortened a complex topic and skipped the whole gateway discussion that explains how different networks communicate.
Can the next video be about the benefits of comprehensive coverage insurance on automobiles?
I can play Mike from State Farm, wearing khakis :)
Really liked the technical details and examples!
The only part that I’m puzzled about is how to ensure that a hidden fuel pump kill switch “fails open”. Do you have any examples of switches with that attribute? Thanks in advance.
A switch can actively close a circuit (turn it on) or actively close it (turn it off). You would want the latter. No I don't have a part number handy.
@@MikeTheBackyardMechanic Sorry, my original question wasn't clearly phrased. I didn't realize that it was possible... to choose which mode a switch fails in (closed vs on). I'm not saying isn't possible, I've just never heard of that as something an engineer (or consumer) could choose. If you know of any brand names, keywords, or other things I could search for to find a switch that fails open (or closed), I'd love to know. Cheers!
Hidden kill switch that honks the horn when they activate the starter.
Idea modified from the original idea from a dude somewhere here in TH-cam…good luck, y’all!
Need info on that 😊
Will the IGLA device protect your car from theft? It adds a passcode combination requirement to start the car and disables injection attacks into the system. A Compustar alarm in addition to the IGLA device would be helpful to draw attention to the auto thief and notify you about the auto thief attempt in real time. Adding those devices would probably provide cause the auto thief to steal an unprotected car instead.
That's excellent information. I wonder how much it costs... you have to email them for the price.
The igla or ghost2 (same things) run about $1200-1500 cad installed. Ghost is distributed by Autowatch uk. And is only available to authorized retail install shops.
wow! what a great video to eat a meatball sub to!
I had a holden and the key wouldn't remotely unlock it so I used the key and the alarm went off and that was the last time I ever drive it , apparently it needed a new ecu... 😅 I tried to Google and look how to bypass the anti theft... but I suppose it shouldn't really be well known but it was frustrating 😂...
Hmm I always though that communication between key receiver and ECM is kind of encrypted.
Oh by the way, it’s pointless getting a wireless alarm.
My truck is 22 years old and never thought anybody would want it. It is mint in box but still ……. I have a simple kill switch, 1911. I recommend everybody install a real kill switch.
🎯 Key Takeaways for quick navigation:
00:00 🚗 *Introduction to CAN Injection*
- Understanding the basics of Control Area Network (CAN) and its role in vehicle communication.
- Overview of sensors and electronic control units (ECUs) in a car.
- Explanation of how devices in a car communicate through the CAN bus.
02:59 🛠️ *How Thieves Exploit CAN Injection*
- Explanation of how thieves use CAN Injection to steal cars, primarily targeting smart headlights.
- Methods used by thieves to access the CAN bus through the headlight socket.
- Overview of the device (JBL Bluetooth speaker) used for CAN Injection.
04:40 🚘 *Which Cars Are Targeted and Manufacturers' Response*
- Information about the types of cars targeted for CAN Injection attacks, including older vehicles with smart headlights.
- Discussion of auto manufacturers' response and the challenges in addressing this issue.
06:04 🔒 *Preventing CAN Injection and Car Theft*
- Tips on preventing CAN Injection attacks and car theft, including the importance of insurance.
- Advice on parking, security gadgets, immobilization, and other preventive measures.
- Highlighting the role of a well-hidden kill switch, wheel boot, and steering wheel locks as deterrents.
10:09 🤣 *Wrapping Up with a Sense of Humor*
- Closing remarks and a touch of humor to engage the audience.
- Acknowledgment of additional resources for further information on car security.
Made with HARPA AI
Great Canbus theft insight. Where can I get a tailgate kill switch from?
Mike. Why don't vehicle manufacturers just a include a unique vehicle matched "one of a kind" piece of software incorporated into the keyfob that contains a complete CAN BUSS circuit controller key (not the old immobilizer BS) but a totally seperate part of the CAN BUSS in key fob that must be present for communication to occur, kinda like a router with a specific "matched" MAC address. just my opinion
I'm just guessing, but it sounds like it would make replacing a lost key much harder and costlier. And it would still need to be transmitted wirelessly.
I work in this industry vehicle security and I’m sorry, but this is just not a viable solution for that unless it’s for the super wealthy only which I think they could probably afford a garage 🤷🏻♂️
Just take the dang spark plug wire with you! (keep them clean!😁)
Try adding 2 diodes one on the ground and one on the power to the headlights ?????
Interesting idea. I don't know if it would work, because I'm not sure if the headlights do need to communicate back.
would a CAN attack work on your 2010 GT?
No. The CAN isn't exposed to any external parts (like the headlights)
nice. I'm guessing because it lacks auto-motion/smart headlights. plus, doesn't your Mustang require a physical key to start (even if the immobilizer were defeated in a CAN attack)?
Yes, I have a physical key.
I can use my Flipperzero to capture any of the signal that comes out of the car without touching it.
My car has a none of these, but does have glass and tin headlights.
Rewire the headlights bypass the CAN
Have a kill switch which shorts out the can bus.
Can we all agree that vehicles without all these sensors and relays are by far and away the most reliable and durable vehicles?
Cut steering wheel, slide Club off and leave in place of car.
The Phila way about the time I left the state.
What do you think of the idea of connecting a dummy push-start button to a taser, simultaneously triggering the release of a swarm of angry Africanized bees, and locking down all doors? Not recommended for those with short-term memory problems. I don't know...it just might work. 🤣🤣🤣
It is a clever and simple solution.
Kill switch to the Engine Controller Fuse
You have to hide the switch and wires well, or "they" will find it
I would use a key style switch & hide it in the glove or center console box@MikeTheBackyardMechanic
This is why we can't have nice things.ill stick to the bicycle, easier to replace.
2nd best way to never have your car stolen is to own a 27 year old, rusting piece of crap like I have!
1st best way is to just NEVER own a car.....and I am quite close to that endeavour with my piece of $hit vehicle.....any day now! 🙄😂😂
Rattle snake works well...
*help canoflauge it*
Just drive an ugly car. That keeps the thieves away like if it was made of fresh cow manure.
not entirely true. I had a clapped-out Jeep XJ, stolen in the dead of winter. Cop's comment was "it beat walking in the cold".
You try being entertaining, but it turns out just boring and I can't wait through all the BS before seeing what the video is about.
I recommend you play my videos backwards.
just unplug the battery, easy fix
That's a massive inconvenience factor, and also disables the car alarm if you have one. It's also easy to figure out, after they've entered your car with a slim jim. But along those lines, you could pull the fuse to the fuel pump.
@@MikeTheBackyardMechanic Can I do this with my Rav4 Prime 2023?
Your third mustang? You must be a slow learner.
I like Mustangs.
love your video, keep it up! :)