Hacking A PSP-like Car Key Registration Device – PlaxidityX Ep 16

Cars, Hackers & Cyber Security

Touted as an off-the-shelf solution for key fob programming, a mysterious PSP-like Car Key Registration Device promises to sidestep traditional authorization channels. In this episode, we share how the PlaxidityX team simulated various car responses to test whether the device truly mirrored official protocols. They recount the odd mix of user-friendly design and features like “turn ignition on,” which raise eyebrows for anyone concerned about vehicle theft.

Surprisingly, the device carried a comprehensive database of manufacturer codes, potentially reverse-engineered from legitimate testers. Even more startling was the ease of resetting the gadget once it locked itself, underscoring the supportive network fueling its use in unauthorized contexts. Alongside these alarming observations, the episode highlights that the device’s disclaimers appear designed to deflect responsibility from its creators.

Despite the unsettling findings, there are proven strategies to neutralize the threat. Strengthening firmware, enforcing server-based authentication, and employing more complex vehicle security checks can all limit the device’s impact. The lesson rings clear: even consumer-facing auto repair tools must be scrutinized to protect cars from malicious misuse. In essence, the conversation underscores that automotive cybersecurity demands both technological vigilance and a readiness to adapt.

Chapters:
(00:00) Unpacking an Off-the-Shelf Car Hacking Kit
(02:41) Experimenting with the Off-the-Shelf Car Hacking Kit
(04:40) Challenges and Discoveries
(06:00) Key Registration Process Had Two Stages
(08:38) Conclusions and Safeguards
(09:24) OEMs Can Use To Render This Device Ineffective
(11:07) Outro on PlaxidityX's Research into an Off-the-Shelf Car Hacking Device

Contact us:
https://www.linkedin.com/company/plaxidityx/
https://www.youtube.com/@PlaxidityX
[email protected]