Surely the car manufacturers must share some responsibility here? It's not like they weren't forewarned about the security issues with keyless systems by academic security research.
In the UK basically what happened was that Range Rovers became literally uninsurable in London, so I guess it started finally hurting their bottom line and they had to do something about it - JLR announced a program for free security improvements for owners(including replacing the entire keyless system for a more modern one) as well as their own insurance offering so that owners could actually continue driving the cars they bought.
So as always, car manufacturers are willing to do something about it if it starts hurting them financially. I'm surprised the same thing isn't happening here - how are people on Toronto getting their cars insured if theft is so rampant?
It's truly bizarre how pro-crime you'd have to be to allow this to continue, but it seems like a common position in some western countries. People will try to blame literally any other part of a formerly high trust society (the owners, the car manufacturers, etc) before coming down on the criminals. A concerted team of less than 50 people with a budget for costumes and a couple cars and surveillance tech should be able to put an end to most of it.
This is one of the most interesting parts:
> But the police in Ottawa stumbled on it when an officer noticed a Range Rover being backed into a shipping container on a rural property. A second car in the container was Mr. Elworthy’s Ferrari.
> “I was absolutely ecstatic when I got the call from that officer,” he said. “I was literally jumping up and down.”
What happened to the shipping container? Who owned the rural property? Who was working with that person? Where was the shipping container going? Did they catch more than one person in this operation or what?
Some DA's are absolutely pro crime and you find out its the same small number of ppl stealing cars and getting released after charges are dropped or reduced after they've gotten caught.
That's some answers. It's surprising that the NYtimes article didn't at least say they ultimately arrested 11 people and recovered almost 100 vehicles. Though it's also surprising they don't give an idea of the scale, either (over 11,000 carjackings a year, not mentioned in either article).
It's good they finally, in one city (Montreal has a similar problem), caught a theft ring. But this success just highlights the lack of action against crime that has scaled up to a business.
Bicycle theft at scale - easy to find on Craigslist in any college town, corrupt ramp employees at airports steal from checked bags, etc. This stuff is obvious. Yet it goes on and on.
Are police resources unbalanced and if a patrol cop can't bluster his way to an arrest it just doesn't happen? Are cops themselves too corrupt and afraid that overtime and detail fraud would start being investigated? What keeps economically significant crime in business?
> What happened to the shipping container? Who owned the rural property? Where was the shipping container going?
Everyone's going to feign ignorance. The container owner will say they didn't realize the container had been stolen from their property, or they rented it to someone who's responsible for whatever they do with it.
The property owner will say they didn't give anyone permission to put a container there, or that they rented it to someone else.
The destination can be just a port, and a moving company can be hired to pick up the container from the port.
(Source: my spouse shipped a lot of stuff from China, and I was horrified at how little security and documentation was involved. I can see how cars cross borders so easily.)
I don't have access to the article, but what makes them so pro-crime?
You may be over simplifying things. If you set up some bait cars and catch some thieves, they will probably just be replaced with other low level men. This is likely organized crime so the leaders aren't out there prowling the neighbourhoods. As for the rural property, it might not even be theirs. It could just be any rural property. Ontario, being the most populous of Canadian provinces is still very sparsely populated. A short drive from most big cities can put you in a rural area where owners haven't visited a property in decades.
> If you set up some bait cars and catch some thieves, they will probably just be replaced with other low level men
This is a maddening learned helplessness. In some cities the majority of crime is done by less than 100 people. You can find dozens of examples of this, eg purse thefts in the 90's being one person, or 90% of bike theft being attributed to 11 people. Both anecdotes: https://twitter.com/AnechoicMedia_/status/176177303735813354...
Claiming that new people will magically spring up to take their place is nonsensical, so long as the punishment is not letting them go 5 hours later, as it is in some cities. There is no reason to believe that prosecuting crime will not lower crime and it is fabulous to believe that.
"If you set up some bait cars and catch some thieves, they will probably just be replaced with other low level men"
Put them in prison for 10 years first offense. 2nd offence, 15 years and so on. Eventually you run out of people willing to spend decades of their lives in prison to steal a CRV. Set bail at $15k.
I'm putting my tinfoil hat on but this is my theory as an American.
Post 9/11, the Western world became obsessive over a sense of security and we've accepted it as a fact of life. To the point where we accept the TSA at airports without complaint, we accept nationwide surveillance, we operate on the internet with an innate understanding that "someone" at the government is watching everything we're doing. We accept these because we've been conditioned to believe that these tactics keep us safe.
As a lot of the population grows up and never experienced a pre-9/11 world, the government, police unions, etc have to ensure that these overbearing "security" tactics have a reason. Therefore, we highlight these "in your city" local crimes to provide validation for what they're doing.
> Therefore, we highlight these "in your city" local crimes to provide validation for what they're doing.
Except time and again they seem
To only be highlighting their own ineptitude at keeping anyone safe. Their budgets keep increasing yet it doesn’t seem to lead to any measurable improvement in KPIs.
That's the whole point. "We position police as arbiters of peace and safety and they need our support and more money to defeat the evildoers of our great city!"
We do the same with the American military and you'd get called a commie leftist Anti-American snowflake if you even breathe a word about reducing the military budget, even though this 40+ year "Way On Terror" seems like a dud.
So, KPI wise you can make an argument that it is effective. I may not agree with that argument in that we (USA) spend a lot of money and impose a lot of restrictions on the general population to get there.
Crime has always been a "the sky is falling" kind of a thing even if it's literally one crime. We are more safe than we were in 2001 by any objective measure, whether or not that is "safe enough" is going to be different for everyone...
This results in a unique combination of oppressive policing and incompetence at dealing with any crime that requires investigation. Police don't follow the fiction of police procedurals, they wander around blindly looking for "suspicious" people or rifling through people's stuff.
That is, by public service terms, staggeringly expensive.
Another hidden variable in this is police competence. There's a naive assumption that more budget will give better results, but in practice it turns out that there is a lot of basic sloppiness and indifference to "petty" crime. Usually bicycles, not whole cars.
I thought modern cars all had built-in immobilisers and chips in the keys?
A few years back I was reading reports saying that car theft had dropped substantially as it was nigh-impossible to move a car without the key, to the point thieves were even resorting to breaking into homes to get the car keys.
Well it got very easy to do for a while with the early keyless tech, then it got very hard or impossible again recently with the advent of certain tech. In particular the "relay" attacks are now impossible with the advent of UWB tech in keys as Time of Flight response can be measured accurately enough that a relay won't work. Some of it got better with some really brain dead improvement to security - like just making the keys sleep and not respond to commands if they haven't been moved for more than 10 seconds, that alone eliminated the entire model of stealing cars from people's driveways by just using a relay with a key inside the house.
Unfortunately thieves always seem to be a step ahead and figure out things like location of CAN buses to connect diagnostic equipment and clone keys that way, that's why you sometimes hear about cars with ripped out headlamps because there is a CAN bus connector behind them.
Different car manufacturers have different levels of security. Plus, thieves these days are not (mostly) breaking the security of the keys, they are getting control of the CAN bus.
Meanwhile, I can't get a spare key fob for my 11 year-old Prius without paying the dealership $524.66.
"FBI data from 2017 showed that of the 20 biggest cities in the United States, San Francisco had the highest rate of property crimes per capita"
"Walgreens could argue that the level of retail theft in San Francisco remains so high that year-over-year decreases are not moving the needle and operating in San Francisco remains unprofitable"
another link in the article: SF ranks high in property crime while it ranks low in arrests
Cashless bail, dead neighborhoods, and an overwhelmed law enforcement system have led to this. The barrier to be arrested and held with even cash bail, let alone without bail, is startlingly high.
Cops are the biggest or second biggest line item in most municipalities. It is more likely a problem of misallocation where crime that is actually economically significant gets short shrift because cops stay busy with activities that don't have a positive effect.
A massive car theft ring isn't "lower level crime." That's the problem. Cops seem to have a difficult time identifying crime that scaled up in a way that matters.
I think part of the problem is that you can't properly contextualize the issue without badmouthing police.
Most police, like most people, are good and want to do good. The US (and likely many other countries) is being plagued by activist DAs who see letting crime slide as a form of restorative justice.
In many PDs, "most" is debatable. Do a quick experiment: in how many cases of police misconduct did the other cops in the PD with together to remove a miscreant among them, compared with the cases of cover-up, collusion, delay, denial, etc.? Do a search. What's the prevalent case?
Toronto cops are this weird combination of expensive and ineffective. Hell, you can literally murder a billionaire in his own home and the Toronto cops are stumped.
I mean, yes, obviously yes. Even ignoring fully keyless solutions, having a remote key is a massive quality of life improvement, I can't imagine going back to a car where you have to put the key in the door. And just having a remote key is not really a security risk, the problem starts with keyless-start systems, but even those have been mostly resolved now with most recent tech.
I travel a lot for work and drive a lot of rentals with giant fobs and keyless start. It's just not that great. The fobs are bulky and heavy. My pants pockets are neither baggy nor tight, but the fob is more bulky and awkward than my wallet or phone, and doesn't fit a pocket with either. You still have to handle it, the fob just goes in a cupholder instead of into the receiver in the steering column, and you start by pushing a button instead of turning a key. I just don't perceive any advantage to a remote. Many rentals get a bulky cable with the valet key and the fob and the rental tag, but you have to disassemble the door handle and remove the plastic cover clip thing to insert the key, and
I miss my 2003 Vibe back home, with the simple, flat, light, mechanical key. Insert and turn to unlock. That, a house key, and a Tile or Airtag fit on a split ring in a pocket next to my wallet and weigh less than 40g. My bag has a big ring with all the other keys that one accumulates, but I really, really value being able to travel light.
When do you find value in the ability to lock or unlock the car from a distance? If it's unlocked and you want to lock it, just lock it instead of walking 30 feet away and then trying to lock it. If you are going back to the car and want to unlock it, wait 10 seconds until your hand is at the door handle and then unlock it.
If you live a cold place, then remote start is amazing. You wake up in the morning and your car is covered in ice and frost. You press a button while you have your coffee and the car starts and heats up melting most of it before you even put your shoes on.
>>When do you find value in the ability to lock or unlock the car from a distance?
My kid/wife is going to the car, I can unlock the car for them. Or I'm going to carry something from home to the car, I can unlock it first, put the key in my pocket then go to the car directly without having to fumble with the keys.
>>The fobs are bulky and heavy.
Interesting, but that's not my experience. Both my Mercedes and Volvo keyless fobs were smaller in size than my current VW keyfob(which is not keyless and has to be inserted in the ignition). I have seen the BMW abomination of a key though and yeah, that is unnecessarily big.
>>u still have to handle it, the fob just goes in a cupholder instead of into the receiver in the steering column
Uhm, no? Just keep it in your pocket or purse, why would you need to put it in a cupholder? That's the entire point of it - you just keep it on your person somewhere and the car "just" starts.
And in general with fully keyless fobs my key just lives in the pocket of my jeans - so as long as I'm wearing them I can open and start my car, I don't ever need to actually handle the key at all. I go to the car, grab the handle and it magically opens. I hop in, press a button and the car starts. I leave the car and touch the handle and the car closes. I suppose that's mechanically somewhat similar to putting the key into the lock, but so much simpler and takes less time.
>>I miss my 2003 Vibe back home, with the simple, flat, light, mechanical key.
Oh I miss the key for my 1995 Fiat Cinquecento too, that was very nice and small and straightforward. But what made keys big was the immobilizer, not remote control.
Rentals are a bit of a worst case there, too, because you don't have reason to adjust to the bulk and live with it.
Also, depending on car company some of the bulk is hiding last resort physical keys and/or just over-compensating and thinking their brand "needs" big heavy keys as a marketing choice. There's not always a lot of reason that they need to be that much bigger than a Tile or Airtag, the raw electronics are generally really similar.
Additionally, if it was a personal car, some of them even support using just about any major bluetooth-capable phone (or watch) as a remote and you might not even need the extra bulk of a key beyond your additional wearables. That's really tough for rental cars to support, but a great advantage of modern personal cars as the software improves. (Though with the number of hotel chains that have been moving to keys that work on personal phones, I wouldn't be surprised if rental car companies weren't at least investigating the idea of improving those key flows.)
The advantages of physical keys are less numerous than you may think. The skill floor necessary to pick a physical lock is higher but the skill ceiling to pick "any" physical lock is a lot lower than the skill ceiling to pick "any" properly engineered digital locks.
Of course proper engineering is hard and the skill floor will possibly always the dominant thing in news cycles because of the ability to automate the breaks that makes the skill floor really stupidly low. It's a brand new age of "amateur thieves". What won't make as much news is that skill ceiling raise that comes with it and something of the end of an age of "professional thieves". (The final retirements of some of the "Pink Panther" classes of criminals.)
To be fair, some of that fear from such news is perfectly valid. Few of us are likely to be intentionally targeted by professional thieves, but many of us could easily be the accidental targets of amateurs.
The fact that modern cars can be stolen at all is ridiculous. Hanlon's Razor only goes so far; this has to be malice either on the part of the car companies (because every theft results in a new sale) or the insurance companies getting a kickback from the thieves.
The solution is regulatory penalties and/or higher insurance premiums that have to be paid by the manufacturer until their cars are certified by something like the UL as having their security systems designed by somebody who went to college.
But of course what will happen is the politicians will ban Flipper Zero and call the job done.
> Whenever Dennis Wilson wants to take a drive in his new SUV, he has to set aside an extra 15 minutes. That’s about how long it takes to remove the car’s steering wheel club, undo four tire locks and lower a yellow bollard before backing out of his driveway.
At that point, why not just disconnect the spark plugs or wire up an electric switch into the starter motor/fuel pump cabling.
No way those thieves pop the hood and troubleshoot your car for 15 minutes if it doesn't start.
People really treat their cars like magic boxes. And if some wizard has the key to the magic box, their first thought is to build a wall around it...
I wonder how many people in 2024 don't know what a spark plug is, or how their car works at all. I don't mean that in a snarky way, it just seems like increasingly people treat modern technology like magic rather than something that does a thing easier than if you tried to do it manually.
Makes me appreciate the Amish perspective on technology [0] more the older I get.
56 comments
[ 5.7 ms ] story [ 38.0 ms ] threadSo as always, car manufacturers are willing to do something about it if it starts hurting them financially. I'm surprised the same thing isn't happening here - how are people on Toronto getting their cars insured if theft is so rampant?
This is one of the most interesting parts:
> But the police in Ottawa stumbled on it when an officer noticed a Range Rover being backed into a shipping container on a rural property. A second car in the container was Mr. Elworthy’s Ferrari.
> “I was absolutely ecstatic when I got the call from that officer,” he said. “I was literally jumping up and down.”
What happened to the shipping container? Who owned the rural property? Who was working with that person? Where was the shipping container going? Did they catch more than one person in this operation or what?
https://www.thestar.com/news/crime/project-mamba-york-police...
Bicycle theft at scale - easy to find on Craigslist in any college town, corrupt ramp employees at airports steal from checked bags, etc. This stuff is obvious. Yet it goes on and on.
Are police resources unbalanced and if a patrol cop can't bluster his way to an arrest it just doesn't happen? Are cops themselves too corrupt and afraid that overtime and detail fraud would start being investigated? What keeps economically significant crime in business?
Everyone's going to feign ignorance. The container owner will say they didn't realize the container had been stolen from their property, or they rented it to someone who's responsible for whatever they do with it.
The property owner will say they didn't give anyone permission to put a container there, or that they rented it to someone else.
The destination can be just a port, and a moving company can be hired to pick up the container from the port.
(Source: my spouse shipped a lot of stuff from China, and I was horrified at how little security and documentation was involved. I can see how cars cross borders so easily.)
You may be over simplifying things. If you set up some bait cars and catch some thieves, they will probably just be replaced with other low level men. This is likely organized crime so the leaders aren't out there prowling the neighbourhoods. As for the rural property, it might not even be theirs. It could just be any rural property. Ontario, being the most populous of Canadian provinces is still very sparsely populated. A short drive from most big cities can put you in a rural area where owners haven't visited a property in decades.
This is a maddening learned helplessness. In some cities the majority of crime is done by less than 100 people. You can find dozens of examples of this, eg purse thefts in the 90's being one person, or 90% of bike theft being attributed to 11 people. Both anecdotes: https://twitter.com/AnechoicMedia_/status/176177303735813354...
Claiming that new people will magically spring up to take their place is nonsensical, so long as the punishment is not letting them go 5 hours later, as it is in some cities. There is no reason to believe that prosecuting crime will not lower crime and it is fabulous to believe that.
Put them in prison for 10 years first offense. 2nd offence, 15 years and so on. Eventually you run out of people willing to spend decades of their lives in prison to steal a CRV. Set bail at $15k.
What is currently preventing you from taking up the mantle of car thief? Is it simply that some else is already doing it?
Post 9/11, the Western world became obsessive over a sense of security and we've accepted it as a fact of life. To the point where we accept the TSA at airports without complaint, we accept nationwide surveillance, we operate on the internet with an innate understanding that "someone" at the government is watching everything we're doing. We accept these because we've been conditioned to believe that these tactics keep us safe.
As a lot of the population grows up and never experienced a pre-9/11 world, the government, police unions, etc have to ensure that these overbearing "security" tactics have a reason. Therefore, we highlight these "in your city" local crimes to provide validation for what they're doing.
Except time and again they seem To only be highlighting their own ineptitude at keeping anyone safe. Their budgets keep increasing yet it doesn’t seem to lead to any measurable improvement in KPIs.
We do the same with the American military and you'd get called a commie leftist Anti-American snowflake if you even breathe a word about reducing the military budget, even though this 40+ year "Way On Terror" seems like a dud.
https://www.statista.com/statistics/191219/reported-violent-...
Supisingly, so are motor vehicle thefts. Though, they are on the rise since the pandemic.
https://www.statista.com/statistics/191213/reported-motor-ve...
https://www.statista.com/statistics/191216/reported-motor-ve...
So, KPI wise you can make an argument that it is effective. I may not agree with that argument in that we (USA) spend a lot of money and impose a lot of restrictions on the general population to get there.
Crime has always been a "the sky is falling" kind of a thing even if it's literally one crime. We are more safe than we were in 2001 by any objective measure, whether or not that is "safe enough" is going to be different for everyone...
Is it down because of police action or because of changing demographics?
That is, by public service terms, staggeringly expensive.
Another hidden variable in this is police competence. There's a naive assumption that more budget will give better results, but in practice it turns out that there is a lot of basic sloppiness and indifference to "petty" crime. Usually bicycles, not whole cars.
A few years back I was reading reports saying that car theft had dropped substantially as it was nigh-impossible to move a car without the key, to the point thieves were even resorting to breaking into homes to get the car keys.
These guys should not be stealing cars, they should be selling replacement keys if it's that easy.
Unfortunately thieves always seem to be a step ahead and figure out things like location of CAN buses to connect diagnostic equipment and clone keys that way, that's why you sometimes hear about cars with ripped out headlamps because there is a CAN bus connector behind them.
Meanwhile, I can't get a spare key fob for my 11 year-old Prius without paying the dealership $524.66.
Obviously there's no patterns to be recognized in there. Nothing whatsoever. Move along citizen.
https://www.sfgate.com/bay-area-politics/article/San-Francis...
https://archive.ph/5Qp13
Quotes from the article you posted:
"FBI data from 2017 showed that of the 20 biggest cities in the United States, San Francisco had the highest rate of property crimes per capita"
"Walgreens could argue that the level of retail theft in San Francisco remains so high that year-over-year decreases are not moving the needle and operating in San Francisco remains unprofitable"
another link in the article: SF ranks high in property crime while it ranks low in arrests
https://archive.ph/MJO1C
https://www.kiaownersclub.co.uk/threads/warning-to-kia-owner...
Here is one paper describing how shit is car security
"We discovered that Kia and Hyundai immobiliser keys have only three bytes of entropy"
https://tches.iacr.org/index.php/TCHES/article/view/8546/811...
It literally takes <1 minute to steal the car
https://www.youtube.com/watch?v=PQPMbYUOrwk
Most police, like most people, are good and want to do good. The US (and likely many other countries) is being plagued by activist DAs who see letting crime slide as a form of restorative justice.
The advantages of physically inserting the key in the lock are so numerous.
I travel a lot for work and drive a lot of rentals with giant fobs and keyless start. It's just not that great. The fobs are bulky and heavy. My pants pockets are neither baggy nor tight, but the fob is more bulky and awkward than my wallet or phone, and doesn't fit a pocket with either. You still have to handle it, the fob just goes in a cupholder instead of into the receiver in the steering column, and you start by pushing a button instead of turning a key. I just don't perceive any advantage to a remote. Many rentals get a bulky cable with the valet key and the fob and the rental tag, but you have to disassemble the door handle and remove the plastic cover clip thing to insert the key, and
I miss my 2003 Vibe back home, with the simple, flat, light, mechanical key. Insert and turn to unlock. That, a house key, and a Tile or Airtag fit on a split ring in a pocket next to my wallet and weigh less than 40g. My bag has a big ring with all the other keys that one accumulates, but I really, really value being able to travel light.
When do you find value in the ability to lock or unlock the car from a distance? If it's unlocked and you want to lock it, just lock it instead of walking 30 feet away and then trying to lock it. If you are going back to the car and want to unlock it, wait 10 seconds until your hand is at the door handle and then unlock it.
My kid/wife is going to the car, I can unlock the car for them. Or I'm going to carry something from home to the car, I can unlock it first, put the key in my pocket then go to the car directly without having to fumble with the keys.
>>The fobs are bulky and heavy.
Interesting, but that's not my experience. Both my Mercedes and Volvo keyless fobs were smaller in size than my current VW keyfob(which is not keyless and has to be inserted in the ignition). I have seen the BMW abomination of a key though and yeah, that is unnecessarily big.
>>u still have to handle it, the fob just goes in a cupholder instead of into the receiver in the steering column
Uhm, no? Just keep it in your pocket or purse, why would you need to put it in a cupholder? That's the entire point of it - you just keep it on your person somewhere and the car "just" starts.
And in general with fully keyless fobs my key just lives in the pocket of my jeans - so as long as I'm wearing them I can open and start my car, I don't ever need to actually handle the key at all. I go to the car, grab the handle and it magically opens. I hop in, press a button and the car starts. I leave the car and touch the handle and the car closes. I suppose that's mechanically somewhat similar to putting the key into the lock, but so much simpler and takes less time.
>>I miss my 2003 Vibe back home, with the simple, flat, light, mechanical key.
Oh I miss the key for my 1995 Fiat Cinquecento too, that was very nice and small and straightforward. But what made keys big was the immobilizer, not remote control.
Also, depending on car company some of the bulk is hiding last resort physical keys and/or just over-compensating and thinking their brand "needs" big heavy keys as a marketing choice. There's not always a lot of reason that they need to be that much bigger than a Tile or Airtag, the raw electronics are generally really similar.
Additionally, if it was a personal car, some of them even support using just about any major bluetooth-capable phone (or watch) as a remote and you might not even need the extra bulk of a key beyond your additional wearables. That's really tough for rental cars to support, but a great advantage of modern personal cars as the software improves. (Though with the number of hotel chains that have been moving to keys that work on personal phones, I wouldn't be surprised if rental car companies weren't at least investigating the idea of improving those key flows.)
Of course proper engineering is hard and the skill floor will possibly always the dominant thing in news cycles because of the ability to automate the breaks that makes the skill floor really stupidly low. It's a brand new age of "amateur thieves". What won't make as much news is that skill ceiling raise that comes with it and something of the end of an age of "professional thieves". (The final retirements of some of the "Pink Panther" classes of criminals.)
To be fair, some of that fear from such news is perfectly valid. Few of us are likely to be intentionally targeted by professional thieves, but many of us could easily be the accidental targets of amateurs.
The solution is regulatory penalties and/or higher insurance premiums that have to be paid by the manufacturer until their cars are certified by something like the UL as having their security systems designed by somebody who went to college.
But of course what will happen is the politicians will ban Flipper Zero and call the job done.
At that point, why not just disconnect the spark plugs or wire up an electric switch into the starter motor/fuel pump cabling.
No way those thieves pop the hood and troubleshoot your car for 15 minutes if it doesn't start.
People really treat their cars like magic boxes. And if some wizard has the key to the magic box, their first thought is to build a wall around it...
Makes me appreciate the Amish perspective on technology [0] more the older I get.
[0] https://www.wired.com/story/virtually-amish-hacking-innovati...
Canadian government banning Flipper Zero to combat auto theft
https://news.ycombinator.com/item?id=39308731