Please check out www.youtube.com/@takeapart he kindly let me use his video of the Flipper Zero Key Fob Hack!

Lazy Politicians: "Ban devices that have nothing to do with autotheft = Yes, Force auto makers to improve car security = Nope"

Did Trudeau just say at 0:24 "one of the best things we can do to prevent auto theft is prevent those thefts from happening in the first place"? Not sending their best

"'course, one of the best things we can do to prevent auto theft is prevent those thefts from happening in the first place" so to prevent auto theft we should prevent auto theft, Trudeau really does have a way with words doesn't he?

how about we stop banning the devices to detect specific vulnerabilities and fix all those known vulnerabilities??? like, what is the canadian gov doing

banning the flipper zero just because it "can be used for stealing cars" is like banning matches because they can burn buildings down sometimes in specific scenarios because the building is old and doesnt have any protection against fire

Next milestone: banning crowbars

Canada need a new Government.

Everyone should walk around with handcuffs to make sure no one breaks the law and makes it easier for the police.

I love that term, low information politician.

Well as a Canadian I’m sad and embarrassed. I hate how governments treat technology, and anyone who’s dedicated their lives to it.

Yeah cause the increase in car theft is totally due to the flipper zero. Definitely not due to anything else at all 😊

My front door lock on my house is broken so I am using a piece of string to keep it locked. The other day someone broke into my house, presumably using a pair of scissors. I have contacted the government and now they are banning scissors, I feel so much safer!

Can’t tell you how many times I’ve had to explain about rolling codes. Thank you! I can just point people to your video now. Saves me a lot of time. 👍

How did no one tell them that flipper zeros aren't the problem? Surely they must speak to someone who knows what they are doing before blanket banning anything, right?

Get ready for anyone with a flipper zero in Canada to have there bank account frozen.

Criminals don't care if something is illegal. This is dumb.

if you're gonna ban the flipper zero, a device used to intercept or create (network) packets, you might as well ban all sorts of tech since any generic old laptop you have in your garage can do the same thing

5:05 0000, 1111, 000000, and 111111 are common default passwords on a lot of PLCs AND HMIs. 😉 There are some variations of these but these are the most common in my experience.

Low information politician sounds like almost every politician

Next they should ban unfriendly people

flipper zero ban is the first step towards having root access on your own hardware being illegal

First nunchaks and brass knuckles, now fancy TV remotes, next the'll come for your spoons ans shoelaces.

As a Canadian: we welcome you to make fun of our prime minister.

The thing is: The flipper is one of the most overpromised devices ever. You can’t crack a car with it. It’s not even real hacking. 😂 They banned a toy.

Instead of improving the security of electronics, they prohibit equipment that detects or exploits completely insecure electronics.

The new editor is doing a good job. Keep it up!

A flipper zero is basically just an arduino with some antennas.

I've got a flipper and it's pretty harmless compared to other hacking tools!

when the Canadian government never heard of rolling code, which means they never research their bans

Who wants popcorns to watch Canada car theft to skyrocket post Flipper Zero ban?

So basically, what they effectively do, even if unknowingly, is gatekeeping hacking as an activity, by restricting accessibility. Enthusiasts who could grow into valuable infosec specialists, are either being held away, or learn to break the law to obtain access anyway, as it's very within the spirit of the whole movement. While people who are REALLY interested in it, have all the means to get sufficient equipment, and will be even more successful at evasion techniques, since they will also have to improvise in this restricted (yet not "regulated", at least by the actual meaning of this word) environment. I believe that hiring a specialist in the area, just to consult with them and make corrections, should be MANDATORY before imposing any sorts of regulations, as those regulations could be unknowingly malicious. And if it's already mandatory, then judging by these news, it's not really doing a good job. Or the intents were different from "muh protection against the evil hackermen", which honestly i'm more and more leaning to.

The only vehicles that would be at risk to a flipper zero is very old vehicles with keyfobs.

I'm a network admin and I use my flipper all the time to scan for vulnerabilities and head off weaknesses I find in our door systems, etc. Plus I can pull it out and change the channel at the restaurant during lunchtime. Turning off "The View" should be seen as public service IMHO.

That video you showed about unlocking the car with the flipper, wouldn't even work from that distance with a stock flipper zero. It has a out 5m of range. You would need to add an rf module to increase distance.

Canada is by far the most dystopian western country

When I saw this news a few days ago, I immediately thought “ooooo Seytonic is gonna be pissed about this one”

Canada flipped

As a Canadian, this is a bit silly because it's effectively an older Raspberry Pi with a very small handful of extra parts added, but none of that was banned and still comes in fun user-friendly kits

When politicians decide something while having zero knowledge about the topic. Smh.

Same as Ben and guns the band will only affect the law biting citizens the criminals by definition do not care for the legislation. We already have laws against stealing and murder, but the criminal still do it, regardless.

Now the question remains... Can the Flipper Zero run Tetris?

I mean you expect Turd-eau to know what he's talking about and properly fix issues 😂

I saw a video of someone stealing a rolls Royce using that relay method and was so confused, thank you for explaining it

This is what happens when people dont understand technology.....

When the freakin' hell are Canadians finally going to ban Trudeau - that's what I want to know.

This is a really big problem. If Canada sets the example there's no guarantee others won't follow suit, and that too for no justifiable reason p_p

how about we just make cars more secure instead of banning the tool like some idiot.

you know anyone with technical know-how can build one of these ? to replace the key on a mercedez benz can cost anywhere between $200 to $500 through dealerships . Maybe force auto makers put at least $100 worth of tech in it to make it significantly harder to steal cars?

They should try banning crime. Maybe that will stop car theft.

What's more dangerous? A clueless politician not understanding technology. Or one beepy flipper boi.

If I will ever hack screen, I will display something like "you got hacked! to unlock screen you need to buy me a pizza"

Theoretically you could make your own radio recorder/player and get around the flipper zero ban

Turdeau revealing himself to be insane yet again 😂😂

I'm a PLC technician and I would believe they would just reprogram the PLC with a backup... It is a hassle but not a big deal 😅

A Flipper is a great way to tell if you have an insecure product. If your product can have any of its security features defeated by a stock Flipper Zero, it’s insecure and should be trusted as much as a luggage lock.

Knee-jerk reaction. A) either ban any and all SDR, b) make manufacturers employ proper cryptography instead of obfuscation. It's not like the Flipper could actually break proper security.

Best cyber news in three years that I have, found your a legend.

This is why people need to be more nerdy towards tech and not just made assumptions. In 2024, the more you know about tech, the safer you overall are. Otherwise its very easy to either clickbait, hack or scam someone. Not to mention them knowing your IP adress and finding your home, to which you can of course loose a lot of money under a threat. I'm not mad with people that dont know tech, but i'm just saying, you need to learn, and i can help with that.

so basically all canada has done is give flipper zero free advertising, ill bet any money they're selling more of them now

RIP Joshua Shulte .. despite your motives, your actions were of great value to cyber security and a massive blow to the Criminal Intelligence Agency

As someone in the controls industry I can confirm it's not uncommon for installers to never change the default password on PLCs, VFDs, Thermostats, or the like. And yes, most of our HMIs and graphics look like they came straight from the 2000s

Just yesterday I heard a story of somebody in Canada who got their car stolen and had a tracker in it, they tracked it all the way to the shipping container, and the cops wouldn’t do anything, clearly they aren’t actually trying to stop car theft

Nice video man. Stuck to the info about flipper zero and I learned new things in it as well. Nice

Various flat and universal keys on eBay are a bigger security threat to cars.

for someone in central intelligence.. he was handed a perfect Hollywood movie level setup for the most believable "that's not mine, they planted that", and he decided to go with "it's not that bad if ya think about it" 🤦 no wonder they fired him

When you run out of battery on your car key fob, and realize it's been hardwired into the circuit board to prevent replacing it easily, and increase likelihood of damage, you realize the car companies themselves are the thieves. Especially when a replacement costs $300 plus for a circuit board some kid probably made in Indonesia for cents on the dollar.

I'd be interested in seeing some sort of attempt at civil action from the flipper team. It's a cooperation providing a product that has been defamed and had it's image damaged by a government who has no business commenting on the technicalities. They can ban whatever they like but you can't insinuate something or somebody is a criminal/crime tool without backing it up

Not the craziest thing Canada's done in the last 3 years !

I live in Canada and I hope I can get one before they’re hard to get your hands on in Canada because I really want to mess around with it Ethically because it has so many uses that are not criminal

6:08 That is a comic book villain.

yeah, because if someone wanted to steal a car by copying the car signals, they would of course do it with a 100-200€ gadget instead of a 17€ baofeng radio

Bummer. I'd love to backup my car keycodes in case I locked my keys in my car.

I think Canada's approach to car crime is wrong, they should get car manufacturers to fit better security rather than ban Flipper zero.

Have automakers gone away from immobilizers? Pretty common in cars after 2000s. Flipper zero might help you get inside the car but stealing it after that should be extremely difficult without the original keyfobs.

a key point you missing is that once you leave a new key its already broadcasting a signal every few seconds ie: keyless entry

as a canadian this very much annoys me first google bard got ban because they thought it was a security threat and now the flipper zero. i gotta get outa here

Cars should have cybersecurity ratings. Write to your legislators demanding it.

Got mine just in time😅 it arrived last week but my fingers are crossed for the gpio wifi module thats in transit 😁

They need to make security better. Not banning the stuff we use to show flaws.

You don't necessarily have to be out of range to copy a rolling code without it being used: You just have to jam the signal while you record one code (since you are the one producing the jamming signal and know exactly what it looks like, you can easily filter it out of the recording). After you have captured one good code you stop the jamming, the remote will usually send several code in the time of a single button press, so the car will still open/close and nobody will notice a thing. To do something like this you need a radio that is capable of transmitting and receiving at the same time, if a single flipper zero can't do that you just use two, or a flipper zero to jam the signal and a digital tv dongle to record the code. Another thing you can probably do, without even needing to record anything, is to bruteforce the code. In theory it would take a very long time, but in practice, with many rolling code implementations, you can pull it off in a couple of minutes by sending and trying multiple codes at once (by exploiting thing such as the receiver accepting more than a single code at any given for convenience of the users, error correction algorithms and other clever tricks).

2:32 well .... there is a way to do that with jamming the signal from the fob and listening to the code. As obviously, if your fob is not opening the car, you will try again. The hacker is still jamming the signal, but now they have 2 codes. They will now replay the first code , stop jamming, and your car will open. After you park the car at your destination, the hacker will replay the second code and steal your car

Bloody hell! Joshua couldn't look more like Ming The Merciless if he tried! Those brows are nightmare fuel! 🤣🤣🤣

Time to develop and release the 'Dolphin One' 😂

Government: "Hackers are all drug lords! " Me: Sitting in my crappy house, barely making enough to eat..... "sure..."

So, if the rolling codes expire once the car has received them, I assume the car compares the incoming codes to some kind of algorithm to check if the code is coming from it's actual key fob and then stores all used codes somewhere in order to check any future incoming codes against that table to check if they have been used before? Or do the codes additionally contain some form of time stamp? Either in their own value or from some form of metadata? And then they additionally expire based on time? Basically, could I record a code from a fob and (as long as the car is out of range to receive it) use it any time later (minutes, hours, days, months?) and it will still work? In case it never expires from passing time but only from the car receiving and storing it, I can see some nefarious use cases. For example if you find lost keys, record a few codes, then dutifully return them to their owner, just to steal their car later. 😂 Or a jealous person "preventively" recording a few codes for their spouse's car to use after a breakup or some kind of jealousy situation. Also, how does the relay attack work? It amplifies the signal from your fob while it's in your house to unlock your car? But, doesn't the fob need to be pressed in order for it to transmit any codes? They don't just constantly transmit unlock codes, right? Do the guys showing up with the wire just wait in front of your house for days until you accidentally sit on your fob and your butt cheeks press the unlock button? 🤔

Today I watched a bunch of videos, all of which I found quite engaging and interesting. When I was at this video I looked through my browsing history to subscribe to the channels I saw earlier and then I noticed all of the videos were by you xD

Why would the Iranians go after Ireland? Doesn't make any sense. Easy target maybe? It would seem both countries views on Israel are more or less the same.

Didn't even know that modern keyfobs worked like that. It reminds me of how OTP (one time password) generators work. It might not be the same but the outcome is similar where if someone was able to somehow get your OTP it's kind of useless since it would only work for about 30-60 seconds depending on your settings. Without the `secret` there's no way to generate the OTP themselves. For those that don't know a OTP authenticator generator uses what's called a "secret". Basically a very long series of random numbers, letters and symbols that uses a hash function to generate a six digit number that also uses the date and time to generate the number. Something that would impossible to crack until quantum computers are actually a thing.

The fact he's banning flipper zero instead of putting the blame on car companies who have terribly shoddy security is absolutely mind blowing.

0:24 "of course one of the best things we can do to prevent auto thefts is prevent those thefts from happening in the first place"

Trudeau's not heard of rolling-codes

The best way to stop crime, is to stop crime from happening in the first place. Genius.

Im actually scared to find the actual number of facilities that use basic passwords due to just sheer laziness.

I didn’t want, or need a flipper before. Now I both want, and need one.

You can use other devices to do the exact same thing so that prohibition doesn't make any sense, the government just should go and put under arrest the criminals that steal things, not going out banning technology.

I guess there banning screwdrivers also

How about we mandate that all cars support unlocking with your phone so we can ditch hackable fobs? Governments have completely ignored the use of easily hackable fob systems. They could have mandated better fobs 10 years ago that don't allow replay attacks. They exist, companies rejected them due to price.

Best tech news around! Thank you

Hilarious. This means I couldn’t work in Canada, because the Flipper Zero is hands down the best Pen Testing tool on the market.