Let's just pretend this worked flawlessly the first time. The sponsor is Blinkist: The first 100 people to go to blinkist.com/stevemould will get unlimited access for 1 week to try it out. You'll also get 25% off if you want full membership.

1:00 Nice detail on the Bmw parking hahah

I also have no idea what I'm doing most of the time.

I love how you can tell he genuinely enjoys doing this. The smile, the laugh, the energy. Keep up the work!!

A big advantage of Manchester encoding is that every bit guarantees a transition. This means that your signal contains the data and the data rate clock. As you mentioned that the fob can't maintain a consistent transmit frequency, the same is true for the data clock. Manchester allows the receiver to synchronize the data rate. Also, the transmit signal likely starts with the same start byte (most commonly AA or 55) to allow that receiver to lock onto the signal (timing wise) and also adjust its gain (AGC).

6:48 "I tweaked some variables, I didn't have a clue what I was doing, but I noticed that it changed things" - said almost every engineer at some point. That's how you make discoveries! I love your videos, Steve :D

I like how the poorly parked car was a BMW, that made me laugh.

Great video! Thanks. It’s worth pointing out that looking at a chip under a microscope to reverse-engineer it is pretty challenging, although not technically impossible if you use mechanical-chemical polishing. Back in 1995 (or thereabouts) when my company at the time was working with something like 2-micron fabrication technology, I was able to diagnose a power-drain by eye-droppering a liquid-crystal solution onto a chip to find the hot spot on the chip. However, even at 2 microns, the image was pretty blurry. 2 microns is about 4 times the smallest wavelength for visible light, so it’s possible, but difficult, to image the chip. Nowadays though, when the features approaching 1/100 the shortest wavelength of visible light, you pretty much have to use electron microscopes, which only show you the surface. So, to see the internal structure, you have to extremely precisely polish off layer by layer, re-imaging each layer. That’s definitely possible, yes, but very difficult.

I just discovered your channel today and already watched two hours of your videos I mean amount of the research and effort you put in each of your video is impressive... Really appreciate what you are doing..

To anyone wondering and for the sake of saving history, This video was reuploaded, because on the first upload it did not have sound in the moments of talking with Samy

How to recognize a passionate person? If you approach him with the smallest achievement in his field, he instantly goes "That's great! How does it feel?".

Hehehe! I love the hacker face in the dark. :D The green lighting for the call was pretty cool too. Interesting how far back you have to go for all this. Keys were already code-hopping before the end of the 90s, I think, and your Mini had rolljam projection in 07. I put an aftermarket remote on my Peugot 309 around 03, but I didn't care if it was a good one because it was an 80s 5-door hatch & not even the latest model. Bit of a street sleeper, that one; remarkably fun to drive.

Your explanations are incredibly engaging and interesting! Thank you so much for inspiring my curiosity :)

"I'm in my car! Amazing."

Remember: never park your car next to someone in a hoodie and with a laptop

I love that you blurred out your key bitting in the opening scene.

Didn't mention a relay attack which works with modern fobs with passive unlock (where you can walk to the car and just open the door so long as you have the fob). Two thieves park near a restaurant and observes patrons entering. When they observe a car they want one of them follows the target into the restaurant and walks near them with a transceiver. His partner walks to the car (from which they observed the targets exit from) with the paired transceiver which then relays the passive code from the fob via his partners relay transceiver and the perp opens the door and drives off.

that "hacker sitting in the dark in a hoodie" cliche was so well done. love it.

"What this demonstrates really well is that I have no idea what I'm doing." XD

Samy is the man. been following his work for years. related, LTC (timecode used to sync audio/video dual system or multiple cams in production) is essentially manchester encoded as well. i have had to actually manually decode it by looking at the bits before lol. silly thing to have to do but it works in a pinch. so if you are syncing your cam using timecode, you may have been using it all this time.

10:19 I think it would have been good to mention here how jamming works in this case. If you are sending out a jamming signal to the car on the broad spectrum, you are not jamming the airwaves so much as you are jamming the equipment. You are causing the car to process useless signals - meaning that the car has no processing power left at that time to process the real signal. You are essentially flooding the car with bad signals, keeping its computer occupied while you listen out for the good signal.

1:00 BMW is the Apple of cars, Their motto is “park different”

:D That double spot taking BMW made me laugh!

This video is as entertaining as it is informative! enjoyed watching and learnt some seriously interesting tech stuff, thankyou!

Didn't expect to see Steve dipping into the world of cybersec. Good stuff, would love to see more of this kind of thing. Your inquisitive and science-minded worldview is a really great way to look at understanding the cat and mouse game we play. I'd love to see you dig into the physics of other elements of physical or cyber security.

Thank you, stole my first car today :)

I have worked for two different US companies that develop software-defined radios for commercial and government customers. Your opening explanation of rolling codes was fantastic (far outstripping the initial explanation I received when working on our rolling codes project, despite being like 2 minutes long compared to an hour-long briefing at work). Thank you for your dedication to science communication and bringing these awesome aspects of science to the fore!

Thanks for sharing and Samy is a legend no doubt.

Alright, I never ever bother to leave a comment but THIS video was so fun, informative, engaging and most of all so damn easy to follow for a beginner like me, hats down! I'm just starting my journey of learning how to program and code, researching fields that I'd like to focus on in the future, you've inspired me to pursue cybersecurity engineering! Big thanks!

Steve Mould : i hacked into my own car Robber : i hacked into Steve Moulds car

Instructions unclear: I have opened my microwave with a skoda car key.

Thankyou. This is good stuff.. covered many things in just 20min.

0:55...nice touch, Sir!! Nice touch, indeed!!!

1:00 Love the very realistic view of the parking lot🤣🤣

Steve be like "click out of mouse, W is binding.."

Something you need to be careful of: replay attacks on cars can cause at least one remote to go out of sync. You might be able to recover it by pressing a button on the second remote, but it'll require resynchronizing it yourself or taking it to someone who can if you're unable to

Awesome channel just subscribed let the binge watching begin 😂👍✌️😎

"Authorities report nationwide wave of smashed car windows. Suspects say 'Steve told me it was easier'".

THANK YOU for showing all the attempts that didn't work. It's sooo important to show that success requires work.

thanks for the video, was really helpful!!

When i saw that car park situation i had to pause for a few minutes for the giggles to go away. 😆 Thank you very much, i needed that.

I love that this covered your whole thought process from the ground up, rather than just stating information. Top notch stuff!

That is most accurate depiction of a car park I've ever seen @1:00

I know this will probably get lost on a 3 year old video but just wanted to say that this is my favorite of your videos. Hope to see more like this in the future

Great video interesting content and presentation and also nice editing on the ahh ffff.. moment when the aerial fell off the table!

Wait. I've seen this before..

Social engineering: Use your SDR to be receiving. Make an app or script or whatever, so that every time a signal is received it plays an interesting sound clip. Each one is different, and after introducing it everyone will try theirs to see what noise it makes. For example, having a party at home, say "watch this" and get out my key fob, show them when I press the button, an old-fashond "auuuuuga" horn sounds from the home theater sound system in surround sound. Much more dramatic than a laptop sound. "Now try yours!"

Really, interesting, Steve. Great video.

0:54 absolutely lost it at that graphic! Well played!

That face after he goes “I wasn’t expecting it to work first time”😂 I felt that😂

I love how passionate you are explaining the process and what you discovered. Nice video!

a syncronised clock was actually one of the first solitions I thought of! was very satisfying when it was also presented in the video.

Oh man Steve you are such a goofball. Good video man 👍

That video was absolutely fascinating. I'd never really thought about how these keyfob systems actually work; somewhat ironically, as I'm a fairly decent electronics repair tech and have fixed plenty of car keyfobs in the past!

5:57 That’s soooo Mr. Bean moment!!!! 😂😆🤣

Great video. Enjoyed it

1:18 I liked for this scene alone. YOU LOOK SO SINISTER. That's textbook villain material right there.

Can we just appreciate that this man is still rocking is Pebble in 2020. I finally dont feel alone

1:00 I love how you made the BMW occupy 2 spaces XD

your channel is amazing man :)

Very cool video steve!

level of expertise: "actually that's manchester encoding" Love your content bruh!

0:59 That a-hole BMW is a nice touch lol

The lighting is awesome ❤️

You could exchange with the car to get the current RTC time, and reduce cost. It would also prevent changing the time on the keyfob into the future.

This was super interesting once again, Steve. I really value the _variety_ on your channel. I'm like you, I find EVERYTHING (potentially) interesting.

"but most of all, Samy is my hero"

This is so fascinating!

Great video. Thanks

The BMW parked over 2 spots, lol. Great stuff.

The preamble isn't nessecarily saying 'im a key', it's actually pretty standard. Since Manchester encoding guarantees transitions, this preamble is used to synchronise the receiving clock exactly to the right edges so that the important payload doesn't get corrupted. (Phase locked loop circuit)

That's absolutely mind blowing video😍😍😍😍

Great video, thanks!

Awesome demonstration of working and security features of car keys and great way to point out the loopholes in simple terms. Great work. First time watching this channel. Loved ur work. 👍

Halfway through I'm waiting for one of the other cars in the background to go *chirp chirp*.

you keeping in the fails is GENIUS!

I like how all you have to do to be a hacker is have a hoodie. :D just discovered your channel, great content. subscribed!

I can't believe KZfaq actually sent me a notification as soon as the video went up.

This is great Steve! You should try to get into parliament next and fix the country. Much love

One subtle thing I noticed - the BMW taking up two spaces and parked squiffy, nice touch, I'm not a BMW fan either!

This got me thinking about how car and key resynchronize after the key misses a code (another key is used or someone uses a laptop with a transmitter). Look up rolling code synchronization if you're interested!

I've seen this video already, but it has come up to me a few times and I came back here to say that I just can't deal with your face in the thumbnail! It cracks me up every single time like I'm a toddler. So thank you.

That BMW parking reference. Spot on!

To jam a car you don't need to think about range of frequencies, just use directional antenna on car receiver, this jamming won't affect the 2nd spy receiver.

Like how he centers of bitting since I have heard of people making keys from images and even form memory

0:54 Busted out laughing! So true!

Veritasium did a similar video! His was about opening garage doors instead of cars, and also featured Samy

Good for you mate!!

The title of this video was NOT CLICKBAIT: it really is EPIC!

I'm never going to a swingers' party again!

Whenever you showed your key on camera I got anxious lmao

i like how you tried to hide the key in the close-up but completly ignored it in the next clip where it's clear enough to be visible

I did too just the other day! It's amazing what spare keys can do!

Watching this is like actually doing a project that involves manipulating remote-control keys or key fobs. You have to get deeper and deeper into the specifics of the device you are trying to emulate. It can be sometimes thrilling and sometimes tedious.

Very interesting, I love the way you had to think about it as an incremental approach, not knowing what you were doing and figuring it out as you go. A few questions to think about : - When you're jamming the key with your emission, couldn't you just substract what you're currently emitting from what you're receiving, instead of broadcasting on a different frequency ? Kind of the same way active noise cancellation work, if you know exactly what you're emitting then the difference with what you're receiving is what comes from the key right ? - What happens if you press they key while the car is not in range ? Doesn't that mean that the key will skip to the next code, while the car, completely unaware of the fact that you pressed the key, stay on its current code ? Or is the car looking for the code in N possible "future" codes ? If so, what if you press the key N times while away from your car, will the key and the car be "un-synchronized" forever basically ? - Some cars can have several keys am I right ? Back in the day when you had several keys only one of them was remote (which is understandable), but now I think that you can have several remote keys for your car. Is this a more complex algorithm ? Or does the car simply have several registers, one for each key ?

Great video we can use block chain technology in cars unlocking code but the thing is car is not always connected to internet to get unique code so we can insert sim for getting connected to internet

great job thank you 👌🏻

8:20 Imagine going to a key party and Steve being there clicking away with his laptop :D

1:21 i am steve mould and i am evil

My guess, the last bit is CRC check... Once you have that figured out, a bruteforcing would be somewhat easy, although you would have to be ready to stop the bruteforcing once is unlocked, else you end up re-locking it, or even turning the alarm on