from other video: "Hey Tom, Mopar tech here, I have had several stolen HEMI platform vehicles come through the garage in recent years which I had to get re-mobilized and everyone of them appears to be stolen in a similar fashion as your vehicles were. As for the Durango, the culprit removed the radio and dropped the headliner to disconnect and defeat the Cell LTE/GPS system, they do that because they think the vehicle can be tracked which in fact it can not unless federal law enforcement gets involved and issues a warrant for the vehicle data from the Rogers Network LTE providers. They removed the driver side dashboard closeout panel and disconnected the SGW security gateway module up above the hood release and then they removed the passenger side closeout panel to access the CAN-bus star connector behind the glove box and plug into it with there hacking equipment. Once they are connected to the CAN-bus network they can take control of the vehicle with there hacking equipment. And as for the TRX, basically the same process but they accessed the CAN-bus STAR connector behind the left air vent, the green thing you were looking at in the video. In my experience you can reinstall and reconnect everything then program new key fobs and the vehicle will come back to life but in some instances I have needed to replace the RFH radio frequency hub module and KIN keyless ignition node module due to software corruption then perform a vehicle reconfiguration procedure and program new key fobs. Oh and the orange strap inside the Durango center console is the park release cable and the TRX has the same orange strap behind the removable panel to the left of the steering column, the tow truck driver would have likely used them to load onto a rollback. I'm glad your vehicles were able to be recovered! Your dealership should be able to get them brought back to life! "
All this wonderful technology, cars can park themselves , drive themselves, prevent accidents... yet they can still be stolen easily... Were so far removed from where we started, that right now, a carburetor and a manual trans will be more effective to keep thieves away.
No suspect yet? How can that be? What about the owner (or renter) of the house where the trucks were found? There's your first suspect.... and if that person is not the thief, then I guarantee they know who is.
@LostPilotage Lol... I've never woke up and found random stolen vehicles parked in my yard that I know nothing about. Have you? Now that I read some other comments and I realize that half the houses in Detroit are vacant, I can see where ditching stolen vehicles at random houses is possible. I didn't realize Detroit was like that.
@@SlipFitGarage A lot of work has gone into cleaning up Detroit in the recent 1-2 decades for the better. Especially near the redeveloped areas in Downtown. Detroit's East side, except the affluent and heavily policed citie(s) of Grosse Pointe, is still sketchy as can be where these cars were recovered. If you look where "Detroit City Airport" is, that is the East side and a very high crime area, with lots of gang activities and organized crime. This area still has a lot of blight and abandoned properties and yes stolen property, and other criminal activity is often fenced through known abandoned homes/properties/warehouses so there is no direct ties to incriminate. Much the same reasons criminals often illegal distill, or cultivating illegal drugs on public property such as State/Federal land out of sight deep off the path in parks or other land.
Get a ghost immobiliser, the stock equipment whilst being restrictive is designed to be permissive to dealers - the crooks all have devices that emulate dealer machines
This ^ You cant stop them getting in the car so all you can do is stop them from starting it and the Ghost , and other immobilisers that use tags can help . Lots of videos on youtube of Ghost's stopping car thefts
My vehicles have switches that I installed that are turned off when I leave my vehicle and the vehicle can't be started without the switch turned on!!!! As simple as that
There's even immblizers that can have pedal actuator sensors installed so you use a pedal press sequence as your "key" just hop in and press and hold brake double tap gas long press gas release brake and power to ignition or something like that
I have zero interest in owning any of these newer vehicles, especially these “high end” 😂 mopars. Just headaches I don’t need or want. I have a fleet of old stuff that gets me where I have to go without worrying about anyone stealing them.
The red/orange flag you say is a Hard drive is a parking paw release for the transmission so it can be put into neutral and towed. Most likely the tow truck operator when picking these up used it since he didn't have the keys.
You can connect to CANBUS via the OBD2 port, but some manufacturers disable certain features being accessed via the port, hence why they go in to the network at a different point. If you know what signals the modules are expecting to see, you can inject those signals into the CANBUS network and fool the modules into believing the car is being started with the legitimate key. The solution is better security at a software level. CANBUS networks need to be encypted and the modules need to know they are communicating with other legit modules, not a 'man in the middle' with a laptop.
you can't communicate with a key off condition. On the TRX, behind the vent is a "STAR" connector. It's like a junction for the CAN, now you're in control. they probably did the same on the Durango, just a different location of the connector.
Finger print and DNA testing would never be used is simple auto theft cases, there would have to have been more serious crimes involved, on top of the auto theft.
@@tuck6464 Vehicle thefts for these types of vehicles are not simple auto theft. These vehicles are targeted by theft rings and gangs (who control the street takeovers). The problem is there are so many of these groups, the police can't dig deep into all of the thefts without an actual person in custody. Not to mention the socialist assault on our police forces (liberal defund the police BS) makes it even harder with less manning, funding, and capabilities.
@@scottjays360s.johnson2 I think its finely ground Carbon. A safe was stolen from a friend's house a long time ago and when the police came and dusted for prints, not only was the places they specifically checked covered in it but you could see where the fine particles landed on the surrounding surfaces, which became even more appearent when you tried to wipe them off.
It costs $7-$12 to immobilize ANY vehicle with a single simple switch on 1 or 3 different wires. No fancy wifi, bluetooth, or expensive modules with phone apps or subscriptions. The amount of technology a vehicle has means absolutely nothing unless you disable the functionality for it to start and run.
@@oldblueaccord2629 Not if the 12 year old doesn’t know what he’s looking for and which circuits are disabled by the switch. If the vehicle either won’t crank at all or won’t start when it’s cranked, he’s not gonna to spend the time it takes to troubleshoot, maybe needing to have the hood up as well. He’s going to give up and move onto another easy one. I use a concealed mag switch and a latching relay or four to isolate injectors, starter, fuel pump and gearbox brain. Good luck with working it out and bypassing all of those in under an hour or more. Two failed attempts to steal my vehicles in the last five years says it works. For under $50 it’s a heck of a lot cheaper than commercial immobilisers, and because I’ve installed it the cut in’s aren’t in the usual places that the commercial immobiliser installers usually use. To anyone who’s looking around the loom it all appears stock.
@@oldblueaccord2629 you say that but if you are smart you don't use the starter wire at all. you use something like the fuel pump relay or crank sensor wire so they can sit there and crank all they want and it will not run could even have it on another key fob rather then a switch for easy use and so there is not a switch for them to find and they 100% will not sit there and try to find the problem and risk getting caught
Tom, first and foremost, to understand your Dodge vehicles and how they work you need a Dodge Electronics Engineer. As a former Ford Engineer I can tell you generically how the Controller Area Network (CAN) works but I’m sure that Dodge has some specific arrangement of modules and related functions. And they may only reveal so much in public. Basically every modern vehicle runs on network data that is transmitted between modules to control almost every function in the vehicle. There is no such thing as a CAN harness. CAN network data is transmitted throughout the vehicle on what are called twisted pairs of wiring circuits. These circuits are part of almost every harness in the car so data can flow where it needs to back and forth. Also, there are multiple CAN networks in the vehicle. Probably at least 2 that are high speed and at least one that is medium speed. Vehicle functions are divided up between these networks based on function type and priority. Typically there is one for powertrain control, one for infotainment/outside communication and one for lesser functions in the vehicle. I’m being real generic here on purpose. Now understand that all the networks have restricted access which is why the OBD port is virtually useless to the thieves. You can only access so much functionality through that connector by design. So what ever module Dodge has located behind that vent panel allowed the thieves to plug ion a surrogate device that accesses part of the network directly. And yes all the different antenna connections are unplugged in an attempt to stop outside communication/tracking. The thieves have very sophisticated modules that can mimic normal signals within the vehicle CAN networks that allow them to make the vehicle function. Take out the original modules, plug in your theft version and drive the car away. If the head of the theft ring spends 5K to have a module made and uses it to steal multiple 100k vehicles I think you see the cost benefit. Just follow FB Marketplace and see how many ads there are for Hellcat engines, interiors, etc. It happens every day. I figured your were gonna get chopped up and were just parked for a few days.
And unfortunately you can’t just dumb down the vehicle as control modules are necessary for the vehicle to operate as designed. Now you got me interested to research deeper some ways to prevent theft in electronically controlled vehicles. In the meantime you can still add some hidden power cut off devices that prevent starting the vehicle. But, even this has to be done carefully because some modules rely on Keep Alive Power to retain memory in their RAM related to how you use the vehicle. Hopefully someone makes a device for selectively shutting off some of the vehicle power. That’s another investigation project!
@@manicmechanic9117 It doesn’t work that way. There are multiple places to hack into the CAN system with the right equipment. Not just the ODB connector. that’s part of the reason the thieves disconnect other vehicle modules. Blocking the OBD port on one brand might help but not on another brand. Not every manufacturer systems is uniform across the board.
he answered many good questions but not all that he asked. He also wants to know what they used to do it, not just that they used "hacking equipment" He also wants to know about a way to disable all the fancy RF stuff and get back to a simple old school way to get in and start it or even a cellular way to do it.
Tom, you stop them from taking the vehicles/breaking windows by keeping the cars in a secure setting. I know it sounds too simple to make sense, but thieves go after easy targets. They don't want to put in hard work to get the cars. You need to make it difficult for them to even get to the cars in the first place. You need to make it difficult for them to drive the cars out of the property. You need a good fence and an even better gate. There was a car dealership that thieves tried to steal 3 Durangos from by crashing through the front gate, and the company that made the gate has an incredible design because it destroyed 2 of those durangos crashing into it. The 3rd durango decided to drive around it after it saw the first two get totaled by the gate. You need to secure your properties better with some serious theft deterrent gates and fencing. You need motion detector lights on the entrances and exits that alert camera's to anyone coming and going. Simple steps like this put major obstacles in the thieves way and they look at that stuff as too much effort to overcome and they'll move onto the next spot.
@@woods-garage These cars are being stolen at Tom's home is the same situation as the ones stolen at his shop - he needs to make his shop more protected as well as his home - it's as simple as that.
@@formula7414 Ah I thought they were parked at the driveway at the shop, I misunderstood the phrasing. But in any case, same thing goes for the home as it does for the shop. If he's going to have $100k cars parked somewhere then there needs to be more protection in place. Gone are the days of being able to leave your front door unlocked in your friendly neighborhood.
They tried to steel my wide body scat pack charger. Busted out the back window. Re programmed a key and tried to start it. We have a kill switch so they couldn’t start it. My cameras cought then breaking the window and stepping on the brakes to start it at 5:21 am
Every inmate I have ever met in state prison will spend 24 hours trying to figure out how not to do 8 hours of work. It’s not that they are dumb people, in fact the opposite, but they refuse to do anything good, it’s like they are just preprogrammed to be a POS.
I’ve worked at a car dealer (Subaru) for the past 15 years as the electrical diag tech, I think the thieves had to have access to dealership proprietary wiring information to be able to know exactly what to disconnect and what to take apart to get to it. This info is not available to the general public. Every tech has there own password and everything is done with multi factor authentication, any parts having to do with security are linked to the vin# of the car and can’t be used in any other car. Once the vin# is programmed to a part it cannot be changed ever. The green connectors are can bus junctions. The single coax wires in the kick panels are antenna wires for gps or xm radio or telematics systems, on Subarus there are 3 separate antennas, shark fin on the roof and 2 in the dash. Even working on this stuff every day I couldn’t steel one easily, it would take a bunch of research and things would be different for each model car so planning would be required. I’m glad you got your vehicles back without major damage and I hope they catch the thieves. As far as putting stickers saying your vehicle has an aftermarket tracker I probably wouldn’t as your’e just telling a would be thief to be careful and look for it before moving the vehicle. I would just suggest hiding it good and not saying anything. I’m looking at buying one of your hard wired trackers for my 65 C10 can you tell me more about it?
Yeah. I've been a dealer tech for 20 years. Same as you, I would have to research outside work provided info to figure out how to go around security. I remember old Toyotas had a key sequence and opening and closing of the door to program keys. It also made the lights flash and horn honk during the procedure. So I could steal one of those, but you would probably heare me opening and losing the door and the horn going off as I'm doing it. I'm at Honda and have 4 different fields to fill out for key programming. I'm guessing they could easily look if a key was made for that VIN recently. (not so sure kaw enforcement would work that hard) I wouldnt even know where to find alternative programming tools if I wanted to.
The real rub is we all are now paying 150 to 300 for a replacement key for our vehicles that are no more secure than the old real keys and tumblers that was cheap. We are just being ripped off all the way around.
I will put it in the public domain. Most vehicles after 2020 come equipped the a security gateway. This blocks certain udp and programming protocols from the components on the network (canbus). The standard obd connector sits between the gateway and the rest of the bus. Simply bypassing the gateway gives full access to everything on the network, and bypassing is as simple as connecting to the bus outputvof the gateway module. There are many ways to gain entry to the vehicle, there is a known Bluetooth exploit if it's fitted to the vehicle for example on newer vehicles. You are correct about the GPS and dealer comms. Network devices that are removed and disconnected. As for ghost immobilisers, they just block the start/ignition functions on the vehicle. Linbus and canbus to bcm can be replicated to negate what a ghost immobiliser does. The signals being blocked are simply relayed to the bcm....
@meagain6665 lol, what??? That's to get the vehicle in neutral to be towed. I should know i own a durango and had to be towed, and that needed to be pulled.
Customers shouldn’t have to do vast amounts of research to figure out how to prevent having a vehicle stolen. The factory should be doing this before it ever reaches the customer. People keep buying them so there is no incentive 🤷🏻♂️
That's the price you pay for being lazy. I don't want to have to use a key to physically unlock my car, lazy. I don't want to have to insert a key into the ignition to start it, lazy. And the main reason I hate modern cars locking my doors after I reach a certain speed. Anything ran by a computer can be hacked. The only good thing about GM is on star. They can shut your car off remotely.
was wondering that too. years ago i had a truck that matched the description of one used in a robbery and got towed. when i went to pick it up there was fingerprint powder all over the place and took forever to get that stuff cleaned off.
TOM ... ON YOUR LAST VIDEO I RED A LONG COMMENT BY A RAM TECK THAT EXPLAINED EVERYTHING THEY DID INSIDE YOUR VEHICLE AND WHY THEY DID IT YOU NEED TO DMGO READ THROUGH YOUR PREVIOUS VIDEO
He doesn't read his comments you're talking about the one that was at the top of the list TH-cam automatically made it the number one comment because the algorithm recognized it as good factual information that was being read by every single person
This old-timey dinosaur here from the day when GM only had a dozen or so different keys for all of their cars, and my 64 Nova Wagon (had a 327/300hp warranted from a Vette back in the day with 4sp M21 Muncie) even had an ignition that, once unlocked, needed no key. I'm still savvy enough to have an overview of Can Bus, but I find the tech astonishing. Thanks for helping give me a better knowledge of the complexity of today.
My first Chevy Suburban had remote door lock opening. I was at a large mall and had never checked the range of the remote. I had visual on the truck, hit the remote, and two other GM vehicles sounded the horn and flashed the parking lights. This was the last time the system remained active. How do you explain to the insurance company that your car was stolen yet no glass was found on the ground where it previously was parked?
The "behind the headlight" is called a canbus injection attack. The theives now know that they can bypass the obd2 port in some cases. They unplug the headlight connector and plug directly into the wiring harness and the respective module. They "tool" used communicates with the other modules and allows the thief the ability to shut off the alarm and basically open the door. Layered security is really the only way to go. Knockout 360 and a handful of other youtubers go more into detail on their channels. IGLA, compustar, carlock, multiple GPS and a secure garage are starting points.
those orange pull tabs under the dash and in the console are used to put the vehicle in Neutral got towing or maintenance, those were probably used by the tow truck drivers to allow them to get on the flatbed easier.
I am willing to bet the tow company scuffed the front bumper. Durango is a long boy, and they almost certainly flat bedded the vehicle, it was pulled up tight to the cab guard so they could hook the TRX to the back hoist. Recover 2 vehicles for the price of one tow.
@@LostPilotage I noticed the Durango's neutral release was all bent up too. I know a lot of fca neutral releases are easy to mess up though, chargers are really bad, they'll straight up bend or break off and still not even go into neutral lol
also those green connectors are what are called “star connectors “ and u can plug a jumper to them and access the pcm and other modules without powering the vehicle.
It is a ridiculous amount of effort the thieves put into this. Thanks for the insight. It's a start to figuring out how to put a stop to our own vehicles getting stolen or others.
Thanks Tom for making these videos and helping others. The orange pull straps are to put it in neutral so it can be moved. All cars with electronic shift have that.
Network security on cars is also terrible because anything on the network is pretty much trusted which is why we had hondas and jeeps being hacked via the wifi on the infotainment system that was also connected via can bus (amongs other protocols) to the ecu and other modules. You run into situations where savvy people with a laptop can over ride stuff like your drive by wire pedal of steering wheel.... there have assasinations linked to hacked car networks.
The cam buss port is behind the glove box. Thats how a locksmith or dealer writes the key fob. I have Revelco kill switch plug. Compustar t13 with drone gps. Ibalso have a carlock hidden. IGLA is next just so they cant rewrite the keys
The thing about CANBUS, is that it is insecure. The system is based on the premise that someone would have to literally pull apart you car to gain access to the system. There is no actual security because it'd be a pain in the ass to design. It'd make the system slower as they have to pass security protocols, and also make it more expensive. Some cars have more than 1 CANBUS system, and all have a bunch of modules. All the thief needs to do is access the Gateway, inject the 'Command' and they have access to every module. I'm a Mechanic, but I don't know Dodges. At a guess, the Gateway is the Green modules you keep seeing. It could even be the CANBUS termination block, and they'd still be able to access through there as well. Its like 'Would you run a physical firewall to connect an Ethernet cable from your house to the garage', probably not. Its the same with a Vehicle. No real need to secure the network because its unlikely that anyone would attack it. But might be a great idea to start thinking about it! At the end of the day, if the CANBUS messages were encrypted, there's always someone that will be able to decode it so its a never ending battle.
Excellent questions and reasoning. Also, I really like that you are out to help others and what happens. Crucial 929 knows the game. Just like that. You knew you have people with this knowledge. This is such excellent use of your ability. I just had someone not steal my 1969 Chevy van, but, egg it multiple times, and the last two times let off a fire extinguisher inside. Have you ever seen that? It is a nightmare and I am 77. You cannot believe what it takes to clean it up and no insurance coverage on that. Lots of people get their cars stolen. Any way you can help people understand how to prevent any of it is a public good. After all, as in racing, Knowledge is Power, that is why in racing there is data collection. Keep up the good work. I watch all of your and Steve's videos. They are so informational.
Those straps put your vehicle in neutral when you pull them. There are plates that people make you can put over those so someone can't pop your car in neutral in 5 seconds and roll it away. Thieves can pull those and literally roll your car down the street and work on getting it started there instead of hanging out in your driveway.
Excellent presentation. Thank you. If nothing else, you are making some great content from this. Not to beat a dead horse, but the lesson learned is to not leave multiple things worth $100,000+ sitting out on the driveway. Even if you fully immobilize them, they can tow them in an instant. Repo stuff for doing this is amazing nowadays. Anchor chain them to some deep set bollard? Install remote control pop-up bollards around the perimeter of your property? They will never be safe sitting in the driveway, especially not around Detroit.
Pull the fuel relay, or install hidden kill switch. Plus Multiple Air tags/smart tags hidden inside and outside car. Anti RF bags for your key fobs in the house.
Looks like we just go back to the steering wheel locks or take all the wheels off at night. car thieves will always find a way to get in and drive off in a car. having an aftermarket relay on the starter cable to disable it from even starting could be the answer.
They took DNA from my truck and they got a hit pretty quick. Way less than a year. And it so happened one of the peoples DNA was already in jail. The thieves left a stack of signed checks obviously a fraud scheme but never charged them for the stack of signed checks. Tons of donated clothing was left in truck also. Ended up being two tweaker girls.
I am definitely riled up about this reoccurring issue that you are experiencing! Saw the old Ford go away way back when. Mr. Bailey, are we trying to make this too complicated? There are VERY BASIC things that will keep your vehicle from starting all day everyday, that the vehicle will have no idea it is disabled, until someone tries to start it… What is necessary for internal combustion? You got this!
Orange pulls are for the transmission neutral cable. With an electronic transmission, there is a cable to put it in neutral when you cannot start the vehicle or it needs to be towed.
all you have to do is ground the can bus wires and boom whole system is down. simple hidden toggle or a remote relay its pretty simple to crash the can bus and obd wont even read
@@oldblueaccord2629 na i have to fix shorted can bus wires all the time its just like a damaged network cable. most that would happen is if you turn the key on before removing ground is a bunch of u communication codes.
I'm a software developer. I have written engine diagnostics decoders. I have written decoders for J1939/J1587 diesel and also some OBDII. It's all canbus. The various protocols ride on the canbus network standard. Same thing with aviation and the ARINCS protocol.
The orange tethers in the center console of Durango and left side of dash on TRX are the manual neutral release for the transmission. Due to the trans being electronically shifted you need a manual neutral for towing etc.
get a Male and female connector cut OBD 2 port rewire it that way when you leave the car, you can take the port with you and while you’re at it, you wanna put some kill switches in obviously
I was thinking definitely Killswitch if not two battery and fuel pump maybe separate switches but a fake OBD two just screw at least and then the other one really shoved up in the dash it’ll at least give u a small delay
Thank you. A true winner is taking the time to take a tragic personal violation into a positive . Anyone who thinks differently well we will leave it at that......
Greetings Tom, The OBD2 port is for the general scan tool to contact to the different control modules in the vehicle. This is the can bus system. You can google, is the OBD port part of the can bus system and get a better understanding of can bus. Short of parking a vehicle inside a secure area, garage. It is very difficult to insure no damage to your belongings. Locks and other devices only keep honest people honest, and that really sucks. Best wishes on returning your life to normal.
The orange strap hanging down on TRX and in center console of the Durango is the park release for the transmission. That was most likely used to tow them away from where they were found. The headliners were most likely pulled down to access the GPS antenna quickly and disconnect it. The antenna wires under the dash are disconnected cause there is a TBM2 box in the dash that handles Telematics (Cellular signal, cellular triangulation). The Harmon box you found is the actual radio, the radio screen is just a display for that Harmon radio. The radio handles alerts sent back to your phone via the uconnect app. The green connector blocks you found are called "star connectors". They are basically a splice block for all CAN circuits for every module in the car. Green are CAN-C, white are CAN-IHS. The reason they go at the Star connectors instead of the OBD port is cause those vehicles have a Security gateway module installed to prevent access to the vehicle through aftermarket scan tools/devices. You should check into offerings from Stellantis as far as theft prevention goes. Most of (if not all) the SRT vehicles has an option to lock the RF hub so new keys can't ever be programmed to the vehicle again (so make sure you get a bunch of spare keys programmed before they lock it) and other vehicles have a enhanced valet mode where it limits the engines HP output to something very low (like 20hp) so the vehicle can start and idle but not drive away until a pin number is entered into the radio.
The orange pull handles are the shift lock release. You pull them, and it's in neutral. After unplugging all of their tools, they can push the vehicle around
I had a home security guy tell me once that if a sign in the yard telling a thief that a house was protected by a service did not stop them, nothing will. A sticker might do the same for a car.
Tom anytime theres wire or a wire harness they can access your computer system. Obd port is just an access port or doorway to your compiter system. They dont need the obd. Its called wire splicing. Its a device that clips on the wire and cuts through the plastic and locks into the wire. Its no different than taking two wires twisting them together and putting electrical tape or wire nuts on it. Exact same thing but done cleaner and more quickly. It literally clips onto the wire. Then they have access just like through the obd!!! The true only way to stop this stuff is starting with the manufacturers . You can do what i did with adding a gps hard wired and kill switches that shutdown all power. The garmin is like onstar. If they dont disable it the car can be found as long as there is battery power. When i come home i can show you how they get into your system. But just because they have the iPad it is the same. You dont need obd with wire splicing. The manufactures need to step up or get rid of keyless/push button start. Go back to keys and this would happen alot less. Once cars started using software then its hackable.
The reason this information is kept secret is to protect you! Do you want to tell everybody watching this that anyone can purchase the black market programmer for $29,000? It does sound expensive, but it pays for itself the first time its used.
29,000....it's way less than that. I can buy a can bus interface module and interface harness for 200. The rest varies but it's all reusable so it gets paid for with the first sales on Facebook marketplace.
I dont think a stolen Mopar gets you 30k. and you need to have a connect on how to get rid of it. I would say a week or two and you get your money back.
@@dustyc324 these are worth pretty decent money, either shipped over seas or parted out. Getting 30K in parts from a 100K vehicle isnt much of a stretch. This isnt your grandpas old mopar truck
@warrenmichael918 i know they part them out, but everyone buying them knows it's stolen. it's mostly used for insurance repairs that they get discounted parts and get paid for OEM new parts.
Wish you the best ! Watched the Sick videos for drag weeks and sick week events because of Finnagan. Then seeing your Camaro’s 1&2 how freaking nuts those cars are. You seem like a genuinely great guy. Seeing you drive into the sand trap and roll with it like it was nothing. Sucks you have to deal with this violation! Hopefully they get these rides back running right.
The colored cord is a park release. Which allows the vehicle roll. Then you gain access to the bus and give it power to the right wire .the system will power up then you can crank it and drive away.
this is why i wont have keyless entry on a car as it can be cloned by a flipper zero, but what about using a old school style Thatcham 2 transponder immobiliser connected to the fuel pump and put the receiver where you would place your keys in the centre console, as the old style Thatcham immobilisers only have a 4-5 inch range for the receiver/transponder
The OBD-2 connector provides access to the CAN network. Listen to police scanners.. the cool-down period is standard practice in thefts, carjacking or however they got into your vehicle.
Hard to watch this and listen to Tom not know what anything is when its been described in comments on the previous videos by Ram technicians... dude take 20 minutes and read some comments
@91CTD can't read every comment.... would take more then 20 minutes... I'm sure he has a lot going on right now and reading comments takes a bit... did he ask if u had helpful information to reach out to him
The Harmond box IS the stereo. And the pull tabs that you were calling "hard drives" are transmission neutral pull tabs. You pull them and it puts the transmission into neutral.
Hey Tom those levers you are talking about are not hard drives. Those are the park release levers for putting the cars in neutral for towing since they dont have traditional shift levers
Best thing you can do is have IGLA security installed. Will prevent thieves from programing a new key or even starting the truck with the key without having the secret code. Also can install drone mobile which gives real time gps tracking and alerts to your phone. Also can add carjacking mode which will shut the car down if the key leaves the vehicle and someone attempts to drive off.
The "hard drives" with the orange tethers are actually for putting vehicle in neutral. Trigger the lock, pull the tether, and it pulls a cable that puts trans in neutral. They were probably accessed by the tow truck drivers to roll them on to the trucks.
I had an IGLA installed on my Durango. It requires a pin to be entered through steering wheel buttons to be driven away. It also blocks all communications through can bus. Even if a dealer or whoever tries to communicate via obd or and of the can bus points, their system will say no vehicle found. It’s a firewall basically and something Dodge should have done. As for preventing them from even breaking in, I’m still trying to figure out the best way to prevent that. I have additional security measures that further prevent the vehicle from being stolen as well including kill switches that some are physical switches (some are dummy switches) and some are remotely operated. I wouldn’t call myself a pro in this situation but I have professionally installed alarms on cars and am paranoid about my things being tampered or messed with and have done about all I could do.
unless you drive a tank, you can not keep a "determined" individual from accessing the interior of your vehicle. a hidden "kill switch" between the key, & starter relay is probably the best way to prevent a "drive away theft".
Hello Tom glad to see they was recovered i know how frustrating this is. Locks and alarms only keep the honest people honest now days. I have learned if the low life wants it they are gonna take it which is so sad now days. I feel for your loses and glade they was able to recover them both. I thank you for this video cause it would be nice to learn on how we can protect our vehicles better. Thanks again for all your doing.
The orange lanyards are attached to the park release. That's how you put it in neutral to roll the vehicle when it isn't running. The Harmon box is the actual radio receiver.
According to RamTRXRacing, thieves are now using a new method involving a repeater box to steal these trucks. Because these vehicles have a keyless entry system, thieves can use that to their advantage by amplifying the wireless signal from the key fob inside the home using "relay theft."
I’m a locksmith and yes ur right they are using a key programmer hooked to can hub to program keys and they can do it in less than a minute. the Durango they use a 12+8 cable hooked to the gateway behind radio.this is done on all Chrysler products dealer locked obd long ago so using can bus hub is common on these and is very very easy to do. they need to regulate who can buy these. My state requires a license to possess these but they do not regulate who buys them
I had an 88 Chevy blazer, I would always take my coil wire from the coil to the distributor off and pack in my carry on.. my car was always at the airport when i returned 😊😂
from other video:
"Hey Tom, Mopar tech here, I have had several stolen HEMI platform vehicles come through the garage in recent years which I had to get re-mobilized and everyone of them appears to be stolen in a similar fashion as your vehicles were. As for the Durango, the culprit removed the radio and dropped the headliner to disconnect and defeat the Cell LTE/GPS system, they do that because they think the vehicle can be tracked which in fact it can not unless federal law enforcement gets involved and issues a warrant for the vehicle data from the Rogers Network LTE providers. They removed the driver side dashboard closeout panel and disconnected the SGW security gateway module up above the hood release and then they removed the passenger side closeout panel to access the CAN-bus star connector behind the glove box and plug into it with there hacking equipment. Once they are connected to the CAN-bus network they can take control of the vehicle with there hacking equipment. And as for the TRX, basically the same process but they accessed the CAN-bus STAR connector behind the left air vent, the green thing you were looking at in the video. In my experience you can reinstall and reconnect everything then program new key fobs and the vehicle will come back to life but in some instances I have needed to replace the RFH radio frequency hub module and KIN keyless ignition node module due to software corruption then perform a vehicle reconfiguration procedure and program new key fobs. Oh and the orange strap inside the Durango center console is the park release cable and the TRX has the same orange strap behind the removable panel to the left of the steering column, the tow truck driver would have likely used them to load onto a rollback. I'm glad your vehicles were able to be recovered! Your dealership should be able to get them brought back to life! "
Thanks. Now I know what to do not to get caught stealing Hellcats!!!
There selling master 2024 dodge key's on the net
I don't think he wants to read this information, Getting to many Views as it is and will be Milking it for as long as he can.
@@meme2780 that is the name of the game isn't it ?
But the question of how did they open the doors to the truck remains an open question, no?
All this wonderful technology, cars can park themselves , drive themselves, prevent accidents... yet they can still be stolen easily...
Were so far removed from where we started, that right now, a carburetor and a manual trans will be more effective to keep thieves away.
New cars are easier to steal than the old GM steering column that I repaired thousands of them in the 80's& 90's
@@confucioussay5010I agree 100 percent
No suspect yet? How can that be? What about the owner (or renter) of the house where the trucks were found? There's your first suspect.... and if that person is not the thief, then I guarantee they know who is.
No kidding 😂😂
@@SlipFitGarage 1/2 the homes in Detroit are vacant with no owners.
Lol, these are professional auto thefts, they are not going to park stolen property anywhere associated with themselves or their fencing operation.
@LostPilotage
Lol... I've never woke up and found random stolen vehicles parked in my yard that I know nothing about. Have you?
Now that I read some other comments and I realize that half the houses in Detroit are vacant, I can see where ditching stolen vehicles at random houses is possible.
I didn't realize Detroit was like that.
@@SlipFitGarage A lot of work has gone into cleaning up Detroit in the recent 1-2 decades for the better. Especially near the redeveloped areas in Downtown. Detroit's East side, except the affluent and heavily policed citie(s) of Grosse Pointe, is still sketchy as can be where these cars were recovered. If you look where "Detroit City Airport" is, that is the East side and a very high crime area, with lots of gang activities and organized crime. This area still has a lot of blight and abandoned properties and yes stolen property, and other criminal activity is often fenced through known abandoned homes/properties/warehouses so there is no direct ties to incriminate. Much the same reasons criminals often illegal distill, or cultivating illegal drugs on public property such as State/Federal land out of sight deep off the path in parks or other land.
Get a ghost immobiliser, the stock equipment whilst being restrictive is designed to be permissive to dealers - the crooks all have devices that emulate dealer machines
This ^ You cant stop them getting in the car so all you can do is stop them from starting it and the Ghost , and other immobilisers that use tags can help . Lots of videos on youtube of Ghost's stopping car thefts
Exactly. Doubly so if towing a trailer, cheap and 100% effective
My vehicles have switches that I installed that are turned off when I leave my vehicle and the vehicle can't be started without the switch turned on!!!! As simple as that
There's even immblizers that can have pedal actuator sensors installed so you use a pedal press sequence as your "key" just hop in and press and hold brake double tap gas long press gas release brake and power to ignition or something like that
@@vandettabuilds6641 I do the same but use momentary switches to make sure I never accidently leave it on.
Glad you got them back ! ,I sleep good at night owning a 99 Ford Ranger 2.5L...I could track it down the next morning after breakfast on Horseback 😅
@@edcase3767 I can't afford much more!
I have zero interest in owning any of these newer vehicles, especially these “high end” 😂 mopars. Just headaches I don’t need or want. I have a fleet of old stuff that gets me where I have to go without worrying about anyone stealing them.
Ahh, you read sign do you?
The red/orange flag you say is a Hard drive is a parking paw release for the transmission so it can be put into neutral and towed. Most likely the tow truck operator when picking these up used it since he didn't have the keys.
How to tell Tom doesn't read the comments the top comment on his last video explained absolutely everything perfectly
You can connect to CANBUS via the OBD2 port, but some manufacturers disable certain features being accessed via the port, hence why they go in to the network at a different point.
If you know what signals the modules are expecting to see, you can inject those signals into the CANBUS network and fool the modules into believing the car is being started with the legitimate key.
The solution is better security at a software level. CANBUS networks need to be encypted and the modules need to know they are communicating with other legit modules, not a 'man in the middle' with a laptop.
security is soooo bad on these things....almost criminal.
Clearly, co part yards are full of them @@v12alpine
@@v12alpine Its likely somewhat intentional to feed the insurance business and dealer profits. "Designed to fail" for service revenue
you can't communicate with a key off condition. On the TRX, behind the vent is a "STAR" connector. It's like a junction for the CAN, now you're in control. they probably did the same on the Durango, just a different location of the connector.
@@dustyc324 not a dodge, so it's different... but I watched a chevy tahoe started with no key and a tablet on the can plug.
Where is the finger print powder /dust ??? The cops didn’t investigate SH@T !! Let’s be realistic!!
Possibly arm rest on driver door at the 7:00 mark. Could be dirt though.
That dust f's things up especially if it gets into the instruments. Almost impossible to remove it's presence. Detailing for days.
Finger print and DNA testing would never be used is simple auto theft cases, there would have to have been more serious crimes involved, on top of the auto theft.
@@tuck6464 Vehicle thefts for these types of vehicles are not simple auto theft. These vehicles are targeted by theft rings and gangs (who control the street takeovers). The problem is there are so many of these groups, the police can't dig deep into all of the thefts without an actual person in custody. Not to mention the socialist assault on our police forces (liberal defund the police BS) makes it even harder with less manning, funding, and capabilities.
@@scottjays360s.johnson2 I think its finely ground Carbon. A safe was stolen from a friend's house a long time ago and when the police came and dusted for prints, not only was the places they specifically checked covered in it but you could see where the fine particles landed on the surrounding surfaces, which became even more appearent when you tried to wipe them off.
It costs $7-$12 to immobilize ANY vehicle with a single simple switch on 1 or 3 different wires.
No fancy wifi, bluetooth, or expensive modules with phone apps or subscriptions.
The amount of technology a vehicle has means absolutely nothing unless you disable the functionality for it to start and run.
...and any 12 years old with a jumper wire can go right around all that.
@@oldblueaccord2629
Not if the 12 year old doesn’t know what he’s looking for and which circuits are disabled by the switch.
If the vehicle either won’t crank at all or won’t start when it’s cranked, he’s not gonna to spend the time it takes to troubleshoot, maybe needing to have the hood up as well. He’s going to give up and move onto another easy one.
I use a concealed mag switch and a latching relay or four to isolate injectors, starter, fuel pump and gearbox brain.
Good luck with working it out and bypassing all of those in under an hour or more.
Two failed attempts to steal my vehicles in the last five years says it works.
For under $50 it’s a heck of a lot cheaper than commercial immobilisers, and because I’ve installed it the cut in’s aren’t in the usual places that the commercial immobiliser installers usually use.
To anyone who’s looking around the loom it all appears stock.
@@oldblueaccord2629 you say that but if you are smart you don't use the starter wire at all. you use something like the fuel pump relay or crank sensor wire so they can sit there and crank all they want and it will not run
could even have it on another key fob rather then a switch for easy use and so there is not a switch for them to find
and they 100% will not sit there and try to find the problem and risk getting caught
Tom, first and foremost, to understand your Dodge vehicles and how they work you need a Dodge Electronics Engineer. As a former Ford Engineer I can tell you generically how the Controller Area Network (CAN) works but I’m sure that Dodge has some specific arrangement of modules and related functions. And they may only reveal so much in public. Basically every modern vehicle runs on network data that is transmitted between modules to control almost every function in the vehicle. There is no such thing as a CAN harness. CAN network data is transmitted throughout the vehicle on what are called twisted pairs of wiring circuits. These circuits are part of almost every harness in the car so data can flow where it needs to back and forth. Also, there are multiple CAN networks in the vehicle. Probably at least 2 that are high speed and at least one that is medium speed. Vehicle functions are divided up between these networks based on function type and priority. Typically there is one for powertrain control, one for infotainment/outside communication and one for lesser functions in the vehicle. I’m being real generic here on purpose. Now understand that all the networks have restricted access which is why the OBD port is virtually useless to the thieves. You can only access so much functionality through that connector by design. So what ever module Dodge has located behind that vent panel allowed the thieves to plug ion a surrogate device that accesses part of the network directly. And yes all the different antenna connections are unplugged in an attempt to stop outside communication/tracking. The thieves have very sophisticated modules that can mimic normal signals within the vehicle CAN networks that allow them to make the vehicle function. Take out the original modules, plug in your theft version and drive the car away. If the head of the theft ring spends 5K to have a module made and uses it to steal multiple 100k vehicles I think you see the cost benefit. Just follow FB Marketplace and see how many ads there are for Hellcat engines, interiors, etc. It happens every day. I figured your were gonna get chopped up and were just parked for a few days.
And unfortunately you can’t just dumb down the vehicle as control modules are necessary for the vehicle to operate as designed. Now you got me interested to research deeper some ways to prevent theft in electronically controlled vehicles. In the meantime you can still add some hidden power cut off devices that prevent starting the vehicle. But, even this has to be done carefully because some modules rely on Keep Alive Power to retain memory in their RAM related to how you use the vehicle. Hopefully someone makes a device for selectively shutting off some of the vehicle power. That’s another investigation project!
So after reading this I am wondering if a small strong box could be clamped over the CAN connection ?
@@manicmechanic9117 It doesn’t work that way. There are multiple places to hack into the CAN system with the right equipment. Not just the ODB connector. that’s part of the reason the thieves disconnect other vehicle modules. Blocking the OBD port on one brand might help but not on another brand. Not every manufacturer systems is uniform across the board.
@@manicmechanic9117 Everything is on the canbus, head lights, brake lights everything. Its like the light switches in your house.
This comment!! Pin!!
Sad state of affairs Tom… I can remember when I was young how we never locked our cars or our houses. Glad you got your stuff back.
Ironic how Tom ask all these How to questions and Ram tech went on a 3 page comment answered all his questions?
@tombailey just read ur comments and evething is there 😂 LOL!
he answered many good questions but not all that he asked. He also wants to know what they used to do it, not just that they used "hacking equipment" He also wants to know about a way to disable all the fancy RF stuff and get back to a simple old school way to get in and start it or even a cellular way to do it.
Yes, it is obvious he doesn't bother reading the comments so why ask his followers?
Tom, you stop them from taking the vehicles/breaking windows by keeping the cars in a secure setting. I know it sounds too simple to make sense, but thieves go after easy targets. They don't want to put in hard work to get the cars. You need to make it difficult for them to even get to the cars in the first place. You need to make it difficult for them to drive the cars out of the property. You need a good fence and an even better gate. There was a car dealership that thieves tried to steal 3 Durangos from by crashing through the front gate, and the company that made the gate has an incredible design because it destroyed 2 of those durangos crashing into it. The 3rd durango decided to drive around it after it saw the first two get totaled by the gate. You need to secure your properties better with some serious theft deterrent gates and fencing. You need motion detector lights on the entrances and exits that alert camera's to anyone coming and going. Simple steps like this put major obstacles in the thieves way and they look at that stuff as too much effort to overcome and they'll move onto the next spot.
That only works if you don’t drive the vehicle anywhere. I have most of what you mentioned at home, but my 2014 SS was stolen when I was at the gym.
@@woods-garage These cars are being stolen at Tom's home is the same situation as the ones stolen at his shop - he needs to make his shop more protected as well as his home - it's as simple as that.
@@aSinisterKiid These were stolen from his house...not his shop.
@@formula7414 Ah I thought they were parked at the driveway at the shop, I misunderstood the phrasing. But in any case, same thing goes for the home as it does for the shop. If he's going to have $100k cars parked somewhere then there needs to be more protection in place. Gone are the days of being able to leave your front door unlocked in your friendly neighborhood.
"They're still gonna break your fucking window" 🤣🤣🤣 truer words have never been spoken 🤣
Ain't NO sticker no matter what it says gonna stop that! He's expecting criminals to be able to read! LOL!
They tried to steel my wide body scat pack charger. Busted out the back window. Re programmed a key and tried to start it. We have a kill switch so they couldn’t start it. My cameras cought then breaking the window and stepping on the brakes to start it at 5:21 am
These pricks work pretty hard at not working.
Pays better than working for a multi billion dollar corporation with record profits though.
@jasonm3109 high risk high reward.
Every inmate I have ever met in state prison will spend 24 hours trying to figure out how not to do 8 hours of work. It’s not that they are dumb people, in fact the opposite, but they refuse to do anything good, it’s like they are just preprogrammed to be a POS.
When u can make 10k in a cool hours.... I don't blame them...
I’ve worked at a car dealer (Subaru) for the past 15 years as the electrical diag tech, I think the thieves had to have access to dealership proprietary wiring information to be able to know exactly what to disconnect and what to take apart to get to it. This info is not available to the general public. Every tech has there own password and everything is done with multi factor authentication, any parts having to do with security are linked to the vin# of the car and can’t be used in any other car. Once the vin# is programmed to a part it cannot be changed ever. The green connectors are can bus junctions. The single coax wires in the kick panels are antenna wires for gps or xm radio or telematics systems, on Subarus there are 3 separate antennas, shark fin on the roof and 2 in the dash. Even working on this stuff every day I couldn’t steel one easily, it would take a bunch of research and things would be different for each model car so planning would be required. I’m glad you got your vehicles back without major damage and I hope they catch the thieves. As far as putting stickers saying your vehicle has an aftermarket tracker I probably wouldn’t as your’e just telling a would be thief to be careful and look for it before moving the vehicle. I would just suggest hiding it good and not saying anything. I’m looking at buying one of your hard wired trackers for my 65 C10 can you tell me more about it?
Yeah. I've been a dealer tech for 20 years. Same as you, I would have to research outside work provided info to figure out how to go around security. I remember old Toyotas had a key sequence and opening and closing of the door to program keys. It also made the lights flash and horn honk during the procedure. So I could steal one of those, but you would probably heare me opening and losing the door and the horn going off as I'm doing it. I'm at Honda and have 4 different fields to fill out for key programming. I'm guessing they could easily look if a key was made for that VIN recently. (not so sure kaw enforcement would work that hard) I
wouldnt even know where to find alternative programming tools if I wanted to.
The real rub is we all are now paying 150 to 300 for a replacement key for our vehicles that are no more secure than the old real keys and tumblers that was cheap. We are just being ripped off all the way around.
I will put it in the public domain. Most vehicles after 2020 come equipped the a security gateway. This blocks certain udp and programming protocols from the components on the network (canbus). The standard obd connector sits between the gateway and the rest of the bus. Simply bypassing the gateway gives full access to everything on the network, and bypassing is as simple as connecting to the bus outputvof the gateway module.
There are many ways to gain entry to the vehicle, there is a known Bluetooth exploit if it's fitted to the vehicle for example on newer vehicles. You are correct about the GPS and dealer comms. Network devices that are removed and disconnected.
As for ghost immobilisers, they just block the start/ignition functions on the vehicle. Linbus and canbus to bcm can be replicated to negate what a ghost immobiliser does. The signals being blocked are simply relayed to the bcm....
Lol it's not the hard drive. Those orange handles are for the neutral. So they can be towed.
The console is the dead battery emergency mode to limp to the house. Some set teen driving modes that are unknown to the drivers.
guess he didn't read the the comments about that on the last three videos 🤣
@meagain6665 lol, what??? That's to get the vehicle in neutral to be towed. I should know i own a durango and had to be towed, and that needed to be pulled.
Orange straps are the parking pawl release
@@FinnellRacing you would think lol. 🤦♂️
Thank you for taking the time to explain how these people are adapting to newer systems.
Customers shouldn’t have to do vast amounts of research to figure out how to prevent having a vehicle stolen.
The factory should be doing this before it ever reaches the customer.
People keep buying them so there is no incentive 🤷🏻♂️
I say make booby traps legal!!!
That's the price you pay for being lazy. I don't want to have to use a key to physically unlock my car, lazy. I don't want to have to insert a key into the ignition to start it, lazy. And the main reason I hate modern cars locking my doors after I reach a certain speed. Anything ran by a computer can be hacked. The only good thing about GM is on star. They can shut your car off remotely.
I’m suspicious if any fingerprinting was done. Unless the techs cleaned up really well after themselves, usually they leave a dusty mess behind.
was wondering that too. years ago i had a truck that matched the description of one used in a robbery and got towed. when i went to pick it up there was fingerprint powder all over the place and took forever to get that stuff cleaned off.
They left the backpack that’s evidence. They don’t really care about car theft for some reason
TOM ... ON YOUR LAST VIDEO I RED A LONG COMMENT BY A RAM TECK THAT EXPLAINED EVERYTHING THEY DID INSIDE YOUR VEHICLE AND WHY THEY DID IT YOU NEED TO DMGO READ THROUGH YOUR PREVIOUS VIDEO
Idk the timing of all this. But I was wondering if Tom even saw that comment. That dude explained every single thing going on there.
He doesn't read his comments you're talking about the one that was at the top of the list TH-cam automatically made it the number one comment because the algorithm recognized it as good factual information that was being read by every single person
@@RingTunedit was at the top because it had a ton of likes, the algorithm isn’t that smart lol
@@RingTunedhow naive to think algorithms do that. they only do what's necessary to "boost engagement".
WHY ARE WE YELLING??? Use your words normally yelling does nothing but annoy
This old-timey dinosaur here from the day when GM only had a dozen or so different keys for all of their cars, and my 64 Nova Wagon (had a 327/300hp warranted from a Vette back in the day with 4sp M21 Muncie) even had an ignition that, once unlocked, needed no key. I'm still savvy enough to have an overview of Can Bus, but I find the tech astonishing. Thanks for helping give me a better knowledge of the complexity of today.
My first Chevy Suburban had remote door lock opening. I was at a large mall and had never checked the range of the remote.
I had visual on the truck, hit the remote, and two other GM vehicles sounded the horn and flashed the parking lights. This was the last time the system remained active.
How do you explain to the insurance company that your car was stolen yet no glass was found on the ground where it previously was parked?
Tom obviously doesn’t read the comments.
@donmelendez69 I think this is a second part to the last video recorded on the same day he went to the tow yard
Ah…that makes sense.
The "behind the headlight" is called a canbus injection attack. The theives now know that they can bypass the obd2 port in some cases. They unplug the headlight connector and plug directly into the wiring harness and the respective module. They "tool" used communicates with the other modules and allows the thief the ability to shut off the alarm and basically open the door. Layered security is really the only way to go. Knockout 360 and a handful of other youtubers go more into detail on their channels. IGLA, compustar, carlock, multiple GPS and a secure garage are starting points.
Thanks for sharing and trying to educate those of us with modern Dodge Hemi fleets how to protect better!
Flipper zeroes with antenna and signal amplifiers can copy and repeat key signals so that could have been used for the TRX.
Thanks for digging into this so we all learn where we might change something we're doing to prevent this!
those orange pull tabs under the dash and in the console are used to put the vehicle in Neutral got towing or maintenance, those were probably used by the tow truck drivers to allow them to get on the flatbed easier.
I am willing to bet the tow company scuffed the front bumper. Durango is a long boy, and they almost certainly flat bedded the vehicle, it was pulled up tight to the cab guard so they could hook the TRX to the back hoist. Recover 2 vehicles for the price of one tow.
@@LostPilotage Agreed, that looks like a winch plate dent to me...100% the tow truck drivers never care when recovering stolen or wrecked vehicles.
@@LostPilotage I noticed the Durango's neutral release was all bent up too. I know a lot of fca neutral releases are easy to mess up though, chargers are really bad, they'll straight up bend or break off and still not even go into neutral lol
also those green connectors are what are called “star connectors “ and u can plug a jumper to them and access the pcm and other modules without powering the vehicle.
It is a ridiculous amount of effort the thieves put into this.
Thanks for the insight. It's a start to figuring out how to put a stop to our own vehicles getting stolen or others.
Thanks Tom for making these videos and helping others. The orange pull straps are to put it in neutral so it can be moved. All cars with electronic shift have that.
Network security on cars is also terrible because anything on the network is pretty much trusted which is why we had hondas and jeeps being hacked via the wifi on the infotainment system that was also connected via can bus (amongs other protocols) to the ecu and other modules. You run into situations where savvy people with a laptop can over ride stuff like your drive by wire pedal of steering wheel.... there have assasinations linked to hacked car networks.
The cam buss port is behind the glove box. Thats how a locksmith or dealer writes the key fob. I have Revelco kill switch plug. Compustar t13 with drone gps. Ibalso have a carlock hidden. IGLA is next just so they cant rewrite the keys
The thing about CANBUS, is that it is insecure. The system is based on the premise that someone would have to literally pull apart you car to gain access to the system. There is no actual security because it'd be a pain in the ass to design. It'd make the system slower as they have to pass security protocols, and also make it more expensive. Some cars have more than 1 CANBUS system, and all have a bunch of modules. All the thief needs to do is access the Gateway, inject the 'Command' and they have access to every module.
I'm a Mechanic, but I don't know Dodges. At a guess, the Gateway is the Green modules you keep seeing. It could even be the CANBUS termination block, and they'd still be able to access through there as well.
Its like 'Would you run a physical firewall to connect an Ethernet cable from your house to the garage', probably not. Its the same with a Vehicle. No real need to secure the network because its unlikely that anyone would attack it. But might be a great idea to start thinking about it! At the end of the day, if the CANBUS messages were encrypted, there's always someone that will be able to decode it so its a never ending battle.
I asked above I never seen Canbus encrypted. Not saying it not possible.
Excellent questions and reasoning. Also, I really like that you are out to help others and what happens. Crucial 929 knows the game. Just like that. You knew you have people with this knowledge. This is such excellent use of your ability. I just had someone not steal my 1969 Chevy van, but, egg it multiple times, and the last two times let off a fire extinguisher inside. Have you ever seen that? It is a nightmare and I am 77. You cannot believe what it takes to clean it up and no insurance coverage on that.
Lots of people get their cars stolen. Any way you can help people understand how to prevent any of it is a public good. After all, as in racing, Knowledge is Power, that is why in racing there is data collection. Keep up the good work. I watch all of your and Steve's videos. They are so informational.
Literally went online and ordered a Faraday Key Box because of the 2 stolen vehicles. Great tip Tom, thanks.
Tom I'm glad you're trying too help.others too keep there vehicle safe.. that's awesome
I love how you’re honest. I’ve always wanted to know the same thing how these people are doing it
Those straps put your vehicle in neutral when you pull them. There are plates that people make you can put over those so someone can't pop your car in neutral in 5 seconds and roll it away. Thieves can pull those and literally roll your car down the street and work on getting it started there instead of hanging out in your driveway.
Needs a fuel pump or ignition immobilizer switch for when you walk away....remote or toggle...or rotary....
Keep em coming!! I always enjoy learning stuff like this and it’s helpful to others..
Excellent presentation. Thank you. If nothing else, you are making some great content from this. Not to beat a dead horse, but the lesson learned is to not leave multiple things worth $100,000+ sitting out on the driveway. Even if you fully immobilize them, they can tow them in an instant. Repo stuff for doing this is amazing nowadays. Anchor chain them to some deep set bollard? Install remote control pop-up bollards around the perimeter of your property? They will never be safe sitting in the driveway, especially not around Detroit.
Thanks Tom for pursuing this for the rest of us so we can learn from your (bad) experience. 👍👍👍 I sure hope they get these guys.
sounds like educate the FUTURE car thief with this video
Im really glad you got your rigs back. It sucks they would do this to you. You seem like such a nice guy.
Back in the day my uncle used the cigarette lighter for a kill switch.
@@TheCritterWindow that’s a fucking great idea man.
Hell i still do.......
most cars worth steeling have no lighter
@@turfguy420 If your car is old enough to still have a cig lighter, its most likely not worth stealing.
Pull the fuel relay, or install hidden kill switch.
Plus Multiple Air tags/smart tags hidden inside and outside car.
Anti RF bags for your key fobs in the house.
Glad you have everything back. Keep on the hunt. See you at Sick66
Discrete fuel pump signal interrupt switch is my go to
I’m telling you. Sick. The Club start selling them. 😂😂
Looks like we just go back to the steering wheel locks or take all the wheels off at night. car thieves will always find a way to get in and drive off in a car. having an aftermarket relay on the starter cable to disable it from even starting could be the answer.
They took DNA from my truck and they got a hit pretty quick. Way less than a year. And it so happened one of the peoples DNA was already in jail. The thieves left a stack of signed checks obviously a fraud scheme but never charged them for the stack of signed checks. Tons of donated clothing was left in truck also. Ended up being two tweaker girls.
I am definitely riled up about this reoccurring issue that you are experiencing! Saw the old Ford go away way back when. Mr. Bailey, are we trying to make this too complicated? There are VERY BASIC things that will keep your vehicle from starting all day everyday, that the vehicle will have no idea it is disabled, until someone tries to start it… What is necessary for internal combustion? You got this!
If you go the computer route, they are WAY AHEAD of you, and already thought of you next technical move. Think very basic.
No OBD port. They got into the CAN bus port to talk direct with the body module.
Orange pulls are for the transmission neutral cable. With an electronic transmission, there is a cable to put it in neutral when you cannot start the vehicle or it needs to be towed.
all you have to do is ground the can bus wires and boom whole system is down. simple hidden toggle or a remote relay its pretty simple to crash the can bus and obd wont even read
That would work.
That be a good way but might damage something long term.
@@oldblueaccord2629 na i have to fix shorted can bus wires all the time its just like a damaged network cable. most that would happen is if you turn the key on before removing ground is a bunch of u communication codes.
Anything electric ⚡ can be manipulated and hacked that's why 🤔 I believe all this key less entry is a bad idea 💡
Two factor authentication is what you want, key and phone. Disable for a certain time when being serviced.
9:27 pretty sure the orange cords are for the transmission release to get it into natural. Seen it before when doing repos.
I'm a software developer. I have written engine diagnostics decoders. I have written decoders for J1939/J1587 diesel and also some OBDII. It's all canbus. The various protocols ride on the canbus network standard. Same thing with aviation and the ARINCS protocol.
Another video on all the security features. Well done 👏
What's got 4 LEGS & has an ARM?
A really really happy Rottweiler
The best security system known to man. I have one and it works beautifully.
I have 2 rotties, and they do their job very well
The orange tethers in the center console of Durango and left side of dash on TRX are the manual neutral release for the transmission. Due to the trans being electronically shifted you need a manual neutral for towing etc.
get a Male and female connector cut OBD 2 port rewire it that way when you leave the car, you can take the port with you and while you’re at it, you wanna put some kill switches in obviously
I was thinking definitely Killswitch if not two battery and fuel pump maybe separate switches but a fake OBD two just screw at least and then the other one really shoved up in the dash it’ll at least give u a small delay
Thank you. A true winner is taking the time to take a tragic personal violation into a positive . Anyone who thinks differently well we will leave it at that......
Greetings Tom, The OBD2 port is for the general scan tool to contact to the different control modules in the vehicle. This is the can bus system. You can google, is the OBD port part of the can bus system and get a better understanding of can bus. Short of parking a vehicle inside a secure area, garage. It is very difficult to insure no damage to your belongings. Locks and other devices only keep honest people honest, and that really sucks. Best wishes on returning your life to normal.
The orange strap hanging down on TRX and in center console of the Durango is the park release for the transmission. That was most likely used to tow them away from where they were found. The headliners were most likely pulled down to access the GPS antenna quickly and disconnect it. The antenna wires under the dash are disconnected cause there is a TBM2 box in the dash that handles Telematics (Cellular signal, cellular triangulation). The Harmon box you found is the actual radio, the radio screen is just a display for that Harmon radio. The radio handles alerts sent back to your phone via the uconnect app. The green connector blocks you found are called "star connectors". They are basically a splice block for all CAN circuits for every module in the car. Green are CAN-C, white are CAN-IHS. The reason they go at the Star connectors instead of the OBD port is cause those vehicles have a Security gateway module installed to prevent access to the vehicle through aftermarket scan tools/devices.
You should check into offerings from Stellantis as far as theft prevention goes. Most of (if not all) the SRT vehicles has an option to lock the RF hub so new keys can't ever be programmed to the vehicle again (so make sure you get a bunch of spare keys programmed before they lock it) and other vehicles have a enhanced valet mode where it limits the engines HP output to something very low (like 20hp) so the vehicle can start and idle but not drive away until a pin number is entered into the radio.
If I remember correctly, the orange loops are manual releases to put the transmission into neutral when you don’t have the key for towing purposes.
The orange pull handles are the shift lock release. You pull them, and it's in neutral. After unplugging all of their tools, they can push the vehicle around
I had a home security guy tell me once that if a sign in the yard telling a thief that a house was protected by a service did not stop them, nothing will. A sticker might do the same for a car.
That tint on that white pick up truck is crisp🔥🔥🔥🤙🏾
Tom anytime theres wire or a wire harness they can access your computer system. Obd port is just an access port or doorway to your compiter system. They dont need the obd. Its called wire splicing. Its a device that clips on the wire and cuts through the plastic and locks into the wire. Its no different than taking two wires twisting them together and putting electrical tape or wire nuts on it. Exact same thing but done cleaner and more quickly. It literally clips onto the wire. Then they have access just like through the obd!!! The true only way to stop this stuff is starting with the manufacturers . You can do what i did with adding a gps hard wired and kill switches that shutdown all power. The garmin is like onstar. If they dont disable it the car can be found as long as there is battery power. When i come home i can show you how they get into your system. But just because they have the iPad it is the same. You dont need obd with wire splicing. The manufactures need to step up or get rid of keyless/push button start. Go back to keys and this would happen alot less. Once cars started using software then its hackable.
The reason this information is kept secret is to protect you! Do you want to tell everybody watching this that anyone can purchase the black market programmer for $29,000? It does sound expensive, but it pays for itself the first time its used.
29,000....it's way less than that. I can buy a can bus interface module and interface harness for 200. The rest varies but it's all reusable so it gets paid for with the first sales on Facebook marketplace.
I dont think a stolen Mopar gets you 30k. and you need to have a connect on how to get rid of it. I would say a week or two and you get your money back.
@@dustyc324 these are worth pretty decent money, either shipped over seas or parted out. Getting 30K in parts from a 100K vehicle isnt much of a stretch. This isnt your grandpas old mopar truck
The programmers used can be purchased for $600 and a better version for $3,000
@warrenmichael918 i know they part them out, but everyone buying them knows it's stolen. it's mostly used for insurance repairs that they get discounted parts and get paid for OEM new parts.
Wish you the best ! Watched the Sick videos for drag weeks and sick week events because of Finnagan. Then seeing your Camaro’s 1&2 how freaking nuts those cars are. You seem like a genuinely great guy. Seeing you drive into the sand trap and roll with it like it was nothing. Sucks you have to deal with this violation! Hopefully they get these rides back running right.
The colored cord is a park release. Which allows the vehicle roll. Then you gain access to the bus and give it power to the right wire .the system will power up then you can crank it and drive away.
this is why i wont have keyless entry on a car as it can be cloned by a flipper zero, but what about using a old school style Thatcham 2 transponder immobiliser connected to the fuel pump and put the receiver where you would place your keys in the centre console, as the old style Thatcham immobilisers only have a 4-5 inch range for the receiver/transponder
Thanks for trying to educate us all, hard lesson for you, but opening up the info stream for us! Am looking forward to all the content, lol!
The red strap looking thing is the transmission release for neutral. Tow truck driver likely pulled those
The OBD-2 connector provides access to the CAN network.
Listen to police scanners.. the cool-down period is standard practice in thefts, carjacking or however they got into your vehicle.
Hard to watch this and listen to Tom not know what anything is when its been described in comments on the previous videos by Ram technicians... dude take 20 minutes and read some comments
@91CTD can't read every comment.... would take more then 20 minutes... I'm sure he has a lot going on right now and reading comments takes a bit... did he ask if u had helpful information to reach out to him
Seems like it's the same day as the previous video so he wouldn't have had comments to read at the time of recording.
You also should consider that this video was made before the other video posted. 1 day at least for editing seems reasonable.
For sure seems like Chrysler would have had a fix by know. Everyone knows it happens, so what is really going on.
And had to listen to it twice. Thought it was going to be new info, but...No, just a regurgitation of the last one.
The Harmond box IS the stereo. And the pull tabs that you were calling "hard drives" are transmission neutral pull tabs. You pull them and it puts the transmission into neutral.
Hey Tom those levers you are talking about are not hard drives. Those are the park release levers for putting the cars in neutral for towing since they dont have traditional shift levers
Best thing you can do is have IGLA security installed. Will prevent thieves from programing a new key or even starting the truck with the key without having the secret code. Also can install drone mobile which gives real time gps tracking and alerts to your phone. Also can add carjacking mode which will shut the car down if the key leaves the vehicle and someone attempts to drive off.
The "hard drives" with the orange tethers are actually for putting vehicle in neutral. Trigger the lock, pull the tether, and it pulls a cable that puts trans in neutral. They were probably accessed by the tow truck drivers to roll them on to the trucks.
I had an IGLA installed on my Durango. It requires a pin to be entered through steering wheel buttons to be driven away. It also blocks all communications through can bus. Even if a dealer or whoever tries to communicate via obd or and of the can bus points, their system will say no vehicle found. It’s a firewall basically and something Dodge should have done. As for preventing them from even breaking in, I’m still trying to figure out the best way to prevent that. I have additional security measures that further prevent the vehicle from being stolen as well including kill switches that some are physical switches (some are dummy switches) and some are remotely operated. I wouldn’t call myself a pro in this situation but I have professionally installed alarms on cars and am paranoid about my things being tampered or messed with and have done about all I could do.
They probably used a flipper to steal the RF signal which they used to get into and start them.
The orange pull straps you see are the release for the transmission so you can place them in neutral to tow them without applying power.
A dealer tech told you yesterday what the green plug was.
There are still hidden key holes to allow entry if your vehicle battery goes dead.
unless you drive a tank, you can not keep a "determined" individual from accessing the interior of your vehicle. a hidden "kill switch" between the key, & starter relay is probably the best way to prevent a "drive away theft".
Hello Tom glad to see they was recovered i know how frustrating this is. Locks and alarms only keep the honest people honest now days. I have learned if the low life wants it they are gonna take it which is so sad now days. I feel for your loses and glade they was able to recover them both. I thank you for this video cause it would be nice to learn on how we can protect our vehicles better. Thanks again for all your doing.
The orange lanyards are attached to the park release. That's how you put it in neutral to roll the vehicle when it isn't running. The Harmon box is the actual radio receiver.
According to RamTRXRacing, thieves are now using a new method involving a repeater box to steal these trucks. Because these vehicles have a keyless entry system, thieves can use that to their advantage by amplifying the wireless signal from the key fob inside the home using "relay theft."
The orange pull strap is a neutral engagement mostly for tow operators to allow vehicle to roll without power on.
I’m a locksmith and yes ur right they are using a key programmer hooked to can hub to program keys and they can do it in less than a minute. the Durango they use a 12+8 cable hooked to the gateway behind radio.this is done on all Chrysler products dealer locked obd long ago so using can bus hub is common on these and is very very easy to do. they need to regulate who can buy these. My state requires a license to possess these but they do not regulate who buys them
I had an 88 Chevy blazer, I would always take my coil wire from the coil to the distributor off and pack in my carry on.. my car was always at the airport when i returned 😊😂
By the third brake light there is a satellite radio antenna. I believe it controls GPS tracking signals as well.