What are you talking about of course it worked the first time :)

Lmao

Someone hacked your video, too

No worries.

I got the notification the second time, so you got that going for you. I know sometimes UKposts punishes people for re-uploads to fix something. You got it re-uploaded pretty quick.

̣

I died 🤣

Mini is owned by BMW.

you beat me to it by like 20 seconds... the timestamp is nice though

+

With all your great research on the topic, how much time is spent coming up with the cool project names vs the actual coding? Rolljam, Magspoof, PoisonTap, Glitchsink...etc. 50/50, right?

samy is my hero

samy is my hero

I’m now imagining a Mr Magoo like scenario where someone just stumbles upon vulnerabilities

I'm not a fancy security expert like you, but I am a software developer working on a web-based fintech app, and... yes, can confirm, a large portion of any development/IT/tech is just trial and error. And lots of banging your head against a desk trying to figure out why the debug output doesn't match what you expect 😂

This is important for magnetic strip credit cards, as an example. The card reader needs to know how quickly you're swiping the card and it uses a standard starting sequence to synchronize. It doesn't matter how fast you swipe the card (within reason) as long as you don't vary the speed and the whole strip goes through the reader.

@@theodoric4270 i always thought this was dumb since maintaining a constant velocity is not always easy. I think a better system is either to use two tracks with a clock track or a second magnetic polarization axis. But magstripe is slowly dying anyway...

@@donaldviszneki8251 it worked well enough, and that's always going to be the standard to hit. When magstripes fail it tends to be from demagnetization or it physically chipping off rather than a rate error From a security standpoint, a lot of the RFID upgrades for credit cards and badges just became "Spooky replay vulnerabilities at a distance" rather than proper challenge/response implementations

He pretty much summed up my job there... And according to my resume I know what I am doing :P

That's just called debugging

It's like I'm back in my matlab class... **stares of into space due to painful memories**... good times lol

Yep. The real work is going back and figuring out what part of the five different variables you tweaked in "throw everything at the wall until something sticks" mode that made the difference.

"Huh, my code work, and I have no idea why." said the greatest engineer I know.

It's funny cos it's true

Its ironic because Mini is BMW.

Typical

Seeing this comment first then finding the BMW made me laugh.

I laughed as well then I remembered I drive a bmw and also can’t park.

I understand some of these words.

Your sir are a smart cookie. But I'm sure you know that. Thanks for the information. For reasons I do not have the ability to explain. The fact that wavelengths have lengths and how they react to specific objects at different sizes escaped my knowledge. I can confidently say it will not escape it again, at least for another 15 years. So thanks

@@dorjanhajdari2670, thanks. Well, experienced anyway… I had a guitar teacher a few eons ago who said, “not sure I’m ‘experienced,’ but I have had a lot of experiences!”

@@mr88cet Clever teacher! I love how he defines what he seems to contradict only to prove it true through his definition.

X-ray it. Stitch the images. Make a circuit diagram and analyze. Voila. I did this as a project in an EE grad class.

Samy is my hero.

Sounds like the whole Kerbal Space Program community

@@carchocolate93 ya

Really ought to be a word for this wonderful opposite of gatekeeping.

@@carchocolate93 yup

@@EternamDoov awhhh

lmao

I'm in my mum's car. Brum brum

😂.

me 2

Sounds similar to a DDOS attack?

Actually it has little to do with processing power. The signal you are jamming with is basically noise to the car, and if that noise is "louder" that the actual signal from the key, then all the car "hears" is that noise. It's like trying to have a conversation next to a jet taking off - your voice and the jet engine emit different frequencies, but since your ears listen to the whole frequency range, the jet completely overpowers, but a microphone with a frequency response tuned to the frequency of your voice could hear you.

Just run him over instead

Even if he reserves the spot for you on a busy day?

Specially not someone who looks like the villain in a horror movie like at 1:22 :)

... But the hacker with the hoodie and laptop is in the passenger seat, trying to gather WPA PMKIDs... Do I just not park? EDIT: Instructions unclear; vehicle is now in lake and hacker is very angry about his laptop getting soaked. Something about SSH keys being irreplaceable?

Remember: don't judge a book by it's cover.

Doesn't it have proven psychological causality?

Me too 👍

Thats me every day in online school lol

He nailed that so well on the comedic spectrum.

Hilarious!

*fairly

Me during chemistry class be like

Thank you, I was wondering

yeh

Same, thanks

Thank you love you

Even funnier that he didn't blur it in all the other shots

You know Mini is actually a BMW automobile?

Ahh thanks. I thought he made a jab at BMW drivers for parking recklessly which doesn't ring completely untrue in my experience

@@joepbeusenberg Well, yes and no. Yes, as in the company BMW, but no as in the BMW brand. Mini is not part of the BMW brand.

@@DirtyPoul but you will find many components of a mini have bmw on them? Infact the same parts that fit on some of the BMW range.

@@stuartd9741 Yes, of course. Some of the cars share the same platform, so that's to be expected. But that doesn't mean that Mini is part of the BMW brand. It's a separate brand owned by the company BMW. That's what I meant.

I clearly saw that it was a bmw and parked like that, but the joke didn't register in my head for some reason lmao

Ironically, Mini is owned by BMW and is usually driven by women.

@@SangheiliSpecOp it is like when you see something so many times your brain ignores it because it is the norm

@@Leo-zt7fo do you have any sources on those car ownership demographics?

@@SentientTent the picture on 1:00 has a tiny BMW logo on the badly parked car.

Or just collect the keys from the fishbowl party

oh no.

Oh yyyyyyy

Nice dude! Hope you get more cars soon!

Lol

Just unlocking a car is not enough.

Mark Rober: I hacked into Elon Musk's car (to save the world)

It would be a burglar as a robbery would only take place if you were in the car 😁

@@matthewkambic4939 Burglary is specific to thievery in buildings. And either the way, the comment states nothing concerning thievery. So it would only be a hacker. But if the hacker stole the car, he'd be a car thief and he'd be commiting grand theft auto

Dude, way to be a prick.

@@marksworkshop8724No one's being a prick😂 I swg, people wanna make drama out of anything and everything. @Matthew Kambic, did you feel like I was tryna be a prick towards you?

I managed to open my microwave e by downloading app to unlock microwaves. Just run the app and boom! Now you can open microwave doors without any key :) bluetooth may be needed tho

I'd rather drive a microwave than a Skoda.

@@N.I.R.A.T.I.A.S. i will microwave a drive than a skoda

I unlocked my car with microwave. No need to use keys!

😂 happy frozen fooding!! OMFG THS IS AN EPIC COMMENT THREAD!!

Therea missed part in rolling key explanation. Someone cover that plz lol

dalai lama once said: if you need an hour to explain something, you know jack sh**...

@@pahvalrehljkov in things like business related videos, they artificially inflate the information to fill a certain amount of time. Because the person creating the presentation isn't gonna get shit for a two minute presentation compared to one that looks like he put more effort into it. Even if it's better for everyone if it's short.

I understand that reference, and am glad to see another man/woman of culture

Nose picking lawyer

Car-Jacking lawyer...

blood curdling lawyer

savage

Who cares?

@@yackfou2412 most people who are curious

Well shit. That's a very good idea that'd definitely get a lot of people to fall into the trap

I don't know about you but if I'm inviting people to my house for a party I'm not trying to steal from them haha. What kind of friends do you keep?

That's not really social engineering, that's just tricking your friends, also why you stealing from your friends?

@@simonseis744 _"That's not really social engineering, that's just tricking..."_ That's exactly what Social Engineering is: "The use of deception to manipulate individuals into divulging confidential or personal information."

@@simonseis744 They don't necessarily need to particularly be friends though, this is the sort of attack someone could pull off by investing a few weeks infiltrating say a company so they can produce their party trick at the office Christmas party. Especially easy to pull off given how many companies hire temporary staff during the Christmas period which would give a would-be gang of car thieves a chance to infiltrate the employee social group.

Steve does realize that Mini is made by BMW right? 😂

Doesn't matter though, does it?

Haha me too, missed somes sounds

But this is the first time I'm uploading it. Don't know what you're taking about!

@@SteveMould Second time worked a charm. First time I couldn't hear any of your chat or leave a comment? Posted before I saw this.

@Thu Nell Ⓥ I was trying to be funny. Failed at that too!

@Thu Nell Ⓥ he was joking. Check his community tab for more information :)

Lol! I didn't realize it was *that* Samy! I still have that on my Facebook profile as an homage to that infamous Myspace hack. For those who don't know, check out the Wikipedia page on Samy Kamkar or "Samy (computer worm)".

Samy is my hero

That's BMW in its natural habitat

there are dozens of us! Dozens!

Me too! Woop!

it made my day actually xD

You’re right

well hey, now we know too!

@@ms-fk6eb you're right!

He's in UK. He would need a license for the knife

@@muhammadaryawicaksono4232 true that. You cant just carry knife or scissors like that in the street

Thats some stupid thinking

you dont even need a knife... break into the window.

@@chalee3484 yep

the youtube algorithm sent it to you so quickly because it knew youd instantly click on it.

Ah yes, the "run for office" hack.

@@SteveMould Senator Mould has a nice ring to it!

@@nl_morrison Senator? Wrong country, surely! :D would just be MP (often referred to as "The Right Honourable" gentleman/colleague/representative of [constituency] in the actual parliamentary debates)

@@EcceJack Right! Well while he is at it he can fix the USA too, I'm sure it's just a bit shifting issue.

None of them have any idea what they're doing either

Yep, might not have the digital code but showing your key to the camera is basically the same as letting them take a copy of it to reproduce.

he even hid the key in the first time he showed it

I mean isn't he already showing the whole internet how to unlock his car? Lol

Whoopsie

Lockpicking lawer comes in

Hadn't thought of that! It's a bit like how noise cancelling headphones work. And yes to the Manchester code helping with sync. I even said that in the longer cut but it didn't make it to the final video. So many rabbit holes!

From Wikipedia: "A typical implementation compares within the next 256 codes in case receiver missed some transmitted keypresses." So I guess that probably means that if you click your key more than 256 times while out of range would that essentially brick your key and door i.e. receiver.

Ir is something complete different than radio. So no, it's not comparable. Completely different things.

@sokol Actually, I would say it's not that different. In both cases, you have a unidirectional, wireless transmission of a binary code whenever a key is pressed, and in both cases, a device can be built to sniff this transmission and repeat it. So, if a car key would send a simple, static signal whenever the "open" button is pressed, it could be sniffed once and repeated any number of times, which may be possible in rare cases, but since this is quite easy to do, the key manufacturers understand that it's very insecure, therefore better, more complex solutions have been developed. But a simple IR remote control does not need this advanced level of security, therefore, the manufacturers still (to this day) simply send a simple, static signal every time a key is pressed, so once you recorded the signals for all keys that exist, you can simulate all the keys perfectly, any number of times. The manufacturers of the remote controls know that this is possible, but since nobody ever complained about it, they don't care at all. A simple solution (static code) is always cheaper and more robust than a complex one after all. The highest level of security that could be built would be a bidirectional connection between the car key and the car, on other words, a handshake, like when a TLS connection is established, could be made, and then, the actual command could be sent over this encrypted channel. The key would of course only transmit anything interesting after the handshake would have been completed, so no sniffing would be possible at all. As far as I understand it, this is the way wireless keyboards work, to make sure that it's not easy for an aggressor to sniff any passwords you type on the wireless keyboard.