Faraday Cages for Keyless Go Fob Security
#26
MBWorld Fanatic!
Joined: Jan 2009
Posts: 9,122
Likes: 1,753
From: V E G A S
1922 Ford Model T / no OBD
You did it on 2016 model? The reports about double clicks not turning the key off were for 2014 models.
Than even if you have MY where it works, key buttons are often pressed when in the pocket.
What are the chances you will not activate they key while pulling change at McD ?
Than even if you have MY where it works, key buttons are often pressed when in the pocket.
What are the chances you will not activate they key while pulling change at McD ?
#27
Thread Starter
MBWorld Fanatic!
Joined: Apr 2006
Posts: 4,654
Likes: 1,760
From: Dallas-Ft.Worth,TX
2016 E350 Sport
Well, that's true. You can push buttons unintentionally. I don't think there is any way to guard against that, unless the fob is the only item in a front pocket (as in my case). I don't carry change, only bills... I throw the coins into the coin bin in the car's center console the minute I hit the seat.
Last edited by DFWdude; 10-25-2019 at 09:01 PM.
#28
To answer you question, it basically uses public/private key encryption. No person needs to activate it. That's just the way keyless go works on the car. You basically walk up to the car and the car recognizes that you have the key fob on you and the doors unlock when it's detected and the car starts. It's actually pretty accurate because it can tell if your key is in the car or not which prevents you from actually locking the key in the car by accident. They are not sniffing, they're just rebroadcasting the signal. It's public/private key encryption. A code is sent out by the car and the key responds, all the thieves do is rebroadcast those signals so the car thinks the key fob is right next to it when it's actually in the house. The key fob range is normally pretty short so when it's in the house, it shouldn't work. To stop that method from working, if the key is in a faraday cage, the cage blocks the signal from being transmitted so even if you broadcast the signal from the car, the key fob can't respond. Electrical engineer here so I hope that helps.
The following users liked this post:
Yakatak (01-31-2020)
#30
Thread Starter
MBWorld Fanatic!
Joined: Apr 2006
Posts: 4,654
Likes: 1,760
From: Dallas-Ft.Worth,TX
2016 E350 Sport
Prior MBs unlocked when the key fob was proactively pressed, leading me to believe that the key starts the sequence. Whether the car is always in listening (or asking) mode is the question.
It doesn't make sense to me that these cars would have separate wireless systems for Keyless-Go vs non Keyless-Go? I do wish we could get a definitive answer on this...
#31
MBWorld Fanatic!
Joined: Feb 2014
Posts: 6,155
Likes: 1,507
From: MA
2008 E350 4Matic, 2011 E350 4matic
If all facelift W212s are Keyless-Go then that makes some sense. My question is how do non Keyless-Go cars work with their key fobs?
Prior MBs unlocked when the key fob was proactively pressed, leading me to believe that the key starts the sequence. Whether the car is always in listening (or asking) mode is the question.
It doesn't make sense to me that these cars would have separate wireless systems for Keyless-Go vs non Keyless-Go? I do wish we could get a definitive answer on this...
Prior MBs unlocked when the key fob was proactively pressed, leading me to believe that the key starts the sequence. Whether the car is always in listening (or asking) mode is the question.
It doesn't make sense to me that these cars would have separate wireless systems for Keyless-Go vs non Keyless-Go? I do wish we could get a definitive answer on this...
Not all facelifted cars have keyless go, it was still an option but like the P1 package, many cars had it.
The following users liked this post:
pierrejoliat (01-30-2020)
#32
The key has to be broadcasting at all times looking for a response from the car. Your examples of the bad guys stealing the code proves that out. They are intercepting the key signals and boosting them to the car. This would be the case for KeyGo and non KeyGo. The keys in each case are always broadcasting. IMHO the key starts the sequence.
#33
#34
Thread Starter
MBWorld Fanatic!
Joined: Apr 2006
Posts: 4,654
Likes: 1,760
From: Dallas-Ft.Worth,TX
2016 E350 Sport
Does anyone know if there are different part numbers for each type key fob (Regular vs Keyless-Go)?
I ask, because it's been posted elsewhere that some users install a CR2032 battery in their key fob. Try as I have, I cannot force a CR2032 battery into my Keyless-Go fob. It will accept CR2025 only. The diameter of the batteries is the same, but the CR2032 is thicker. Could there be added componentry in the Keyless-Go fob that takes more space, that prevents using the thicker CR2032 battery?
Last edited by DFWdude; 11-04-2019 at 02:09 PM.
The following users liked this post:
pierrejoliat (01-30-2020)
#35
MBWorld Fanatic!
Joined: Feb 2014
Posts: 6,155
Likes: 1,507
From: MA
2008 E350 4Matic, 2011 E350 4matic
The key has to be broadcasting at all times looking for a response from the car. Your examples of the bad guys stealing the code proves that out. They are intercepting the key signals and boosting them to the car. This would be the case for KeyGo and non KeyGo. The keys in each case are always broadcasting. IMHO the key starts the sequence.
And yes, of course the fob between keyless go and regular are different. I think at one point you could swap cases with a non keyless go key but not a keyless go one.
As for the 2032, I'm not sure when they changed cases, not sure if your key fob is the same as the older pre face lift models. Mine had a 2032 stuffed inside my 2011. It barely fit, the cover would hardly close, but it did kinda fit.
#36
Tonight I put those new two RFID protective pouches to the test. I placed key fob inside pouch and walked up to my Keyless Go door where car had been locked. As I tried to pull handle to open door, nothing happened. That was an indication it works like it's intended.
#37
Thread Starter
MBWorld Fanatic!
Joined: Apr 2006
Posts: 4,654
Likes: 1,760
From: Dallas-Ft.Worth,TX
2016 E350 Sport
Tonight I put those new two RFID protective pouches to the test. I placed key fob inside pouch and walked up to my Keyless Go door where car had been locked. As I tried to pull handle to open door, nothing happened. That was an indication it works like it's intended.
My keychain has the SmartKey, and a ring with house key, MB emblem bauble and mini USB drive (pic in OP). A lot less than most people. Still, I wonder if all can fit in the pouch? I ask, because if the additional keys have to dangle outside the pouch, I suspect the metal ring will act as an antenna for the Smart Key (and unlock the door). Perhaps you can test that, please?
Last edited by DFWdude; 11-06-2019 at 07:48 AM.
#38
That pouch I got will not accommodate anything besides SmartKey. It's a very tight fit, you can't even get a credit card in there. Perhaps there are other outfits that are a bit larger than this particular one I got.
#39
When i am at work i use this since my car is parked right outside of my office.
For some reason the above link opens Walmart -
For some reason the above link opens Walmart -
Last edited by GuestFromTampa; 11-06-2019 at 01:28 PM.
The following users liked this post:
DFWdude (11-08-2019)
The following users liked this post:
pierrejoliat (01-30-2020)
#41
Tonight I put those new two RFID protective pouches to the test. I placed key fob inside pouch and walked up to my Keyless Go door where car had been locked. As I tried to pull handle to open door, nothing happened. That was an indication it works like it's intended.
#42
MBWorld Fanatic!
Joined: Jan 2009
Posts: 9,122
Likes: 1,753
From: V E G A S
1922 Ford Model T / no OBD
Have you tested they key distance to car when no RFID pouch is used? At what distance will the key communicate with the car? When is it out of range? Will the key communicate with in range (whatever that is) after the key has not been moved for say an hour? There is anecdotal evidence that keyless go keys become inactive when at rest for a time period unknown and are activated by moving the key.
I have not see a reply from a guy who could actually measure the signal, but all the hands-on experience tests show the key sending ping every few seconds all the time.
#43
I sure would like to see something published by a reputable source that says the keyless go fob sends out a ping every few seconds all the time.If you run across one please post a link.
#44
Thread Starter
MBWorld Fanatic!
Joined: Apr 2006
Posts: 4,654
Likes: 1,760
From: Dallas-Ft.Worth,TX
2016 E350 Sport
An update...
After dropping off several donations at my local CCA, I wandered into their resale shop next door. I found this small cocktail shaker. It's only slightly magnetic (some steel alloy), but it had all the requisite features: 1) overlapping cap and body and 2) good friction fitted parts.
Trying the 2 feet from the car experiment, the doors will not unlock with this one. So this is a possibility for those looking for ideas for inside home faraday cages.
Plus, if you want to mix up a Dry Manhattan, Up with an Olive...
After dropping off several donations at my local CCA, I wandered into their resale shop next door. I found this small cocktail shaker. It's only slightly magnetic (some steel alloy), but it had all the requisite features: 1) overlapping cap and body and 2) good friction fitted parts.
Trying the 2 feet from the car experiment, the doors will not unlock with this one. So this is a possibility for those looking for ideas for inside home faraday cages.
Plus, if you want to mix up a Dry Manhattan, Up with an Olive...
Last edited by DFWdude; 12-13-2019 at 03:32 PM.
The following users liked this post:
pierrejoliat (01-30-2020)
The following users liked this post:
pierrejoliat (01-30-2020)
#46
MBWorld Fanatic!
Joined: Jan 2009
Posts: 9,122
Likes: 1,753
From: V E G A S
1922 Ford Model T / no OBD
Try to lock your car by touching inner handle and immediately open it by touching outside of handle.
Depends on the timing you will notice few seconds delay. That will give you idea about pinging intervals.
#47
Thread Starter
MBWorld Fanatic!
Joined: Apr 2006
Posts: 4,654
Likes: 1,760
From: Dallas-Ft.Worth,TX
2016 E350 Sport
Wife got these to give to my daughter for Christmas. That's good, because they don't work with my car.
Simply doesn't seal well enough to pass the "stand next to car and unlock" test...
Simply doesn't seal well enough to pass the "stand next to car and unlock" test...
#48
Great thread and thanks to you all for your testing! Our '13 is keyless go and fwiw, I tested the double click on the FOB's remote just now. Car has been sitting in the garage, unlocked, for 5 days; double click on each FOB lock button inside house and approx. 20' from car. Went to garage and found car was locked. Touched inside handle and car unlocked. Double click didn't work for my MY keyless go.
But I will look into a signal blocking pouch (or a newer car?!). Not all that worried about theft from home, was more interested in making FOB batteries last longer, which it sounds like isn't possible, no mater what I do with them... :-/
But I will look into a signal blocking pouch (or a newer car?!). Not all that worried about theft from home, was more interested in making FOB batteries last longer, which it sounds like isn't possible, no mater what I do with them... :-/
#49
MBWorld Fanatic!
Joined: May 2012
Posts: 1,992
Likes: 1,172
From: Pepper Pike Ohio
12 E350 4Matic 13 E350 4Matic AMG Sport
DFW, I have the 12 w/o and the 13 with, 12 takes a much thicker 2032, 13 takes skinny 2025, it has keyless go.
Also after all your experiments with faraday cages, I started thinking, always a problem. I remembered when I had two EZ Passes in the car and was getting charged on both as I went through toll booths, they sent me two small matallized plastic bags to put the EZ Pass in when not in use, when I put my key in the bag my 13 does nothing even with the key inches from the drivers door handle!
Also after all your experiments with faraday cages, I started thinking, always a problem. I remembered when I had two EZ Passes in the car and was getting charged on both as I went through toll booths, they sent me two small matallized plastic bags to put the EZ Pass in when not in use, when I put my key in the bag my 13 does nothing even with the key inches from the drivers door handle!