Start the car with a wave of your hand

posted Jan 14th 2010 1:00pm by
filed under: security hacks, transportation hacks

[Jair2K4] likes his RFID almost as much as he likes his chaw. Ever since his car was stolen he’s had to start it using a screwdriver. Obviously this is not a good way to leave things so he decided to convert his starter to read an RFID tag. He installed an RFID transponder he picked up on eBay, wiring it to the ignition switch. He’s removed the clutch-check sensor and wired a rocker switch to enable the RFID reader. We presume the rocker switch will eventually be used to shut the car off as well.

While most would have purchased a key-chain RFID tag, [Jair2k4] went far beyond that and had the tag implanted in his hand. This is an honor usually reserved for pets and until he adds RFID functionality to the door locks maybe a key fob would have been a better answer. But, to each his own. See his short demonstration video after the break.



70 Responses to Start the car with a wave of your hand

  • charliex says:

    Is it wrong to want to shake his hand while having a hidden rfid destroyer ?

  • sol says:

    Imagine a network where information is spread through random handshake exchange of info on these implants.

  • Boomer says:

    What about when you want to buy a new car?
    just sayin…

  • isama says:

    @boomer: Then you just take out the rfid stuff and add it into the new car…

  • anon says:

    @Isama

    New cars already have keyless functionality in place coupled with a start-stop button

  • Eddie says:

    A suggestion for a quick and easy way to protect your car from being stolen, by being driven away.

    Look up in the owners manual where the fuse for the electric fuel pump is.

    Pull the fuse and put it in a safe place.

    When the fuel pump doesn’t run, there is no gas going to the engine.

    When you want to run, put the fuse back in the same location and you’re good to go.

    If you want to make it a permanent feature, wire in a hidden switch (between the fuse and the fuel pump) to interrupt the flow of electricity to the fuel pump.

  • MadScott says:

    I won’t go for the “Handshake protocol” puns so painfully presenting themselves in this post.

    My wife’s new Toyota Rav has no key,just an RFID pendant, which means that anybody can drive so long as she’s in the car, you don’t actually unlock it (it’s unlocked when you get near) etc. Very handy…haven’t scanned it yet to see how easy it is to clone.

  • Spray190 says:

    @Eddie, a better way on some cars (ok so far the only one i know this works on easily is a land rover defender) disconect the earth on the starter motor, u can try for hours and the thing wont start…. ok thinking about it that would probs only work with a Defender as u can open the hatch thats under the front middle seat and just pull the plug on the starter.

  • jeff-o says:

    I’ve always wanted to do this to my car, but I don’t have the guts to implant an RFID tag in my hand. Maybe in my watch or something…

  • Eddie says:

    @Spray190, Don’t you think removing a fuse is easier than unbolting a negative cable going to the starter motor?

  • Eddie says:

    @jeff-o, for those who have pierced body parts, an RFID ring/stud would do the job.

  • CrossHarez says:

    All fun and games until somebody gets an MRI.

  • Rockwolf says:

    @Eddie, possibly a more convenient way is running a relay for the fuel pump, with a switch hooked up somewhere hard to find in the cabin.

    Like your fuse idea, it stops the car running (though I find it runs for a couple of seconds, then stalls out) – but it’s more convenient, so more likely to be used every time you exit the car.

    Saved my car once already. Unfortunately, by saved, I mean smashed window, smashed steering lock, smashed ignition barrel, and me hearing the car start and then stall as I was coming out the door with something hard.

    Another way to do it involves cutting power to the car’s ECU.

    ./Wolf

  • Paul Potter says:

    “had the tag implanted in his hand” – Now that’s dedication.

  • Spray190 says:

    @Eddie, you obviously dont know defenders, its actually easier to disconnect the starter than it is to take the fuse box cover off, and can also all be done from inside the cab

  • Concino says:

    He could’ve mounted the RFID reader in the seat and implanted the chip on his bottom. That way no swiping the hand. ;P

  • Mike Szczys says:

    @Concino: and if you get thrown from the vehicle it would kill the ignition. Kind of like the kill switch on a jetski.

  • zoidberg says:

    The steering wheel’s on the wrong side…

  • chris says:

    I don’t what’s funnier his RFID implant or the hi-tech turd interface. They do make RFID finger and key rings you know!

  • Ysoft says:

    Implanting anything that produces radiation isn’t such a great idea. Might even poison the guy. Not to mention if it was his right hand… 666 anyone?

  • Chris says:

    RFID tags are in animals and completely safe, however I do think it would have been much cooler in the steering wheel. You would just need to make sure it only turns the starter motor while the enginer is not running, otherwise the starter motor would run while your hand is on the wheel…

  • Jair2k4 says:

    I think the best part of this was the fact that they noticed that i had a big wad of chew in my mouth… Good eye!

  • Nitori says:

    Is it normal to want to shake his hand while you have a RFID cloner hidden on your person and then watch the abject terror on his face as you start his car with an RFID emulator and a small RF amp?

  • risu says:

    Jedi mind trick now works on cars? Sweet.

  • Kris says:

    @ risu, I think that is…

    Jedi mind tricks on cars work they do.

  • I will never get an implant for a Suzuki.

  • supershwa says:

    RFID tag..implanted in your hand? Yeaah, you go right ahead. One day Google is going to have your daily activity on a map.

    Nice..er..hack? But what dedication — you have a RING for your WIFE, and a SURGICAL IMPLANT for your CAR!

    Awesome!

  • supershwa says:

    Let’s not forget about Chris Paget’s awesome demonstrations: http://hackaday.com/2009/02/02/mobile-rfid-scanning/

  • lejupp says:

    and all this effort for a 1963 Suzuki shitbucket…

  • evilpat says:

    @charliex…..

    me and jair2k4 are best friends and that was one of my first thoughts too lol

    it would be nice of hackaday to name our site in the article (techno-holics.com)….i’m just saying here……..

  • Josh says:

    This was covered when Amal Graafstra’s article was posted a few years back, he used his implant to start his motorcycle. Also, the government would have a damn hard time tracking a chip with a 4 inch read range, and mythbusters proved nothing will happen to the chip or the implantee when left in an MRI machine for 10 minutes straight. Also for the bible idiots, this doesnt fit your “sign of the devil” in any way shape or form.

  • xtreker15 says:

    I would just cut off your hand to steal the car.

  • ewergf says:

    If it isn’t key generator passive rfid he just made the car easier to steal.

    If he had such rfid on the car to begin with he wouldn’t of had it stolen, most cars have it now.

  • Chris says:

    You say RFID makes it easier to steal unless it is fully encrypted and not the Mifare classic etc… etc… However, most car thieves are dumb as f8ck and would not be good at the whole RFID cloning thing… Just my opinion of course…

  • octel says:

    @Chris is right.
    Car thieves simply don’t care to spend the time messing with whatever fancy auth system you have, regardless of encryption.

    Their main goal is to steal cars, not hack encryption. If your car isn’t immediately vulnerable to their standard attacks (screwdriver in ignition, etc.), they will move on to the hundreds of other cars nearby that ARE immediately vulnerable.
    Your car windows might get smashed in frustration, but that’s better than losing an entire car.

  • octel says:

    In short, most people in this thread seem to be giving car thieves way too much credit :)

  • Jair2k4 says:

    Look guys, i’ll explain this… I live 20 miles from a big city… out here are…. people of lesser intelligence when it comes to electronics. No one in this entire area even know what RFID technology is.
    Let the government track me… they’re going to have some buff as CIA guy constantly following me with a reader 2 inches from my hand… a little obvious no?

    Mark of the beast = crap

    Yes my Zuk is a 1991 hunk of crap. But I love that car and have modded the piss out of it. It’s getting a V6 and another 3 inches of lift on top of the 2 it already has. It maybe be a suzuki sidekick, but its going to be the hottest Sidekick in central washington.

    Oh, and to those of you just saying this post is stupid… at least give a valid reason as to why you thin that it is instead of mindlessly throwing out a few words and then moving on to the next post you are going to flame….

    Just my 2 cents.

  • Sam says:

    I like the idea a lot. I do think it seems a bit inconvenient to have to swipe your hand to the lower left area of the car after hitting a switch. This is coming from a natural lefty.

    A somewhat more hackish location could have involved hollowing a section on the steering wheel and installing the antenna in it. Then move the switch down near the pedals so it can be triggered with a foot. That allows you to get into the car, put your hand on the wheel and tap the switch to start with your foot. Nothing seems more natural.

    There are switches designed to withstand that kind of mechanical stress (being stepped on all the time) – they use them to start golf carts.

  • Evil says:

    I don’t like the idea of an implant, but I do love the hack. Well done. I have an idea though. Could you power the RFID reader from the brake lights? It would eliminate the switch. You’d only be able to start the car if you had your foot on the brake, which is probably where you’d have your foot anyway.

    I used to have a 94 Zuk. It was sweet. 3″ lift, winch. I cut the arse end out of it and made it into a little pickup truck. Then I took the exhaust and rerouted it up through the bed, sorta straight up and down like a tractor trailer.

    I have a 99 now and it’s trash. The Tracker 2s are nowhere near as good as the first generation Tracker/Sidekicks.

  • Gareth says:

    Thought I`d comment, as I also have an rfid implant (which was done myself). I did a lot of research into the safety aspect before hand, and the device I implanted has FDA approval (although for bicep implanation rather than in a hand).

    It’s perfectly safe for MRI scans, it’s so small and has such a tiny amount of metal it isn’t going to move or get pulled out etc. It doesn’t generate radiation, it modulates the signal sent by the reader (which you would be exposed to holding a tag in your hand), and there are far greater electromagnetic waves around us that haven’t been shown to cause harm.

    As for tracking, they are very small and work at 125Khz which means they have a very short range. The reader has to be within a few cm’s of the chip to read it, so you couldn’t just walk into a room and get scanned. They also feature encryption which can be used if desired. Also, how would anyone know you had an implant to be able to scan you?

    The implants have been used in animals for over a decade and have not been found to cause harm. If a risk does come to light the chip is very quick and easy to remove.

    It’s not for everyone, and I have my own reasons for doing it – some people think i`m mad, others are fascinated by it, either way it’s an interesting talking point :-)

  • Hi Gareth,

    It sounds like you have a VeriChip. Have you found any low cost OEM style reader hardware you can use to integrate into a project like this that works with your VeriChip?

    Also, did you actually get yours implanted in the bicep? That could be a little awkward when trying to use it with DIY projects.

  • Josh says:

    The VeriChip is actually uses a proprietary protocol on a standard carrier frequency. There really are no DIY readers capable of reading it.

  • I’ve seen one DIY reader built that can handle it, but I was hoping there was more out there by now. It’s not that difficult of an air interface, it’s just no real manufacturer can license it. It’ll probably never happen because VeriChip’s value is not in their chips it’s in their applications.

    Still, I was just putting the probe out there to see if anyone had heard of an equipment manufacturer that had been able to obtain license. Or, alternatively, has anyone been able to hack a VeriChip reader to get TTL/RS232 serial data out of it (or has even bothered trying)?

  • Whatnot says:

    He should have had the RFID set in a ring instead, and not tell people he did, that way he’d have it always with him and nobody would be the wiser.

    alternatively he could have bought one of those swipe fingerprint readers and used that instead.

    Personally I think anybody that implants an RFID should be put in a mental institution immediately.

  • Whatnot says:

    @Gareth
    Yes they do cause tumors in a percentage of animals I read, that’s just not put out there much, it’s better to not get that into the media too much they decided since they want everybody’s pet chipped and that would not help the cause.

  • 8-[ says:

    This is a stupid hack. Using the regular key is much quicker und you wouldn’t need to put shit in your hand.

  • @Whatnot
    Mental institution? Really? You sound like the church condemning Galileo. Honestly, what’s wrong with people using a functional implant for their own purposes? Would you say the same thing of someone using a hip replacement or pacemaker? Chances are you’re a government conspiracy nutjob… in which case there’s no way to have a straightforward conversation with you.

    As for the cancer thing, there are mitigating factors, including the fact that us DIYers are not using glass tags approved for implantation and thus do not have the antimigration coating on them, which I believe is the cause of these cancerous cells found around the implant sites of elderly test rats: http://blog.amal.net/?p=48

  • Jair2k4 says:

    Amal is right. He should know, he is one of the authorities on the subject. He has even written a book about it. I sought his counseling before i had my implant done.

  • Whatnot says:

    You are saying using implants NOT approved is the safe and sensible thing?
    And yeah I understand your anger because I expressed myself so explicitly and understandably you need to dismiss me right back, but at least you acknowledged the cancer risk thing in some circumstances, that’s pretty damn decent of your, I appreciate it.
    The reason why I think it’s insane is that you reduce yourself to become an extension of a gadget, and walk around with a identifier that’s readable from a distance, but that last one is more a personal feeling since everybody seems very happy to walk around with cellphones and have them have GPS location awareness and personal identifiers and such, and I’m not.

    As for the comparison with pacemakers, yeah if you get a pacemaker without needing it you would be insane, same for a hip implant, and I think that even those needing it are not exactly thrilled with the thought of having those, I don’t see people jumping up and down saying ‘well I might have a heart condition but at least I get a nice pacemaker, yay’

    As for government conspiracies, well I’m not on board as much as those I’d call nutty, but I did have disagreements with certain types of republicans who deny even things the government publicly admitted, for instance there WERE (and probably still are) secret prisons after all, normally anybody claiming that might be dismissed as nutty but after it’s been confirmed they should stop, and the NSA with help from AT&T DID listen in on half the US population, it’s documented, and the FBI did admit they have sneaked in hacked firmware in suspect cellphones that allowed them to turn on the microphone while the set seemed off.
    And if you list only a few of those confirmed occurrences any sensible person will conclude to be a bit suspicious towards trusting the government and its agencies.

  • Without getting into the government stuff, a couple things I want to clarify about the tags.

    1) I was basically the first guy to put a non-VeriChip (the only FDA approved chip for humans) in my left hand. As such, I spent about 2 weeks researching and calling manufacturers to confirm the glass used to encase the tag and antenna was the same used in the VeriChip and the pet tags that have been used for years. The only differences between one of those tags and the kind I have are A) there is no anti-migration coating on mine, and B) the data protocol is different.

    2) The government has nothing to do with the tags DIYers are using (another good reason to go “off grid” with non-approved tags). There have been connections with immigrant worker programs and the military with regard to VeriChip (the only FDA approved human implant), however for that reason (and several others) DIYers don’t want a VeriChip.

    I don’t see it as “reducing myself”, I see it as enhancing myself. Gadgets bend to my will, not the other way around. This tag is only used with my own personal projects… things I create/hack/make.

    It cannot be read from a distance, and it is definitely not a GPS. You cannot triangulate it’s location, it does not transmit unless held within inches of a reader which generates a magnetic field to power the tag, it just doesn’t act anything like a GPS.

    I chose to use this technology in my daily life, and the manner in which I chose to use it is no more disturbing or physically dangerous than an ear or tongue piercing, or a dermal implant if you’re into the body mod scene. Ironically, I would never have either of those things done to my body as there is no functional aspect, only aesthetic… which I wouldn’t bother with.

    Anyway, I guess what I’m saying is, learn a little bit more about the technology, what it’s capable of and what it’s not, and if you have any serious questions about it you can post to the RFID forum at http://www.rfidtoys.net/forum and I and/or others will respectfully reply.

  • DBX says:

    It’s a good way to protect your card,and may be we we have another good way to protect your car bymoible phone

  • NameRequired says:

    I don’t want to pee in your cherios or anything… but good luck with the RFID chip. I like my gadgets… you know… outside of my body.

    You’ve got to ask yourself: Why is there so much hype by government and military for such things? It’s not because they want to give you an easier way to turn on your car… that’s for sure.

    How do you think tech-startups get funding? The implant that you just put into yourself will probably happen to receive some sort of “contract” magically in the next few years so that your government can track what you’re up to… if you’re into that sort of thing, that is.

    How could ANY sort of RFID implant be considered “off the grid?” Nah. I’ll just take the extra strenght (I know… it’s so hard) to turn on my freaking car manually.

    Not to mention – RFID implants have been known to cause cancer (and yes, we’re talking–including your glorious VeriChip).

    I love gadgets and all, but when it turns into a potential for Big Brother, I draw the line. I thought books like 1984 were pretty much standard issue for geeks. *shrugs*

  • NameRequired says:

    Whatnot: You’re on the right track. If you do much research on the subject of implantable RFID chips, you’ll find pretty frightening stuff. As I said, tech startups have to get funding from somewhere. Gee, I wonder who might have a vested interest in funding the development of the RFID chip market. . .

    I totally agree with you. Why would any sane person implant something into themselves if their life didn’t depend on it? I’ve read all about this “transhumanist” crock. Some people watch too much Star Trek.

    It’s kind of like getting a big New Kids on the Block tattoo on your forehead, “it seemed like a good idea at the time”. How about in 10 years?

  • NameRequired says:

    Chris: How do you know they’re safe? They’re not a long standing technology. They’re safe because… they’re aproved by the FDA? The same FDA that approves deadly poisons all the time if the manufacturer has a nice little bribe for them?

    Wireless devices aren’t even all that safe… but implanting one inside you?

    The lunacy astounds. This isn’t a Sci-Fi novel where the world is run by peaceful utopian beings. . . isn’t that obvious?

  • wtf? “so that your government can track what you’re up to” ? How? Obviously you guys know nothing about how this tech works and what it is and isn’t capable of. Besides, blaming the technology for abuses by people is backward. Just because “the government” drives cars and trucks and uses guns to kill people doens’t mean we should condemn cars, trucks, and guns. Technology can be used for many things both benign and corrupt. I tend to think my use of the technology within the parameters of my own personal projects is fairly benign. Since the tag I have has an effective range of just 2 inches, I’m sure if “the goverment” wanted to find me they would much rather just ask my mobile phone carrier where I’m at… as so many governments around the world are doing these days.

    “How do you know they’re safe? They’re not a long standing technology.” – What do you call 20+ years of implantation in pets with no side effects? We’ve already touched on the cancer issue, however if you look at the actual research and not reporter conjecture, two things become clear: 1) cancerous cells, not tumors, were found surrounding implant sites in very very old rodents who were dying of old age anyway. 2) none of the rodents where these cells were found actually died from carcinomas… they all died of more mundane things.

    “The lunacy astounds.” – The only lunacy going on here is people namelessly commenting about things they obviously don’t understand, and yet refuse to learn about. It’s just more of this: http://blog.amal.net/?p=2317

  • NameRequired says:

    Good luck. I hope you enjoy your implant. We’ll see in 5 – 10 years if you have the same oppinion (no doubt, by that time you’ll be under some sort of cancer treatment… but don’t let that stop you)

    ENJOY! :D

  • NameRequired says:

    Food for thought: A car, or gun is not implanted inside of your body, and a car or gun can not track you.

    Hmmmmmmm. You DO know RFID is very easy to hack as well, right? This is even asuming that there’s no other issue with the thing.

  • More food for thought; I’ve had my implant for 4.9 years and so far so good. Also, FYI, my implant cannot track me either.

    Finally, I’m not too worried that someone will go through the trouble to hang around with a reader sitting 2 inches from my hand for at least a few minutes just to hack my 40bit encrypted HITAG S 2048 with additional rotating 255 byte security key when they could simply break my car window or kick in my door. Again, these are personal use projects, not access to my friggen bank account.

    If you’re really interested in the security risks with regard to personal use vs business use contexts, watch my Seattle DorkBot talk: http://www.youtube.com/watch?v=qzE_F8sWHNI

  • Even more food for thought! I forgot about this great post where a whole lot of ground is covered… privacy, security, the government, tracking, medical records, etc.

    http://rfidtoys.net/forum/forum_posts.asp?TID=310&title=ill-admit-it-terrifies-me

  • Evil says:

    I would be a lot more concerned about the danger of fillings in teeth. Also, thinking you could be tracked is pretty ignorant. It’s similar to people losing their shit when TVs first came out thinking the broadcasting companies were watching them in their livingrooms. The lunacy astounds is right…

    That said, still don’t like the idea of tags under my skin. I would surely fry the thing within a year. I could envision a lot of debris floating around under my skin in short order if I always wanted a working tag.

  • Heh I can’t blame you for just being creeped out by having it in your body.

    Just yesterday though I was picking up mail at the post office and the guy behind the counter asked “I heard you have some kind of chip in your arm or something?”, so I had to show him. The next question was “so can’t they track you?”… I am still dumbfounded by this question when people ask me it. I asked him “Who are these ‘they’ people you speak of?” and he basically said “well, the government I guess”

    Where do people come up with this stuff?! Honestly? Is the idea that the government has all seeing powers so ingrained that it is now the defacto coat-hook to hand all unwarranted fears on? Anyway, I just said “No, it has a read range of only 2 inches, and as a government employee you should know they can barely get their act together when it comes to tracking packages… let alone people.”

    PS, after hopping through a lot of dentists, I finally had all my amalgam fillings rooted out and replaced with composite. Quarrels with dentists are nothing new for me though; http://blog.amal.net/?p=744

  • RedZed says:

    What? Fuse, fuel pump, kill-switches…hasn’t anybody ever heard of a rotor-arm?

  • zaac says:

    well what if you can just get another thing implated in your hand. SEE EASY to STEAL!!!

  • “another thing implanted”? “easy to steal”?

    I wish people would take more time to expand a bit on what they are trying to say. I have no idea what that means or if they were ranting or agreeing or what was going on. Posting short spurts of fragmented crap just makes me assume you are an idiot and I ignore your post entirely.

  • JasonD says:

    These setups would be more functional if they just limited the ability to start, as opposed to being used to start the vehicle. EG, having the key and also requiring the tag for security reasons. No one item works alone, and the RFID should have a bypass that is hidden.

    Having the sensor in a less obscure location would add to security. That way the thieves never even know it is a requirement. EG, hiding it in the seat-belt strap or within the side of the seat. You can casually activate it without drawing attention to your actions. A simple flashing LED would indicate success or failure.

    For real security, demand both RFID’s in a specific order and with a specific time between RFID sensing. Having a programmable version allows you to create your own security. You are not limited to the restrictions of the read-only ID tag. The more non-standard and “corrupt” you can make the tag, the more secure it is. Clone tools throw-out junk tags.

    RFID need a reed-switch inside the tag. That way it never broadcasts until you want it to broadcast. Just place it within range of a magnet.

    Smart tags will have rolling encryption similar to car alarms. Multi-frequency and certificate authorities like the internet, before broadcasting info. These low-tech RFID’s are only good for what they were made for… Quick identification. Security should not be reduced because an unconfirmed device says, “Bob is here”. There are thousands of “Bobs”. Ok, you are Bob, so prove it by inserting your key and entering a PIN, so I know if this is Bob Smith or Bob Marley.

    Cool toy, all the same. Getting one soon.

    BTW, nothing is “completely safe” for surgical implanting. There is a lot of news around the malignant cancerous tumors caused by many of these devices. (Though I believe that is only the ones which have the bonding-agent that the FDA apparently “blindly” approved for human use. And the ones from china with high led content in the glass. EG, not bio-glass. Intended for use only in liquids and external devices.)

    Just be careful and get checked for medical issues. (The issue with MRI is simply that the RFID interferes with the image. It shows a solid black halo, blocking the ability to “see” what is actually there. Nothing harmful, unless you need to “See” that there is cancerous cells growing off the RFID glass.)

  • A new EM4102 reader is out now that simply can’t be beat if you’re looking for an all around kick@ss board.

    http://blog.amal.net/?p=2781

    It’s a little too good for a simple vehicle application, but would work great for tons of other projects. The best bit is the plug-and-play XBee support and the multi-reader comms protocol.

  • jair2k4 says:

    Just wanted to update everyone thinking im going to have cancer or be tracked by the government.

    After 6 months, my implant is the same as the day it was put in. No cancer, no rejection.

    Although, I have had a guy in a black suit calling me ‘Mr. Anderson’ following me around with a backpack and some sort of scanning device though.. every time he gets close enough to read my tag…. about 2 inches from my hand, I slap his hand away and say ‘NO! that’s a bad bad government agent! Next time I’m going to use a squirt bottle… or a rolled up newspaper…. :P

  • Leave a Reply

    XHTML: You can use these tags: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <pre> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

    Hack a Day serves up fresh hacks each day, every day from around the web as well as hacking related news.

    Send us your hacks






         




    Hacks

    Resources