How to clone a black remote fob .... | Page 4 | FerrariChat

How to clone a black remote fob ....

Discussion in 'Technical Q&A' started by eric355, Dec 15, 2006.

This site may earn a commission from merchant affiliate links, including eBay, Amazon, Skimlinks, and others.

  1. mwr4440

    mwr4440 Five Time F1 World Champ Rossa Subscribed

    Joined:
    Jun 8, 2007
    Messages:
    57,946
    Location:
    Bavaria, The 'Other' Germany
    Full Name:
    Mark W.R.
    All,

    Respectfully if I may, and on a related note. Yep, you can clone electronic stuff usually pretty easily as the thieves here in Europe discovered. They have been using for years a process with a cell phone connected to a Palm Pilot.

    The former Eastern European car thieves are especially adroit. A friend's car (not an F-Car) along with 17 others disappeared within a 30 minute span from a town in the Czech Republic three years ago. He and I had to get the local cops to take us back to the Czech-German border.

    The thieves either find a parked or follow a moving car they want until the owner either unlocks it or locks it via the wireless remote. The slightly modified cell phone and standard Palm catch all the data as the fob passes it to the auto, freq, PIN, the works.

    You can then guess what happens when the owner leaves. Please be carefull when using those things, like never in a crowded parking lot. Use the "hard" key whenever possible.

    I'd hate to see your dream machine "evaporate."

    V/r, MWR4440
     
  2. eric355

    eric355 Formula 3 Silver Subscribed

    Joined:
    Nov 30, 2005
    Messages:
    1,225
    Location:
    Toulouse (France)
    Full Name:
    Eric DECOUX
    That is why rolling code technology is used now. Repeating what has just been transmitted to the car will lead to an alarm trig on the F355. Cracking the key from a single message, with more than 180 bits changing from a message to the other, is extremely difficult ... but certainly not impossible.

    Cloning a remote as i proposed will not endanger the car more than it was with the original remote
     
  3. Dong Juan

    Dong Juan Karting

    Joined:
    Jun 28, 2007
    Messages:
    57
    Location:
    South
    Full Name:
    Dong Juan
    +1 ...........does anyone know what that metal tag code is for???
     
  4. 285ferrari

    285ferrari Two Time F1 World Champ Sponsor

    Joined:
    Sep 11, 2004
    Messages:
    20,958
    Location:
    MD and NE
    Full Name:
    Robbie
    KEY code-----Has nothing to do with the remotes!
     
  5. 285ferrari

    285ferrari Two Time F1 World Champ Sponsor

    Joined:
    Sep 11, 2004
    Messages:
    20,958
    Location:
    MD and NE
    Full Name:
    Robbie
    Bought an extra remote awhile back----just sent out to have it cloned----I'll let you guys no how it goes when I get it back
     
  6. ferraridriver

    ferraridriver F1 Rookie

    Joined:
    Aug 8, 2002
    Messages:
    4,151
    Location:
    Bay Area Calif.
    Full Name:
    Dave
    Anxiously waiting with baited breath.

    Did you have to send the red remote with it?
     
  7. ferraridriver

    ferraridriver F1 Rookie

    Joined:
    Aug 8, 2002
    Messages:
    4,151
    Location:
    Bay Area Calif.
    Full Name:
    Dave
    I feel like such a fool

    I just spent hours searching everywhere in the house for my PIN code card.
    All the files I have on cars in general, and all my drawers to no avail.

    Early on I found a card that said do not lose, had my serial number and the words “Pin Code”, but nothing in the space for a PIN so I kept looking.

    Finally I noticed the card I had found was actually two pieces of paper and on tearing off the top piece there it was. The PIN code!

    I can sleep easy now :) :)
     
  8. 285ferrari

    285ferrari Two Time F1 World Champ Sponsor

    Joined:
    Sep 11, 2004
    Messages:
    20,958
    Location:
    MD and NE
    Full Name:
    Robbie
    No---He is cloning the black with a black..
     
  9. mjw599

    mjw599 Formula Junior BANNED

    Joined:
    Jul 30, 2008
    Messages:
    510
    Location:
    A Chinese Democracy

    Who can clone these Calo?
     
  10. tazandjan

    tazandjan Three Time F1 World Champ Lifetime Rossa Owner

    Joined:
    Jul 19, 2008
    Messages:
    39,163
    Location:
    Clarksville, Tennessee
    Full Name:
    Terry H Phillips
    I have another question for you technical whiz kids out there. I picked up an extra red key fob, naturally without the PIN. Can you figure out what the PIN is from the signal received from the fob? The only time the PIN is actually used is when the ECU is programmed to accept a new set of keys. Otherwise the ECU is just looking for the rolling identifier each fob transmits.

    Taz
    Terry Phillips
     
  11. eric355

    eric355 Formula 3 Silver Subscribed

    Joined:
    Nov 30, 2005
    Messages:
    1,225
    Location:
    Toulouse (France)
    Full Name:
    Eric DECOUX
    I can ... :)
     
  12. eric355

    eric355 Formula 3 Silver Subscribed

    Joined:
    Nov 30, 2005
    Messages:
    1,225
    Location:
    Toulouse (France)
    Full Name:
    Eric DECOUX
    No way! The number of transmitted bits is very important, several hundreds, and more than 180 are different each time you press the remote.
    Even when comparing the contents of a "red" EEPROM and a "black" EEPROM, I have not been able yet to identify the PIN code.
     
  13. 285ferrari

    285ferrari Two Time F1 World Champ Sponsor

    Joined:
    Sep 11, 2004
    Messages:
    20,958
    Location:
    MD and NE
    Full Name:
    Robbie
    YES he can!!!!!!!!!!!!!!! Been 8 months since Eric cloned a black fob for me and it has worked flawlessy!!!!!!!!!!!!!!!!!! Thanks again, Eric!!!!
     
  14. eric355

    eric355 Formula 3 Silver Subscribed

    Joined:
    Nov 30, 2005
    Messages:
    1,225
    Location:
    Toulouse (France)
    Full Name:
    Eric DECOUX
    Thanks Robbie ... it was a pleasure :)
     
  15. saw1998

    saw1998 F1 Veteran

    Joined:
    Jun 8, 2008
    Messages:
    8,237
    Location:
    San Antonio, Texas
    Full Name:
    Scott
    Eric:

    Where were you hiding! I did a search, but could not find anything on-subjected. I didn't think it was possible to "clone" the black fob, due to the rolling code. ...guess you learn something new every day. I just spent $275.00 (on eBay) for a brand new set of three remotes still in the Ricambi bag. I guess not too bad!! Although, I have yet to re-program my Alarm ECU. Could you PM me to let me know how much you charge to clone a black remote. Thanks!
     
    Last edited: Aug 19, 2008
  16. eric355

    eric355 Formula 3 Silver Subscribed

    Joined:
    Nov 30, 2005
    Messages:
    1,225
    Location:
    Toulouse (France)
    Full Name:
    Eric DECOUX
    Scott,

    PM sent.
    You were partially right. The cloned fob has the bad idea to send again the same codes than the original one but the ECU seems to be OK with that provided the code is not repeated immediately. As soon as the cloned fob send new codes, it works and allows to control the car.
    It seems you have in hands almost all what you need to avoid cloning ... EXCEPT IF you have not the PIN code which is actually implemented in the ECU!
     
  17. eric355

    eric355 Formula 3 Silver Subscribed

    Joined:
    Nov 30, 2005
    Messages:
    1,225
    Location:
    Toulouse (France)
    Full Name:
    Eric DECOUX
  18. wrxmike

    wrxmike Moderator Moderator Owner

    Joined:
    Mar 20, 2004
    Messages:
    7,674
    Full Name:
    Mike
    Last edited by a moderator: Sep 7, 2017
  19. jayz

    jayz Formula 3

    Joined:
    Jan 16, 2006
    Messages:
    1,153
    Location:
    Los Angeles, CA
    Full Name:
    Jess
  20. LetsJet

    LetsJet F1 Veteran Owner

    Joined:
    May 24, 2004
    Messages:
    9,334
    Location:
    DC/LA/Paris/Haleiwa
    Full Name:
    Mr.
    Can anyone verify this? This would be a good way to go.
     
  21. 285ferrari

    285ferrari Two Time F1 World Champ Sponsor

    Joined:
    Sep 11, 2004
    Messages:
    20,958
    Location:
    MD and NE
    Full Name:
    Robbie
    I agree-----Hopefully eric355 can shed some light on whether these can be used---if so would be alot cheaper for sure....
     
  22. duskybird

    duskybird F1 World Champ Owner Rossa Subscribed

    Joined:
    Jan 20, 2007
    Messages:
    12,607
    Location:
    29 Electoral Votes
    Full Name:
    Bill B.
    This may have possibilities. The stock Ferrari alarm is the same for US, Canada and Australia.
     
  23. tazandjan

    tazandjan Three Time F1 World Champ Lifetime Rossa Owner

    Joined:
    Jul 19, 2008
    Messages:
    39,163
    Location:
    Clarksville, Tennessee
    Full Name:
    Terry H Phillips
    Eric- Thanks for the info. Looks like I have a nice paper weight red fob.

    Taz
    Terry Phillips
     
  24. Skidkid

    Skidkid F1 Veteran Owner Rossa Subscribed

    Joined:
    Aug 25, 2005
    Messages:
    9,519
    Location:
    Campbell, CA
    Full Name:
    John Zornes
    You could always have it cloned. It would basically become just like a black fob you have now.
     
  25. tazandjan

    tazandjan Three Time F1 World Champ Lifetime Rossa Owner

    Joined:
    Jul 19, 2008
    Messages:
    39,163
    Location:
    Clarksville, Tennessee
    Full Name:
    Terry H Phillips
    John- You are right. I believe the only time the alarm ECU uses the PIN code is when learning a new red fob PIN or reprogramming the ECU using the existing red fob to recognize new black key fobs. The rest of the time it is just looking for the serial number and rolling code transmitted by either a red or black fob.

    I have the original PIN code for my alarm ECU and could even reprogram the ECU to recognize my unknown PIN code red fob and my existing black fob. But then I would be dead if the fobs failed because I would not know the PIN.

    Since the PIN is only used on rare occasions, I was hoping someone would be able to read it. Cloning may be the only way to go.

    Taz
    Terry Phillips
     

Share This Page