|
|
|
|
|
by londons_explore
1457 days ago
|
|
The counter is only one byte though - record 256 messages and you have the whole set. No need to understand the protocol or anything - just record a few minutes of data, find when a message repeats (indicating whatever counter mechanism is in use has rolled over), and replay that loop repeatedly. The only time this technique doesn't work is when a challenge-response algorithm is in use, but car stuff doesn't tend to do that except for some lock/security/firmware update type functionality. |
|