Hacker News new | ask | show | jobs
by londons_explore 1457 days ago
The counter is only one byte though - record 256 messages and you have the whole set.

No need to understand the protocol or anything - just record a few minutes of data, find when a message repeats (indicating whatever counter mechanism is in use has rolled over), and replay that loop repeatedly.

The only time this technique doesn't work is when a challenge-response algorithm is in use, but car stuff doesn't tend to do that except for some lock/security/firmware update type functionality.