CTR alarm?

[cyirush]

Already posted that I had my ‘25 Boost Blue CTR stolen this morning in Long Beach (plate 9USW261).

Filed a police report but not holding out much hope.

What I’m curious about is how they did it?
There is shattered glass on the driveway so they broke a window to get in.

But why didn’t the alarm go off? Or is there only a factory immobilizer?

Wonder if they just put it in neutral and pushed it away? Or did they start it using the OBD port?

Sponsored

 

[Chilly613]

These cars do not come with a factory alarm, its a keyless entry system. Its usually the dealers themselves that offer 3rd party alarms like KARR, do not buy KARR. There is an immobilizer, but it only would go off it they did something to trip it, like use an incorrectly coded key fob. Thieves today are more high tech and use a scan tool, they delete your key fobs from the car's system. They can also wirelessly scan for your key fobs, copy and make their own and drive away with your car like it was nothing. I've seen different videos where they've stolen a Type S and Type R in under a minute.

 

[I♥️LCY]

did you have the auto arm/disarm feature enabled?

From what I've watched in theft prevention, this is one easy way to gain access. IIRC, there are two settings available in the audio console. One is the auto arm, the other is a key sense. I don't know the precise terminology used, as I'm away from the vehicle.

auto = unlock and lock on its own (proximity)
key sense = driver input (key and input present)

 

[cyirush]

I’m still confused why they would break the glass (old school)?

And, if the car has an alarm
why didn’t it go off when they shattered the glass?

 

[Chilly613]

I’m still confused why they would break the glass (old school)?

And, if the car has an alarm
why didn’t it go off when they shattered the glass?

Driving around in a car without the driver window just looks like you're driving around with the window down, less conspicuous than a broken door handle.

What @ILCY described is still just part of the keyless entry system, there are no sensors to trigger a conventional alarm. The only alarm you possibly may have had would be dealer installed and you'd have to pay the whatever thousands of dollars to have it activated, even then those 3rd party dealer alarms are junk and can easily be defeated.

 

[zumbooruk]

I used to leave my windows down when I parked in my garage to get rid of the "new car smell". I am fairly sensitive to chemicals out-gassing.

I keep the key at home in a Faraday's pouch

The few times I reached in and opened the door, the horn sounded, and I had to get the key to stop the horn. BTW, I still need to install my dual Hella horns, but I am a bit intimidated by removing the front fascia

I am not sure if you'd call that an "alarm".

Yet it will not sound if the window is broken since there are no glass break sensors.

I believe in multi-layer defense to prevent drive-away in the first place

I installed Ravelco anti-theft system, since I did not like Igla (multiple reasons). though most people like the Igla. Igla with the optional OBD block is indeed one of the best if not the best system out there.

I also have a physical OBD port lock that latches onto the port

I am considering interrupting the OBD diagnostic pair (CAN-H and CAN-L pins 6 and 14), hidden switch powered by an add-a-circuit tap, that will energize a signal relay (such as G6K-2P-DC12) that will close these two lines. yet it will not prevent other CAN injection attacks. and probably beyond my electronics skills...

Other DIY methods include a hidden switch inline with the clutch pedal interlock, and similar hidden switch for the starter (STRQ start-signal interrupt)

You might also want to consider a steering wheel to brake pedal lock. or this (out of stock for now)

https://autolock.com/products/autolock-pro-model-1640

As far as flatbed or tow trucks, repo men can repo a car in a few seconds (if you cannot park in a secure location), so the only way is tracking after the fact

However, GPS and cellular signals are easily jammed by cheap jammers

A tilt sensor might alert you, assuming they have not yet jammed the frequencies

I believe that the best way to track are several Air Tags. some well hidden with speakers cut out. one not so well hidden with speaker intact.

 

[blueroadster]

did you have the auto arm/disarm feature enabled?

From what I've watched in theft prevention, this is one easy way to gain access. IIRC, there are two settings available in the audio console. One is the auto arm, the other is a key sense. I don't know the precise terminology used, as I'm away from the vehicle.

auto = unlock and lock on its own (proximity)
key sense = driver input (key and input present)

Fob auto/proximity sensing is easier to disable by simply disconnecting one harness clip. No need to rely on software to enable/disable the functionality. As a result, you would just have to go back to pushing buttons on the fob itself to lock/unlock the doors.

That said, theft rekeying via the unencrypted OBD communications port is still a problem as with any other car.

 

[cyirush]

Thanks, all, for the thoughtful replies.

How much protection does a physical lock on the OBD port give?

Is there any way to start it without accessing the port? I am assuming they are not using a re-programmed key fob which presumably would mean you get in and drive away.

 

[zumbooruk]

Fob auto/proximity sensing is easier to disable by simply disconnecting one harness clip. No need to rely on software to enable/disable the functionality. As a result, you would just have to go back to pushing buttons on the fob itself to lock/unlock the doors.

That said, theft rekeying via the unencrypted OBD communications port is still a problem as with any other car.

If I recall correctly from when I did my original research, passive proximity (relay attack) is very easy for the bad guys.

But it is also very easy to block the attack by using a Faraday's pouch

However you cannot block the active RF from a button press, and it is fairly easy for the bad guys to capture the active RF (even with rolling codes, they can use so called Roll Back attack)

Which is why I rarely, if ever, use the keys on the remote, I always keep the key in the pouch (home or pocket when I run errands), and only take it out once I am near the car.

 

[zumbooruk]

Thanks, all, for the thoughtful replies.

How much protection does a physical lock on the OBD port give?

Is there any way to start it without accessing the port? I am assuming they are not using a re-programmed key fob which presumably would mean you get in and drive away.

depends on the lock type.

most locks use "security" screws that can be defeated

some locks use key cylinder, which can be picked

some use regular screws which are protected by a cover which is locked (and can be picked)

I have the Ravelco anti-theft system, which will prevent starting the car even if they manage to clone the key, so I have a physical lock that has a key cylinder. will at least slow them down.

https://www.amazon.com/bbfly-K02-Locking-Protector-Device-K02-dp-B0FFBRFY29/dp/B0FFBRFY29

on the other hand, Ravelco does not disable the OBD port, which is why I considered interrupting the OBD diagnostic pair (CAN-H and CAN-L pins 6 and 14)

and on the third hand, the bad guys do not have to use the OBD port to access the CAN bus

 

[Clark_Kent]

There is a factory alarm and immobilizer on the FL5. The question is: what are the limitations of the factory alarm and immobilizer? There are no digital or shock sensors or any other advanced gadgetry found on aftermarket systems like the Compustar or Viper. The factory alarm only provides some coverage, albeit weak, for your garden variety smash and grab. But a broken window will not trigger the factory alarm. The OEM security system is principally concerned with monitored openings and vehicle authorization. There are many permutations that could result in a glass break and stolen car scenario where the factory alarm isn't triggered.

 

[I♥️LCY]

wait...so, it's as easy as popping the door lock and they're gone? Because clearly no sound, nor alert, is being made nor heard (speculatively). Preemptively are they disarming security features, which does NOT unlock the vehicle, pop the lock, and vroom they're off in under a minute?

 

[zumbooruk]

wait...so, it's as easy as popping the door lock and they're gone? Because clearly no sound, nor alert, is being made nor heard (speculatively). Preemptively are they disarming security features, which does NOT unlock the vehicle, pop the lock, and vroom they're off in under a minute?

A relay attack (where they have two devices, one near your home, one near the car) will relay the key fob passive signal to the car. They get in and drive away in about 30 second. no need to break windows, or damage the lock. the car "senses" the relay as if it was the real key fob.

Defense is to keep key fob in a good triple layer Faraday's pouch, and test the pouch every so often (key fob inside, near the door, attempt to unlock)

Another vector is to force open the door, or smash the window, then attach a scan tool to an unprotected OBD port and program a blank key fob. the car will recognize the newly programmed key fob as a "real" key fob.

Defense is to physically lock the OBD port (which will probably only slow them down),

A variation on the above is to gain access to the CAN bus through other means, such as lights etc, and program a blank key fob.

No direct defense.

Indirect defenses are DIY clutch pedal interlock and starter (STRQ start-signal interrupt) hidden switches, commercial kill switch, Ravelco anti-theft system, IGLA plus their optional OBD port block.

also physical locks such as steering wheel lock, brake pedal lock, etc.

Next up is flatbed or tow truck.

No direct defense, and might not be able to track. GPS/Cellular signals will probably be jammed. Multiple Air Tags might work to track. A tilt sensor with notification sent before a signal is jammed (though highly unlikely for an organized crime crew) might at least alert you.

forgot to mention, Compustar alarm (or similar) with tilt and glass break sensors and high decibel horn(s), though most people might ignore the alarm, but if parked in your driveway, might at least alert you.

I do not recommend confronting a professional crew, even if you are pew pew proficient.

Best defense is not to park outside at night, if possible. Or install bollards on your driveway as at least one person did.

 

[I♥️LCY]

I read, op, maybe another thread, had the door lock punched out/popped. How that happens without the alarm sounding, is what I was hypothesizing.

 

[zumbooruk]

I read, op, maybe another thread, had the door lock punched out/popped. How that happens without the alarm sounding, is what I was hypothesizing.

I believe OP had glass broken. OEM alarm will not detect broken glass.

There is shattered glass on the driveway so they broke a window to get in.

Others had door lock busted. but OEM horn is wimpy and most people will ignore these anyways

Sponsored