The Patching Friars' AlmanacA calendar of CVE saints

July 7

Rolling-PWNHoly card for rolling-pwn, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 R Rolling-PWN CLAVIS HESTERNA
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Rolling-PWN, Who Opened Cars With Yesterday's Code

Patron of wireless keys, rolling codes, and those who think a remote is enough to lock up.

Life

In 2022 researchers Kevin2600 and Wesley Li showed Rolling-PWN: on many Honda cars the rolling codes of the key fobs, meant never to repeat, could be resynchronised by sending several in sequence. Having captured a few legitimate codes, the attacker could reuse them to open the doors, defeating the very replay protection the whole scheme was supposed to guarantee.

Prayer

O Saint Rolling-PWN, who opens doors with yesterday's code, teach our remotes never to accept the same greeting twice. Amen.

How to celebrate

Celebrated by updating the car's firmware when the maker offers it, and guarding the key as people once guarded metal ones.

Yesterday's code, today's open door.

Technical record

Disclosed on
July 7 2022
CVE
CVE-2021-46145
Product
Honda · Keyless entry (rolling codes)

The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is related to a non-expiring rolling code and counter resynchronization.

Sources: rollingpwn.github.io

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.