We Stole a Tesla with this $20 Device

Поделиться
HTML-код
  • Опубликовано: 12 июл 2022
  • Thanks to Omaze for sponsoring today’s video! For your chance to win a Superformance MKIII-R, click here now omaze.com/donut22
    Huge thanks to Sultan Qasim Khan for coming out and helping us with this video! Sultan is a Principal Security Consultant and Researcher, at NCC Group (one of the world’s largest security consultancies with over 35 global offices, 2,000 employees and 14,000 clients)
    Go check out his youtube channel ( / @sultanqasim ) and read more about his BLE Attack here. (www.thedrive.com/news/new-tes...)
    HERE IN MY GARAGE…
    Curious what we use in the shop on a daily basis? Check it out below. And if you purchase these tools from these links, you’re helping support Donut. We appreciate it!
    Milwaukee Electric Tools 2550-20 M12 Rivet Tool (Bare Tool) www.amazon.com/gp/product/B07...
    Milwaukee - 48-22-0125G - 25 ft. Magnetic Tape Measure - 2-Pack
    www.amazon.com/gp/product/B08...
    Milwaukee 48-59-1880 M18 REDLITHIUM HIGH OUTPUT XC 8 Ah Lithium-Ion Battery and M18 /M12 Charger Kit
    www.amazon.com/gp/product/B07...
    Milwaukee Angle Grinding 2781-22 M18 Fuel 4-1/2"/5" Slide, Kit
    www.amazon.com/gp/product/B00...
    Milwaukee 2735-20 18V Li-Ion Flashlight
    www.amazon.com/Milwaukee-2735...
    Milwaukee 2557-20 M12 Fuel 3/8" Ratchet
    www.amazon.com/gp/product/B07...
    Milwaukee 48-11-1880 M18 REDLITHIUM HIGH OUTPUT 18v 8.0 Ah Lithium-Ion Battery Pack
    www.amazon.com/gp/product/B07...
    Milwaukee 2125-21XC M12 LED Underhood Light Kit
    www.amazon.com/gp/product/B07...
    Milwaukee M18 FUEL 3/8" Compact Impact Wrench with Friction Ring
    www.amazon.com/Milwaukee-Comp...
    Adenna Dark Light 9 mil Nitrile Powder Free Exam Gloves (Black), Large - Box of 100 (DLG676)
    www.amazon.com/Adenna-Light-N...
    Scott Shop Towels Original (75143), Blue, 55 Sheets / Standard Roll, 30 Rolls / Case (10 Bundles of 3 Rolls), 1,650 Towels / Case
    www.amazon.com/Scott-Original...
    Zep Cherry Bomb Industrial Pumice Hand Cleaner - 48 Ounce (Case of 4) ZUCBHC48CA
    www.amazon.com/Zep-Cherry-Cle...
    AIDEA Microfiber Cleaning Cloths-100PK
    www.amazon.com/AIDEA-Microfib...
    Barrow 52 in. Brown Large Rectangle Wood Coffee Table with Lift Top
    homedepot.sjv.io/c/2095194/45...
    Barrow 52 in. Brown Large Rectangle Wood Coffee Table with Lift Top
    homedepot.sjv.io/c/2095194/45...
    New to the Channel?
    ►Watch this: • POPULAR DONUT VIDEOS
    We upload almost every day, subscribe so you don't miss out!
    ►Subscribe here: bit.ly/1JQ3qvO
    Click here for more info on joining the Donut Underground!
    ► / @donut
    Shop Donut Merch:
    ►www.donut.media/
    Donut Media is at the center of digital media for the next generation of automotive and motorsports enthusiasts. We are drivers, drifters, and car enthusiasts who love to tell stories.
  • Авто/МотоАвто/Мото

Комментарии • 4,2 тыс.

  • @charlesedwards4169
    @charlesedwards4169 Год назад +19136

    Thank you! I always wanted a Tesla but couldn’t afford it until now! $20 is a steal.

    • @higamerXD
      @higamerXD Год назад +508

      yea! well worth it for that price

    • @billheadis9138
      @billheadis9138 Год назад +383

      enjoy it! but tesla's have a tracking system on them. if its reported stolen the police will find it in under 15 mins lmao

    • @dragonfrost5015
      @dragonfrost5015 Год назад +94

      hold up

    • @rocketbroom4781
      @rocketbroom4781 Год назад +515

      @@billheadis9138 not if I strip the entire thing first

    • @LeBornMajes
      @LeBornMajes Год назад +853

      @@billheadis9138 nord vpn

  • @bigboypants225
    @bigboypants225 Год назад +3644

    Jerry planning to steal a car from the shitter is pure gold. He’s the best!

    • @sabertooth_fl
      @sabertooth_fl Год назад +63

      A little bit of foreshadowing to him post-ceviche 😅

    • @themrjones
      @themrjones Год назад +4

      Delaying the wipe

    • @adityaranjit
      @adityaranjit Год назад +15

      And then actually getting diarrhoea on the day he's supposed to steal the car, now that's some committment

    • @JoeMACofNAC
      @JoeMACofNAC Год назад +1

      It’s the best place to think!

    • @udonenomee2117
      @udonenomee2117 Год назад +2

      That’s where we watch from, so it’s full circle.

  • @NickC_222
    @NickC_222 Год назад +718

    Talking about using the dark web and then doing a Google search after setting it to dark mode is one of the funniest bits I've seen in a while lmao. That got a genuine laugh out of me XD

    • @billdude1564
      @billdude1564 Год назад +21

      People will think that’s how you do it now.

    • @ranss
      @ranss Год назад +2

      yeah that was the good stuff for sure

    • @knopigames
      @knopigames Год назад +1

      Yeah, bro That was so funny! Hahaahaa XD🤣😂

    • @scitor
      @scitor Год назад

      Yeah, that cracked me up as well 😆 🤣

    • @xnx304
      @xnx304 10 месяцев назад

      yeah, I laughed so hard 🤣🤣🤣

  • @yogybear3
    @yogybear3 Год назад +207

    Whoever is editing these videos with the sound effects definitely needs a raise. It makes the videos much more entertaining and has me cracking up

    • @davidk9382
      @davidk9382 Год назад +3

      First thing I did was look for a comment about the sohnd design. Why is it so good LMAO

    • @humbleindian6303
      @humbleindian6303 2 месяца назад

      a good for nothing tesla

  • @Mike-zb3cf
    @Mike-zb3cf Год назад +3206

    jeremiah definitely on a watch list for all the stuff he’s looking up

    • @alexknouse9133
      @alexknouse9133 Год назад +182

      If you're not on at least a few watchlists, are you really living?

    • @memeconnect4489
      @memeconnect4489 Год назад +41

      aren't we all

    • @salmanazam9444
      @salmanazam9444 Год назад +16

      @@alexknouse9133 😂😂
      You have a point.

    • @michaelluong6484
      @michaelluong6484 Год назад +5

      Prob already on a list for interfering with radar...

    • @themrjones
      @themrjones Год назад +8

      I know he has friends with guns and big ass 100 round mags and auto reset triggers with a bump stocks. Probably sold some too the cartel by now. Did he ever pay you for that quarter pound you fronted him and how's the doctor shopping pill mill thing working or are you just getting the fake blues from your cartel connect. Kisses

  • @pimpinondemhos101
    @pimpinondemhos101 Год назад +1347

    I love this tutorial on how to steal modern vehicles. It’s about time Donut fights against the ridiculous car market we’re in right now

    • @DoctorDipshits
      @DoctorDipshits Год назад +7

      You say that like it’s going to end 😂

    • @4DD1S0ND3W1TT
      @4DD1S0ND3W1TT Год назад +44

      I mean, we're going to have to start jailbreaking our cars to access features like heated seats so I feel like we'll be seeing more literal car hacks in the future.

    • @randallracer
      @randallracer Год назад

      @@4DD1S0ND3W1TT shit. Aint that the truth?

    • @keithlarsen8423
      @keithlarsen8423 Год назад +19

      @@4DD1S0ND3W1TT "capitalism breeds innovation"
      the innovation

    • @gr6e
      @gr6e Год назад +16

      I hate to break it to you but old cars were even easier to steal. What are you even trying to say?
      My dad was a repo guy in the 70's and he had 20 keys on his key ring, and they would unlock and start literally every single car. Each manufacturer only ever made a couple of different cuts, and this practice took place well into the 90's.

  • @scottmcelhiney323
    @scottmcelhiney323 Год назад +23

    Left out that if you set PIN to drive, this won't help you steal the vehicle, you'd also have to hack the PIN number needed to start the car once you are in it.

    • @dronyland
      @dronyland Месяц назад +1

      Yup, setting that PIN to drive was the first thing I did, right after getting the Tesla ! 😁

  • @jochemw97
    @jochemw97 Год назад +50

    The editing team and animators are delivering top notch work!!

  • @Wilbure
    @Wilbure Год назад +1155

    I love how pleased yet simultaneously chill Sultan is with the "this makes me happy" whilst everyone is going off chops. Cool guy who enjoys his work, great to see.

    • @knutlovhoiden
      @knutlovhoiden Год назад +24

      Dude is an engineer. This is how they are.

    • @stheil
      @stheil Год назад +27

      @@knutlovhoiden Am an engineer, can confirm. Guy was probably hootin' and hollerin' on the inside (and rightfully so) XD

    • @Telesgoooo
      @Telesgoooo Год назад +7

      @@stheil too feckin right man just outsmarted Elon rofl 🤣😂 I would be extremely pumped on the inside aswell xD

    • @lonzie
      @lonzie 4 месяца назад

      @@Telesgoooo Teslas have an option to require a code to be typed in on the screen before you can drive it. It doesn't stop someone getting into the car but it does stop them driving away

    • @humbleindian6303
      @humbleindian6303 2 месяца назад

      a good for nothing tesla

  • @filipp_212
    @filipp_212 Год назад +626

    Alternative title: *"Jeremiah trying to steal his own car for 11 minutes straight"*

    • @WhopperJrWithCheese
      @WhopperJrWithCheese Год назад +28

      *”And then getting the shits”*

    • @superdepressif6047
      @superdepressif6047 Год назад

      @@WhopperJrWithCheese lmao

    • @TheKoltenparker
      @TheKoltenparker Год назад +2

      Also, if keyfobs use "rolling codes" how did he get into the Camero or James's car?

    • @rohankoripalli
      @rohankoripalli Год назад +7

      @@TheKoltenparker they pressed unlock on the key once outside the range of the car. The car didn't detect the button press so that one code is active until the button is pressed again

    • @superdepressif6047
      @superdepressif6047 Год назад +4

      @@TheKoltenparker I think he recorded the key far from the car so the code wasn't "heard" making it still valid ? just speculating tho

  • @Ryukachoo
    @Ryukachoo Год назад +12

    3:00
    Are we not going to talk about the fact he's doing this while taking a sh!t

  • @Brandon-eq8mj
    @Brandon-eq8mj Год назад +4

    Great! Thanks for showing everybody and spreading the word about this. Awesome job Donut.

    • @raven4k998
      @raven4k998 11 месяцев назад +1

      diarrhea cha cha cha

  • @-Jethro-
    @-Jethro- Год назад +1260

    Tesla offers a feature called “PIN to drive” which at least prevents the driving portion of this hack. I’m not sure what percentage of owners know about it or use it.

    • @RetroExhibitCollective
      @RetroExhibitCollective Год назад +115

      Not enough. A lot of owners don’t know much about their vehicles. It’s crazy, but I make sure to have the PIN to drive

    • @-Jethro-
      @-Jethro- Год назад +35

      @@RetroExhibitCollective True, it should probably be enabled by default. Also, it doesn’t prevent opening the doors.

    • @kevinmontoya7318
      @kevinmontoya7318 Год назад +39

      ​@@RetroExhibitCollective they should make it thumbprint to drive, and have 5 slots of available thumbprints to use.

    • @peterbaratta3639
      @peterbaratta3639 Год назад +109

      Except everyone's PIN is 42069

    • @adamsiek6438
      @adamsiek6438 Год назад +42

      This should be upvoted for all Tesla owners. I actually work in Cyber Security and this vuln was brought up about 6 months ago I believe. All Tesla owners should always set pin to drive. I do on mine.

  • @simonlyssyj5277
    @simonlyssyj5277 Год назад +718

    Glad to see Justin comfortable in front of the camera, he's a great addition to the donut team.

  • @missionpassed4584
    @missionpassed4584 Год назад +10

    In the future they will have to come up with something like a key that you will physically need.

    • @club3g82
      @club3g82 5 месяцев назад

      Not really, such an easy way to keep someone from stealing your Tesla.

    • @mikejost8112
      @mikejost8112 4 месяца назад

      There is a key that comes with the car

  • @yorkshire_tea_innit8097
    @yorkshire_tea_innit8097 Год назад +3

    Another thing you can do is not leave your car keys near the front door or maybe put them in a faraday cage. As you can usually pick up a key fob to relay by standing next to someone's front door (in the middle of the night ofcourse).

  • @beepbooopbop
    @beepbooopbop Год назад +624

    The amount of times they've given us the resources to steal stuff 😂

    • @carnage50x
      @carnage50x Год назад +58

      The more awareness. The more pressure the auto industry has to make safer products. As well as, educate the public about false security products.

    • @TheKoltenparker
      @TheKoltenparker Год назад

      Except he didn't explain how he got the Camero or James's car open? He said the keyfobbs use "rolling codes" so they are constantly changing.. well how did he unlock it then?? 😂

    • @imaadfaki5585
      @imaadfaki5585 Год назад +14

      @@TheKoltenparker Essentially when he recorded the unlock with the key the car didn't pick it up yet so the key is on the next code while the car is still on the previous code

    • @misseselise3864
      @misseselise3864 Год назад

      or told us where to buy illegal stuff

    • @rideroftheforce5245
      @rideroftheforce5245 Год назад +2

      @@TheKoltenparker The code doesn't change if the car is out of range of the key. Notice how he kept going inside (out of range of the car) when he recorded the keys code.

  • @_korykordich_
    @_korykordich_ Год назад +1496

    It’s great seeing Justin come more and more out of his shell. He seemed a little nervous at first (as I think we all would be) but now is handling these shows like a proper host! Glad to see it

    • @shaneoz4006
      @shaneoz4006 Год назад +38

      I won't lie I kinda felt his coyness but I was like it's only natural considering he's new and is in the company of larger than life characters but he's settling in good. I agree with you

    • @RumHamwich
      @RumHamwich Год назад +12

      He's definitely settling in really nice, I'm constantly amazed at all the people Donut adds, they're AMAZING! Please don't tell James and Nolan that Jeremiah is my new favorite ;)

    • @scottbenton1822
      @scottbenton1822 Год назад +17

      @@RumHamwich I think Jeremiah is a lot of people's favorite. But then again they're all awesome. Still wishing for an Up To Speed on Donut.

    • @LoliLoveJuice
      @LoliLoveJuice Год назад +3

      so did everyone, james didnt start like what he is today, its pretty cool seeing the changes

    • @muddyguns
      @muddyguns Год назад +9

      You guys are like the women on the View.. all gossip.

  • @ArnoldsKtm
    @ArnoldsKtm Год назад +1

    This is very well and superb simply explained. Good job.

  • @plaguenation4722
    @plaguenation4722 Год назад

    The one thing I wish you guys covered with that hackrf is the keyfob cloning its a bit extra as you have to have a blank but I was almost a victim of this in Louisiana when I was helping with hurricane IDA relief.
    There's a few videos on yt where people have been victims one guy in Canada eventually recovered his truck before it got onto a cargo ship luckily but insurance covered him and he already had a replacement.
    Either way love the content you guys rock keep it up!

  • @buringfyra
    @buringfyra Год назад +291

    Me: laughing at a car that needs to be unlocked with $12 worth of supplies.
    My car: scared of a coathanger and some crossed wires.

    • @falalogo
      @falalogo Год назад +5

      I opened my own car in less than 30 seconds using a metal bucket bucket handle 🤡, and its not even that old, its a 2013 model

    • @ianybanez6884
      @ianybanez6884 Год назад +4

      @@falalogo I can unlock most cars in 30 seconds..... Do yourself a favor and invest in an alarm lol.

    • @John-zp2jm
      @John-zp2jm Год назад +2

      @@ianybanez6884 I can’t afford it 😭 I only have an Apple air tag so if they steal it I’ll at least know where they left it

    • @KamenRiderGumo
      @KamenRiderGumo Год назад +3

      I once got into my 1994 Buick with a sword. Got on a small ladder, pried the top part of the door away from the frame and slid the blade of a decorative Highlander claymore in he gap to hit the unlock button.

    • @johannkuhn5685
      @johannkuhn5685 Год назад +2

      There are ways to mess with thieves. Some ways (depending on the car) would mean that they could only drive maybe a block or so. Others can REALLY mess with them to the point of deterring further attempts to steal the car. The trick is to get creative, and stay away from off-the-shelf systems.
      Sure, some cars can be started with literally two lengths of wire (no breaking panels, no cutting wiring, no punching the ignition barrel, once you're in the engine bay it's really that simple). But there are still ways to protect a car even if that's the case.

  • @archerstown
    @archerstown Год назад +643

    Being in Cybersecurity I've known just how just how fragile and insecure our world is. I love that you're doing videos on this to keep people aware. It doesn't need to teach them everything, just give them the basic knowledge to start with and continue their own research from there. (Also yeah hacking is not just plug and play but as you can see, it's not THAT hard...)

    • @rzrxox
      @rzrxox Год назад +10

      dude you got Discord? i need some tips as i plan to become a pentester

    • @s14dorikin
      @s14dorikin Год назад +39

      I always say, “anything man-made can be man-hacked”. Where there’s a will, there’s a way.

    • @theglitch99
      @theglitch99 Год назад +15

      99.95% of ppl will do nothing with this info!!

    • @dblackviper2k3
      @dblackviper2k3 Год назад +14

      The good old safety/security vs convenience tug of war

    • @josepha.9952
      @josepha.9952 Год назад +2

      okay well tell that to Google. not research just a google search

  • @marcusdechant7092
    @marcusdechant7092 Год назад

    Very very interesting video, I like tinker with stuff like micro-controllers, and amateur radio operations stuff, but also dabble in security and cars a bit, so this is directly in my lane. I'm playing with a pair of 915MHz LoRa Radios right now to act as a medium for a remote sensor. I would like to see more small electronics stuff if possible, I'm sure yall could find a good use case for something like a Raspberry Pi Pico or smaller boards like Seeeduino XIAO, these boards are seemingly getting smaller and cheaper. Pico recently adding wireless capabilities on 2.5 GHz with the new W boards. I find these to be the ideal boards for data logging and remote sensor projects, I'm sure Jerry came across some of this during his weeks of research into this video. Again super cool video! Wild seeing you guys look into this stuff since its legit my main hobby lol. PS DONT get rid of that SDR bunch of use cases for that thing (pretty sure it can run as a Ham if you wanted)

  • @jakubzbest
    @jakubzbest 7 месяцев назад

    i like how you added a bar to see how long the sponsored segment was. very goog youtuber. you have a new subscriber now

  • @andydufresne8034
    @andydufresne8034 Год назад +435

    I'd love to see you guys do a whole series on security. Like how to avoid trackers and keep people from following you home and other useful tips and tricks we might not know.

    • @pidzotech1322
      @pidzotech1322 Год назад +12

      He just said switch off your Bluetooth. That's all you need to do for now 🤣

    • @deletefacebook8419
      @deletefacebook8419 Год назад +19

      Take three lefts in a row and if they are still following you call 911

    • @HairyCheese
      @HairyCheese Год назад +5

      Andy, is that an apple air in your glovebox or does your gf not trust you?

    • @biggwill21931
      @biggwill21931 Год назад +1

      @@deletefacebook8419 LOL!

    • @2ProTecK
      @2ProTecK Год назад +1

      @@HairyCheese your iphone or ipad will tell you there is a device tracking you.

  • @shaneoz4006
    @shaneoz4006 Год назад +155

    I love how James is like "you wanna steal my car, I know what the videos about"😂 You guys are just so cool. Love this channel

  • @RikHeijmen
    @RikHeijmen 3 месяца назад +2

    Great vid! That's why I had an on-screen 4 digit pin code in my Tesla. Don't know of any other keyless entry car that has that.

  • @riekumar6999
    @riekumar6999 4 месяца назад +1

    This just made me feel less paranoid for setting a pin to drive, but even more paranoid that someone can break into my car at anytime with $20

  • @reuben583
    @reuben583 Год назад +513

    Love you boys... hope you continue to grow and prosper.

    • @ummwhodidnt
      @ummwhodidnt Год назад +1

      Same

    • @asher666
      @asher666 Год назад +1

      I give it another 30mins before this Video gets Gagged and NDA'd hope Donut don't get sued

    • @Qqqqqqqqpodjd
      @Qqqqqqqqpodjd Год назад +1

      @Don't Read My Profile Photo nerd

  • @NoTimeForBreakfast244
    @NoTimeForBreakfast244 Год назад +194

    Mad props to Justin for stepping in halfway through and being able to pick up where Jerry left off, that couldn’t have been easy to do 😂

  • @tupera1
    @tupera1 Год назад +2

    3:47 - The Windows error sound was hilarious!

  • @nuclearwinter21
    @nuclearwinter21 Год назад

    Good video. 👍🏼
    How about you test those air intake swirl generators and velocity stacks? 🙂

  • @emmyali920
    @emmyali920 Год назад +483

    I’m an old lady who watches these videos for all the handsome and funny young men. I LOVE Jeremiah and this was GREAT. Sorry to hear about your diarrhea buddy, hope you feel better. Justin, you did amazing sweetie!! Please keep these great eye candy videos coming!!! ❤️❤️

    • @izjalen
      @izjalen Год назад +136

      wtff😭

    • @ummwhodidnt
      @ummwhodidnt Год назад +21

      I’m a visual appearance redesign of a video game’s asset that watches these videos for all the handsome and funny….

    • @YHK_YT
      @YHK_YT Год назад +1

      Loool

    • @richardidgaf8002
      @richardidgaf8002 Год назад +1

      Ayoooooo ?! There no way you dead ass someones dried up thirsty grandma. Either that or you gotta be smokin' that pack fr

    • @ademaydogan3834
      @ademaydogan3834 Год назад +9

      AYOOO 📸📸

  • @Portocala69
    @Portocala69 Год назад +112

    Hardware cost: $ 20
    Software, time, knowledge cost: $ 200.000

    • @cat-le1hf
      @cat-le1hf Год назад +12

      the knowledge is priceless but the time and software are free

    • @juanin200
      @juanin200 Год назад +6

      Didn't he mention he does it with free software?

    • @Pienimusta
      @Pienimusta Год назад +7

      Probably 100 different versions available in GitHub. So make the software, time, and knowledge more of 10 cents.

    • @UJustGotGamed
      @UJustGotGamed Год назад +1

      vs code is free

    • @kevinmenard6792
      @kevinmenard6792 Год назад +3

      @@cat-le1hf maybe your time is free but most people’s time has a value.

  • @trentm888
    @trentm888 Год назад +1

    What kind of launchpad is that? The naming convention reminds me more of the C2000 series MCU, but the USB debugger/programmer part of the board looks more like an MSP432's

  • @WitherRage
    @WitherRage 3 месяца назад +2

    Bro getting mega diarrhea on the day Sultan got there is relatable af

  • @avalanche450
    @avalanche450 Год назад +43

    Jeremiah and Justin killed it in this video as well as the production quality from the crew. It felt like I was watching a TV show the whole time. Would definitely watch something on a topic like this again.

  • @billstevens720
    @billstevens720 Год назад +61

    That guys cool as shit I hope you bring him back for other things. Dudes as sharp as that deserve more screen time

  • @navtektv
    @navtektv 8 месяцев назад +2

    The fact that Jerry actually tried to build that hacking signal thing himself, tells me that he's way more smarter than he let's on.

  • @thsgfbhstsbtrtsthstb
    @thsgfbhstsbtrtsthstb Год назад +1

    I saw that you had the sampling rate set to 2MHz when recording a 300MHz signal. According to Nyquist’s theorem you need a sampling rate at least 2x the data rate in order to digitally recreate an analog signal.

  • @SoCloseToToast
    @SoCloseToToast Год назад +105

    Lol love the part where Justin has a little Donut cheering section

    • @raven4k998
      @raven4k998 11 месяцев назад +3

      I love how thieves watching this video are going to be lets steal some tesla's if he can do it so can we🤣

    • @oliferous
      @oliferous 2 месяца назад

      "STEAL! THAT! TESSLAAA!!! 🤣@@kokopellione

    • @humbleindian6303
      @humbleindian6303 2 месяца назад

      a good for nothing tesla

  • @sidneylorentz4810
    @sidneylorentz4810 Год назад +69

    I imagine turning on PIN to drive would also keep someone from driving away in the car with this sort of attack. Still cool/crazy to see this in action though.

    • @JaysonGamboa
      @JaysonGamboa Год назад +8

      Probably, but it wouldn't really stop them from stealing all your stuff in the car

    • @sidneylorentz4810
      @sidneylorentz4810 Год назад +12

      @@JaysonGamboa stuff in your car, vs your $50,000 car.

    • @valiumdemon
      @valiumdemon Год назад +2

      @@sidneylorentz4810 what about $50,000 stuff in your car

    • @-jackinspokane6648
      @-jackinspokane6648 Год назад +6

      @@JaysonGamboa ...either would a brick

    • @earlpipe9713
      @earlpipe9713 Год назад +1

      I bet most people are unwilling to do dashboard only pin entry tho, as they want the pavlovian satisfaction of having the vehicle start when they press the fob

  • @publicnoddle
    @publicnoddle Год назад

    Appreciate the efforts you put in, it’s difficult 🎉

  • @kongmeng03
    @kongmeng03 11 месяцев назад

    This is probably one of the coolest video I’ve ever seen. Donut media never seize to amaze

  • @vitalino1981
    @vitalino1981 Год назад +284

    It's not just 20$. It's 20$ and years upon years of software and hardware engineering of the guy, who made it for You. Props to him 👍🏻

    • @BatCaveOz
      @BatCaveOz Год назад +17

      Gosh, some people will look for any opportunity to complain.

    • @SchleichDi
      @SchleichDi Год назад +3

      @@BatCaveOzshuddup

    • @thomasschwarting5108
      @thomasschwarting5108 Год назад +1

      Honestly, is it worth it for someone to be so DISHONEST?

    • @thunderb00m
      @thunderb00m Год назад +8

      As an embedded software engineer, I could build the hack device system into a product in a month. No need of laptop. It would under 50 and probably be it easy enough for anyone to use, but I won't.

    • @rikkirikki4892
      @rikkirikki4892 Год назад

      @@thomasschwarting5108 Yes. Tesla owners deserve to be stolen from.

  • @valfreyja2107
    @valfreyja2107 Год назад +95

    Damn Jeremiah! You did some real solid investigative work!! Love this!

    • @TheKoltenparker
      @TheKoltenparker Год назад

      If keyfobs use rolling codes, how did he get into the camero or James's car?

    • @alxkw6355
      @alxkw6355 Год назад

      @@TheKoltenparker Yeah it's that hard to understand ;) when you record the keyfob while out of range, this recorded code will work...just once. You'll need another press to record the next code...

    • @Digojaim
      @Digojaim Год назад +1

      Shame that diarrhea got in his way

    • @hiredgoon4269
      @hiredgoon4269 Год назад

      I think you mean liquid investigative work.

  • @mossegaming
    @mossegaming Год назад

    The 15 second unskippable ad was worth it

  • @Squirrel-zq6oe
    @Squirrel-zq6oe Год назад

    That error sound the first time he tries to open the door after trying to unlock it is gold.

  • @lazarcrnadak9900
    @lazarcrnadak9900 Год назад +86

    Great video as usual, but we need old B2B series again!

    • @Jonssi05
      @Jonssi05 Год назад +4

      Bro this video just came out 4 minute ago and its 11 mins long...

    • @YCStudios_greece
      @YCStudios_greece Год назад +1

      @Don't Read My Profile Photo ok

    • @TheeEuno
      @TheeEuno Год назад

      @@Jonssi05 lol

    • @ummwhodidnt
      @ummwhodidnt Год назад +1

      We need everything this channel blesses us with. Best all around channel in all of RUclips fr

    • @ummwhodidnt
      @ummwhodidnt Год назад

      @Don't Read My Profile Photo bro you aren’t doing anything…

  • @kshitijchavanphoto
    @kshitijchavanphoto Год назад +38

    Bluetooth had vulnerabilities since the day it was launched, i remember back in nokia times you can reverse bluetooth access anyones phone like full access lol

    • @asher666
      @asher666 Год назад +5

      It got so Bad in UK / Europe they started fitting Bluetooth Jammers in Bars 🍸

    • @Alexlfm
      @Alexlfm Год назад +1

      I’m not sure that I’d really classify this as a vulnerability. This sort of attack is always going to be inherent to this type of low-energy open protocol. Latency requirements mean that this requires a good Wi-Fi link, at minimum, between the two relays to work so it’s of limited usefulness unless one is a high value target.

    • @smoothbraindetainer
      @smoothbraindetainer Год назад +1

      @@Alexlfm An outdoors wifi repeater can go miles in the right circumstance. And nothing states it has to be wifi. Something like 3G would have the bandwidth and latency to easily go dozens of miles, given enough power.

    • @lasskinn474
      @lasskinn474 Год назад

      when did "reverse bluetooth full access" happen with early bluetooth nokias? heck the bootloaders didn't even get hacked until they weren't current.
      what was possible was to obex whatever over like .sis files or whatever and the owner of the phone might install it or not.
      edit: early s60 if you got the owner to pair it you could silent install through it same as nokia pc-suite, it was pretty handy for development.

    • @Alexlfm
      @Alexlfm Год назад

      @@smoothbraindetainer A cell connection won’t work. Latency limits are going to limit it to under 100ms of latency (at the most) and anything that goes out to the wider internet will introduce a higher chance of dropped or out of order packets. When you add in processing/OS overhead and the number of cycles that eats up, you need something with, I’d say no more then 10-20ms of latency for the link and ideally point to point. 2.4ghz Wi-Fi would likely be too slow and WAY too unreliable with interference leaving 5ghz which is going to have a limited range when not in line of sight.

  • @mystic4l
    @mystic4l Год назад +1

    2021 : breakin into a car
    2022 : hacking into a car

  • @Zzafari7
    @Zzafari7 Год назад

    oh cool i have those boards, was for my computer engineering microprocessors class. Used it to make a bluetooth coffee maker but nice to know I can add other capabilities to it

  • @Dreamzzz3
    @Dreamzzz3 Год назад +43

    My friend's 2019 CRV was stolen last year from the parking lot of his grocery store using a ~20$ Signal Amplifier.
    They amplified his signal while he was inside and they just left with the car.
    He later saw the CCTV footage and no one could tell that they were stealing that car. It just looked super casual and quick as if you unlocked the car with a key.
    Few days later the police found the car at the port waiting to be shipped in a container. (Possibly in Russia as it's the most sought after car model there).
    Edit: The CRV is keyless entry and start, that's why they could pull this off with just the amplifier

    • @justina3506
      @justina3506 Год назад +3

      Dudes pulled a Gone in 60 Seconds move

    • @maxistudios3092
      @maxistudios3092 Год назад +1

      Most likely to be shipped somewhere in West Africa.

    • @Hi-db5cd
      @Hi-db5cd Год назад +1

      @@maxistudios3092 or balkans.

    • @keyherobln
      @keyherobln Год назад

      this amplifier they used is this 15k one he showed in the video

    • @Sniperboy5551
      @Sniperboy5551 11 месяцев назад +2

      @dennisoeztuerkk No it’s not, it’s incredibly cheap to make something like this as long as you understand electrical hardware and programming.

  • @Nashcaster
    @Nashcaster Год назад +50

    I’m a loser because I laughed too hard at the dark web and you clicked dark theme. Nailed it! 🤣🤣 🙌

    • @emmyali920
      @emmyali920 Год назад

      That was very funny!!

    • @BikerTrashWolf
      @BikerTrashWolf Год назад

      Same. Wife couldn't understand why I was laughing

  • @mikemallamo1868
    @mikemallamo1868 Год назад

    Dudes a legend! What a genius!!!! It's crazy how easy he made it sound and look.

  • @bellluna9017
    @bellluna9017 Год назад +1

    8:44 lmaooo good advice 👌

  • @brodymanandts
    @brodymanandts Год назад +70

    In my old car I kept having stuff stolen out of my car. I though the first few times that I must have not locked my car. A cop finally came to my car and looked under the car and found a box with a receiver on it that was attached with a magnet. Apparently, its a big problem in cars that are parked in the same location often. Like people who have to street park or park in their driveways. People put them on the car and come back the next day or a few days latter and they can easily get everything from the car. The cop told me the best way to solve this is by hitting lock twice. It picks up on the first code and not the second that is done in quick succession.

    • @MarloSoBalJr
      @MarloSoBalJr Год назад +31

      I thought I had an OCD obsession with double- or even triple-tapping the lock on my key fob but turns outs to be a legit deterrent

    • @brianmaher2662
      @brianmaher2662 Год назад +15

      When cars were first stolen by relay attacks insurance companies were not paying out because in their minds if you still had both sets of keyfobs then it must have been an inside job.

    • @litecoinawarenessphoenix34
      @litecoinawarenessphoenix34 Год назад +3

      So the cops where stealing from you.

    • @kanedaku
      @kanedaku Год назад +2

      I don't know if thats true or not for your cars made for the US market; but in the UK, and stated in the Vauxhall manual, it explains that if you hit lock twice, what that disables is the proximity sensor so your car wont unlock until the key is pressed again, and therefore not by the signal being close by (either your approach to the car or by relay attack).
      Best to just disable the proximity sensor soon as you get your car. More secure, even before relay attacks started back in the day.

    • @RedJerk5
      @RedJerk5 Год назад +1

      I usually lock my car with the switch on the inside so there isn't a signal being broadcast

  • @wontonii232
    @wontonii232 Год назад +36

    Just gotta say I love how you guys filmed all around the office instead of in front of a lame green screen. We need to see more of the office in videos! Gives more of a bts feel that I like.

  • @Alluvian567
    @Alluvian567 Год назад +1

    How far away can you drive it though? Does it keep checking for the phone and lockout at some point down the road? I have been in my honda parked and running when my wife walked away with the fob and it started beeping and then shut off after a few minutes.

  • @Sea2TC
    @Sea2TC Год назад +7

    "This makes me happy" Bruh.... I would hope so. Because I would be expecting a phone call from Tesla offering a 6-7 figure salary job to help close their loopholes.

    • @dcgregorya5434
      @dcgregorya5434 Год назад +1

      Nah they know how to close them it just happens rarely enough that they don't see any point in it. Security can never be perfect...when its not good enough you add another layer...and another...and another. Thats why old cars you could steal with a coat hanger and a small piece of wire...then you needed a screwdriver...now you need a computer and special software and etc.

  • @torroloco95
    @torroloco95 Год назад +10

    One thing I love about Donut is you don’t HAVE to be a black thumb or mechanic type to love there stuff. I love detailing cars , and can do basic oil changes and stuff and I feel like I’m part of the club

  • @Neckername1
    @Neckername1 Год назад +46

    I'd like to let you know (experience in infosec here) that rolling codes, even though they help, are inherently flawed, and therefore exploitable as well. If you say had that key sniffer posted at a place where people may frequent multiple times, like a parking lot for a place people work at; you can eventually get the entire rolling key if you capture enough unlock signals

    • @cristianramos7343
      @cristianramos7343 Год назад +2

      Yup, and then iterate all of them untill one works with the car

    • @2ProTecK
      @2ProTecK Год назад +2

      A parking lot would suck, you would have so many codes you wouldn't know which car they belong too.

    • @jesseclutterbuck6617
      @jesseclutterbuck6617 Год назад +1

      Rolling codes are good fun. Take the key out of range of the car. Press the key 300 times. Return key back to car. Rolling code is now out of sync with car. Key fob no longer works

    • @2ProTecK
      @2ProTecK Год назад +10

      @@jesseclutterbuck6617 except they are designed to resynch. What low budget keyfob are you using?

    • @earlpipe9713
      @earlpipe9713 Год назад

      Clever clever

  • @patriley9449
    @patriley9449 Год назад +1

    No matter what the security precautions are, there will always be someone able to outwit them.

  • @AlcornOfficial
    @AlcornOfficial Год назад +5

    I love this channel and it makes me really happy to see this video, I'm very into cyber security and i think it's important for people to see these vulnerabilities in action so they know how realistic it is in a day-to-day scenario and are maybe able to take better precautions on to help themselves stay secure

  • @Dallas_Blasek
    @Dallas_Blasek Год назад +7

    Genuinely love seeing things about cyber security on cars, I graduated this year in the field and it’s interesting to see another vector of attack on new tech

  • @kennethpowers8995
    @kennethpowers8995 2 месяца назад

    My co worker purchased one of these type of devices for ~$1200 and has a little business on the side programming fobs for people. I’m not sure all what brands he can do, but I watched him program some new fobs for a guys 2020 RAM pickup and all he did was pull up, grab the VIN then play with his machine for a few minutes and voila; he handed the once blank aftermarket remote to the truck owner and said “try it”. The truck fired right up.

  • @rsaaron
    @rsaaron 14 дней назад +1

    This makes me feel so much better that my car requires a physical key

  • @bavarianhero
    @bavarianhero Год назад +4

    Clean set up on the Catfish!
    What wheels are those?

  • @BizzyVlogs
    @BizzyVlogs Год назад +5

    11:03 "FIX IT ELON" hahahahah

  • @AstralPhnx
    @AstralPhnx Год назад

    Now I wanna see a video detailing the encryption and security keyfobs use to try and prevent replay attacks because that is super cool

    • @jesseclutterbuck6617
      @jesseclutterbuck6617 Год назад

      It's called a rolling code system. It's not that interesting but it's designed to stop this attack

  • @eapbg
    @eapbg Год назад

    There is a more advanced version of the replay attack. When the victims presses their fob you receive and jam that signal. A normal person will just push the fob again. Now you receive the signal, jam it and replay the original signal. The original unlocks the car. Now you have one signal into the future to use later.
    Depending on how well the car was designed this could be exploited many different ways. For example if the lock/unlock is separate from the code then capturing any event works. capture several lock events then switch out the lock for an unlock. Also cars often have a resync feature where if multiple correct codes are presented in a row a car assumes that the fob lost sync and resyncs. If enough codes are captured in a row this resync can be done at any time.

  • @ScottyFlysFast
    @ScottyFlysFast Год назад +6

    Donuts next video:
    CAR THIEVES ARE GETTING OUT OF HAND

  • @DillandShaj
    @DillandShaj Год назад +6

    Justin is the perfect addition to the team, the last few videos he's been on have been very entertaining and just seems like a cool dude to be around!

  • @NateClay
    @NateClay 11 месяцев назад +3

    Weird, it's like no matter how much security against something you put, unless you make it impossible, they're gonna keep doing it.

    • @sakhsdragunof
      @sakhsdragunof 11 месяцев назад

      Installing a kill switch somewhere is a good way to delay the theves. Well, on gas cars at least.
      Good luck though with the EV's

  • @TestECull
    @TestECull Год назад +2

    9:05 Oh fuck no. All the more reason for me to drive my '53 Mainline everywhere....

  • @umernaeem6655
    @umernaeem6655 Год назад +4

    It’s so great watching little bits and pieces of the donut office. Im pretty sure a lot of people, me included, would love it if you guys could do an office tour. 💛

  • @Charlielizard
    @Charlielizard Год назад +8

    That was freaking incredible. High Five on the research.👍👍👍

  • @WestPat23
    @WestPat23 Год назад +2

    The guy in the pink hat at 10:41, is that James’ stunt double?

  • @weirdg
    @weirdg 7 месяцев назад

    Convenience over security. Wins every time.

  • @jiface
    @jiface Год назад +4

    Love Jerry’s solo vids, such a cheeky chap

  • @sandking9918
    @sandking9918 Год назад +3

    10:15 “steal that tesla” 😂😂

  • @RvGJK
    @RvGJK 4 месяца назад +1

    Great video! The cheapest way to protect your car from a relay attack, is wrap your car key up in tinfoil and fold it over itself. That will genuinely stop the signal from being able to be read. I use Costco foil, as it's better quality but it will work with any! For proof, give it a try for yourself. You shouldn't be able to open the doors even when the key is held against the car. Problem solved!! Now time to go grab a beer, an chill again haha

  • @lifted_above
    @lifted_above Год назад +2

    There's just stuff in this world that should NEVER EVER get digitized.

  • @tesla_3_performance
    @tesla_3_performance Год назад +24

    Should've used the "PIN to drive" feature; extra layer of security that this hack doesn't provide

    • @Leeteezy
      @Leeteezy Год назад +6

      I said the same thing, they should had added that to the video as variable. I believe most ppl use the pin to drive

    • @currenlydying
      @currenlydying Год назад +1

      There's an exploit to pin to drive where you can still get the car to drive by sending a bluetooth command.

  • @jamaljones6568
    @jamaljones6568 Год назад +32

    Vehicle markups are crazy thank you for showing me a cheaper way to get a car🙏🏾

    • @hackman669
      @hackman669 Год назад +1

      Wait until market slows and buy a used older model. Less Hassel, less money 💰

  • @CKM_808
    @CKM_808 Год назад +1

    Thieves watching this: "WRITE THAT DOWN WRITE THAT DOWN"

  • @EddieLeal
    @EddieLeal 7 месяцев назад +1

    Armed with nothing more than a vehicle identification number, hackers were able to access the remote services for cars from Acura, Honda, Infiniti, Kia, and Nissan, including locating and unlocking the cars, starting or stopping the engines, or honking the horns. 😳😱

  • @bluceree7312
    @bluceree7312 Год назад +3

    Maya, you've outdone yourself. Excellent video. Funny and informative.

  • @SvetGolovkin1462
    @SvetGolovkin1462 Год назад +5

    Donut Media is the MOST INFORMATIVE automotive channel in the goddamn planet! Uncle Jerē, James, Zach, Nolan, Eddie, and Freeman, thank you guys for doing this show. Legend status 👊🏿💯😎

  • @mrnobody6786
    @mrnobody6786 Год назад

    Hyundai, Kia and now Tesla.. thanks guys we couldn't do without you guys 😎👍

  • @mcmaschio
    @mcmaschio Год назад +16

    Love how he just turned on dark theme and he is the dark web 😂

  • @lionellillard4305
    @lionellillard4305 Год назад +3

    i love the whole skit and how the video was edited. Having "diarrhea" was genius let the innocent co-worker take the car! truly brilliant! Cheers m8

  • @paulcarroll9172
    @paulcarroll9172 Год назад

    Love the Dainese tshirt my bro.!

  • @ganocd4
    @ganocd4 Год назад

    Good reason to use pin to drive feature, at least to slow them down more

  • @namenamenamename7224
    @namenamenamename7224 Год назад +89

    This video slaps, more car software/hardware exploit content would be great!

    • @thatoneguybrian2365
      @thatoneguybrian2365 Год назад +2

      Sus... Yo in got a friend called "AlibiAlibiAlibi"?? 🤣😂

    • @guywhoknows4chords459
      @guywhoknows4chords459 Год назад +1

      This stuff is interesting! How about an exploit that controls your car and one where the car remotely shuts off during motion!

  • @lj516
    @lj516 Год назад +7

    Best Video Ever. I knew tesla's would be a prime target for this kind of attack! Great job guys!

  • @johnkaprese36
    @johnkaprese36 4 месяца назад +2

    Turning bluetooth off is obviously not the solution. It’s a tesla, you don’t want to use it like a legacy car.
    Just turn on PIN to drive.

  • @MistInnResort
    @MistInnResort 18 дней назад

    ''MEGA DIARRHEA''' Got Me Rolling

  • @kingrhegan
    @kingrhegan Год назад +3

    whenever i see donut upload - 11:09

  • @finnmurtons8727
    @finnmurtons8727 Год назад +6

    I've said this before but for those with keyless entry systems, the best and cheapest way to foil a relay attack is to put your keys in a covered Danish cookie tin. The cookie tin acts as a faraday cage and does not allow RF out. Make sure the the container is 1) made of steel and 2) actually seals. Hope this helps.

    • @adamsbja
      @adamsbja Год назад +2

      Doesn't fit in the pocket as easily though.

    • @ChristAcolyte
      @ChristAcolyte Год назад +2

      They sell copper mesh lined pouches that also do this same thing for wallets and passports.

    • @greig9794
      @greig9794 Год назад +1

      Doesn't work, the newest method now is to reprogram your key with OBD2 ports or your ECU while using factory keyfobs to unlock the door.

    • @rabokarabekian409
      @rabokarabekian409 8 месяцев назад

      aluminium or mylar foil a BIT easier -n- cheaper, innit?

    • @joesmith942
      @joesmith942 2 месяца назад

      What do you do with the cookies?