this post was submitted on 11 Feb 2024
266 points (100.0% liked)

Technology

67825 readers
4774 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

The Canadian government plans to ban the Flipper Zero and similar devices after tagging them as tools thieves can use to steal cars.

all 50 comments
sorted by: hot top controversial new old
[–] [email protected] 166 points 1 year ago (1 children)

"Flipper Zero can't be used to hijack any car, specifically the ones produced after the 1990s, since their security systems have rolling codes," Flipper Devices COO Alex Kulagin told BleepingComputer.

"Also, it'd require actively blocking the signal from the owner to catch the original signal, which Flipper Zero's hardware is incapable of doing.

Just politicians trying to appear to be doing something so they can keep their jobs.

[–] [email protected] 5 points 1 year ago* (last edited 1 year ago) (4 children)

Yes, but even if the base model hardware is incapable of doing something, someone savvy enough could modify it. It's the same logic they use to ban AR-15s in some states in the US. By default, all civilian ARs are built to fire in semi-auto only, BUT, a knowledgeable individual can make it fire in full auto if they drill a hole in the lower receiver in just the right spot.

Edit: Okay, I'm getting roasted for pointing out that no system is 100% secure against malicious actors? Perhaps you're missing my point that I disagree with banning Flipper Zero and fully believe it's Canadian politicians looking like they're doing something, regardless of whether or not it will actually work.

[–] [email protected] 7 points 1 year ago

Yes, but even if the base model hardware is incapable of doing something, someone savvy enough could modify it.

Which negate the whole point of the discussion.

If someone can modify it, the same someone does not need it.

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago)

Good point in general, but, what they're specifically talking about here (rolling codes), perhaps what they should have said is that no one can (feasibly) do it, not just that their hardware isn't capable.

Edit: Oh, for the blocking signal, that part might be functionality that could be added, I see what I think you're saying there. Still, that would be a step towards it, but it would still require serious hardware to crack a private key, as I understand.

load more comments (1 replies)
[–] [email protected] 83 points 1 year ago (1 children)

I bet that car thieves also wear shoes, do something about it!

[–] [email protected] 32 points 1 year ago (2 children)

They probably also drink water

[–] [email protected] 21 points 1 year ago* (last edited 1 year ago)

Dihydrogen monoxide?

Monoxide means one oxygen which means free radical, which is basically what car thieves are too. So you're right, clearly all this wanton consumption of this chemical must be stopped.

[–] [email protected] 15 points 1 year ago

And drive cars!!

[–] [email protected] 56 points 1 year ago (1 children)

Lmao how are they gonna word that bill? Sorry guys, if you play with electronics you're a hacker!

[–] [email protected] 12 points 1 year ago (1 children)
[–] [email protected] 10 points 1 year ago (2 children)
[–] [email protected] 5 points 1 year ago (1 children)
[–] [email protected] 8 points 1 year ago* (last edited 1 year ago)

It seems he’s…

(•_•)

( •_•)>⌐■-■

(⌐■_■)

unreachable.

[–] [email protected] 2 points 1 year ago

That's odd, I can see them.

[–] [email protected] 27 points 1 year ago (1 children)

So many reposts in this community...

[–] [email protected] 20 points 1 year ago

hell yea holy shit, i must have read this same headline at least 10 times now

[–] [email protected] 23 points 1 year ago (1 children)
[–] [email protected] 1 points 1 year ago (2 children)
[–] [email protected] 3 points 1 year ago

Laughs in MAIDS.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

We're not keeping that advantage for long. Conservative provincial governments all over Canada are working to turn our healthcare into the privatized US system, and they're about to have allies in the federal government.

[–] [email protected] 18 points 1 year ago

If you can steal a car with a Flipper Zero, then this is definitely not the fault of the Flipper Zero.

[–] [email protected] 15 points 1 year ago (1 children)

Jfc, politicians are idiots.

[–] [email protected] 3 points 1 year ago

Yea, I got a drawer full of various programmable boards, I guess I'll go straight to jail.

[–] [email protected] 14 points 1 year ago

Solving the problem forever!

[–] [email protected] 6 points 1 year ago (4 children)

I saw this on Mastodon the other day and started digging into it. Seems like a really cool project although the chip they used appears inferior to the ESP32? I found a few similar projects based on the ESP32 but they seem to be limited to wifi/bluetooth captures only with the possibility of other options if you swap out the firmware. This makes me question why the ESP32 with 4MB of flash cannot do much more than the Flipper Zero with its 1MB of flash and a CPU that runs at 1/3 the speed (or less) and only a single core? Anyone have some ideas, and/or have seen other open projects based on the ESP32 that do all and more that the Flipper Zero can do?

[–] [email protected] 21 points 1 year ago (1 children)

You're comparing a microcontroller to a purpose built device. Its apples and oranges.

There are add ons to the flipper that incoporate an esp running maurader firmware for wifi tools

[–] [email protected] 2 points 1 year ago (1 children)

Yeah I saw there was the add-on board for wifi testing, but it seemed like this plugs in externally and isn't a normal part of the toolkit? So if the Flipper itself isn't performing the wifi test then I guess I don't see why the ESP32 couldn't just add in everything else the Flipper does? All the other hardware I saw, for IR, NFC, RFID, and one-wire connections... that could all easily also be added to the ESP32 with pins to spare, so what am I missing?

[–] [email protected] 3 points 1 year ago (1 children)

…the same reason you don’t see Sony releasing every PS5 with a dev board. Of course you can extend the ESP32 or whatever microcontroller to do anything the Flipper can. That’s obvious. Go search around on GitHub there are thousands of projects you can do with the ESP32 that will have the FBI making a personal visit to your house. The whole point of the Flipper is it’s turnkey and makes it easy for people that are less skilled or don’t have the patience to do all that.

[–] [email protected] 1 points 1 year ago

Gotcha. Yeah I have plenty of experience with getting circuit boards made and even working with SMD parts (actually working on some boards right now) so I tend to forget that not everybody just has this stuff lying around. Maybe the hardware is the limitation preventing a lot of ESP-based clones of flipper from being available out there.

[–] [email protected] 4 points 1 year ago

Meshtastic commes to mind, it allows you to set up an offgrid communications network that can mesh with other devices and allow you to send messages through the netork.

[–] [email protected] 2 points 1 year ago (1 children)

Probably just a matter of writing the right firmware and building the right hardware. I don’t think anything is stopping you from doing that.

The problem with microcontrollers is that code isn’t easily portable, so this device is stuck with its hardware.

[–] [email protected] 2 points 1 year ago

Yeah I wasn't too concerned about the hardware side of things, I was just curious about finding software because I don't really know anything about pentesting. Guess I'll keep looking around.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

The ESP32s are nice chips, but the STM32s are also really nice to work with and will work fine for this task. Changing to an ESP32 wouldn't make any real difference to the user so the choice is moot really.

I've designed products around both CPUs and they're both pretty nice. The STM32 has somewhat better documentation, has cleaner low power modes and is a bit simpler when delving into the nitty gritty details. The ESP is more powerful and has some nice if complex features but I don't like its low power handling as much.

Overall I think I'd choose the STM32 for this task since it's a little easier to make small, battery powered devices with it.

[–] [email protected] 1 points 1 year ago (1 children)

From the limited reading I've done on the subject, it seemed like a lot of power in the Flipper was based around wireless testing (both wifi and bluetooth) although I also saw a number of things based around other bands. I guess I'm just not following why this was considered an add-on when the ESP32 has all that stuff built in already (and you can certainly shut down the radios to save power when you're not using them)? Plus it also includes native support for other popular busses like I2C, I2S, and CAN so it seems like it could be useful for sniffing out what's attached to a lot of different types of connections. Maybe I'm just straying outside the realm of basic pentesting, the idea just caught my attention about how handy it might be to have a small device that could work with a lot of different types of electronics.

[–] [email protected] 1 points 1 year ago (1 children)

The STM32WB55 in the flipper has a versatile wireless peripheral built in which can be used to implement various protocols including Bluetooth, zigbee, etc.. Support for I2C, I2S and CAN is pretty standard stuff - the ESP32 is nothing special in these respects.

Maybe they chose the STM32WB55 because its wireless support is more flexible than the ESP32 and allows them to implement a wider variety of protocols? Or possibly just better documented, giving them the chance to do things they can't on the ESP32? I haven't compared the inner workings of the two chips' wireless support so I can't say for sure.

[–] [email protected] 1 points 1 year ago

Hmm interesting. I'll have to dig more into this chip to see what it's about. I know the ESP32 is usually avoided when battery life is a high consideration, I haven't really played around with anything other than a few ardunos and the ESP8266 so I don't have much to compare it with. I guess I've just seen so many projects where someone tagged on an ESP chip to an arduino project just to get wireless capabilities with no understanding that the ESP series is quite a lot more powerful than the arduinos (some people I've talked to literally had no idea the ESP chips were programmable microcontrollers) so it's easy to jump the gun and assume that's what is happening in other projects also.