MegaCode to facility gates

Presented at 31C3 (2014), Dec. 29, 2014, 10:45 p.m. (30 minutes)

How do garage gate remotes work? It turns out the ones from MegaCode simply send a individual fixed code. And with little efforts if was possibly to clone them, send arbitrary codes, and record them all. Garage gate remotes are not particularly well known for their security. And cloning them generally isn't a difficult task. The MegaCode system from Linear LLC is no exception to it. It did not take long to find out each remote sends a unique but fixed code over the radio interface. The rest was straight forward: record the signal using a Software Defined Radio, decode the signal, modify another remote to send this code, modify a receiver to collect even more codes, and record even more codes. In this talk I will show how this simple system was reverse engineered. If you always wanted to play with software defined radio, electronics, micro-controllers, or solder components but you had no idea where to start, or thought that it would be to complicated because these are unknown grounds, this should motivate you. The tools and techniques are accessible for newcomers and should motivate you to also start playing with hardware.

Presenters:

  • Kévin Redon
    I mainly played with mobile telecommunication security. And in my free time I do electronics as amateur.

Links:

Similar Presentations: