Lexus Tell Me CAN bus Injection Theft Is Not A Problem

[SH20]

I emailed  Customer Services at Lexus and asked about the retro fit anti CAN bus plate for my LS.   After 10 days they said my car was not susceptible to CAN bus Injection Theft.   I replied and pointed out that their own official Press Release lists my 2017 LS500h , amongst others and lists it as qualifying for the security plate.    I await their next fob off reply.  No wonder people get hacked off by the lack of interest by Lexus 

Which Lexus models can be fitted with the enhanced security feature?
It can be fitted to previous generation RX, NX, plus ES, LC, LS, RC, GS, UX and UXe

 

Which models are affected by year?

Lexus models
Affected years/months
 Lexus LC / LC-C
2017/03 – 2024/03
 Lexus RC
2017/03 – 2024/03
 Lexus RX / RX L 450h
2015/10 – 2022/10
 Lexus ES
2018/10 – 2024/02
 Lexus GS / GS-F
2015/11 – 2020/11
 Lexus NX
2017/09 – 2021/10
 Lexus LS
2017/10 – 2022/09
 Lexus UX / UXe
2018/10 – 2023/12
 
 

[ColinBarber]

2017/10 refers to the manufacturing date. When was your car registered, if it was before Dec 2017 it is unlikely to be affected.

[Cotswold Pete]

Working in Cyber, I have been aware of the CAN protocol for a while, but found this article gives a overview of the route to hacking. 

CAN hacking

As it says the CAN is based on the IP protocol (the Internet basically) which is highly hacked, and all this sh*t reminds me of back in 1980 the networks I played with were a lot more secure and when I fisrt looked at IP (1981) I began to realise it was a potential to be open and a tad of a target for the crims.

This is why CAN attacks were few and far between until (more or less) around 2019, when the crims appear to have got their act together and worked out how to connect to the network and attack it like they would attack your router or PC on your home (or office) network.

Makes me think that when time comes to replace my car it would be a pair of shoes and bus pass as the replacement

[GMB]

47 minutes ago, Cotswold Pete said:

Makes me think that when time comes to replace my car it would be a pair of shoes and bus pass as the replacement

Not a bad idea but you are more likely to get stabbed on a bus nowadays.

On the IP issues, I think the canbus security is so useless because it costs money to make it better and the manufacturers did not, or did not want to, see the proliferation of attacks coming.

What ever happened to simple IP security, Firewalls, managed routing and containment of IP addresses ( Physical and Virtual ).   They just couldn't be bothered or did not see the expense as necessary maybe.🤨

[GMB]

Here's what they could do if they actually cared.

[Cotswold Pete]

45 minutes ago, GMB said:

Here's what they could do if they actually cared.

Crikey VLANs for a car, what's next Malwarebytes that decides it's bad to listen to Jazz and blocks your radio!!

[GMB]

It seems to be the way things are going. They can already hack your fridge and baby alarm and doorbell camera why not hack your car - it's already being addressed by some manufacturers. Imagine going down the M6 at 130mph (as usual😁) and someone in China turns the engine/battery off.   Deadmeat💀.

[SH20]

Called in to a dealer to check the issue of the security plate was something dealerships were aware of.   The Leeds dealer knew exactly what I was on about but said the security plate was being fitted only to the NX and RX at this moment in time but going forward all models  known to be affected will have a security plate  but the LS was still awaiting release. 

I got a reply from Lexus Customer Services when I advised them my car appears to be affected but as Colin Barber said it's all about the manufacture date rather than the registration date.   They looked into my car again and established the following: 

As your vehicle’s production date is 22.09.2017, this means that your vehicle does not fall between the affected years for the LS model. The affected years are 10/2017 – 09/2022.

So  8 days before the start of October 2017 was enough to know my LS was not susceptible to CAN bus injection theft.  Who Knew.

WHAT BOTHERS ME IS THAT A THIEF DOESN'T KNOW WHEN MY CAR WAS BUILT SO RIPPING MY BUMPER OFF IT'S MOUNTINGS IN AN ATTEMPT TO CONNECT TO THE HEADLAMP WIRING WILL STILL RESULT IS COSTLY REPAIRS EVEN IF THE CAR CANNOT BE REMOVED OFF MY DRIVE. 

What's the point,  this country is like the wild west and beyond saving. 

 

 

[VFR]

Wild West ?

No we are fast becoming EU leaders in pot-hole manufacturing 

Leaders in exporting stolen cars thanks to our East European residents..

 

BTW you need to view this video to know what is going on & by who ?

 

 

[Spock66]

2 hours ago, SH20 said:

As your vehicle’s production date is 22.09.2017, this means that your vehicle does not fall between the affected years for the LS model. The affected years are 10/2017 – 09/2022.

That's very close to the cut-off, personally I would have expected the confirmation to be based on the VIN number.  I don't believe they just happen to change the build spec on the 1st of the month.

[GMB]

2 hours ago, SH20 said:

What's the point,  this country is like the wild west and beyond saving

Er Has nobody noticed? It's been like the wild west for years in the UK.  With no effective government or control it's just gone to the dogs. Sorry to be the bearer of bad news. There's still hope - get a good job installing security and then take the money and run. I am not joking.  Portugal seems nice??

[Malc1]

On 5/8/2024 at 12:17 PM, Cotswold Pete said:

Makes me think that when time comes to replace my car it would be a pair of shoes and bus pass as the replacement

totally disingenuous ................. just buy yourself an amazing early'ish Ls400 with zero high tec " rubbish " to worry about and certain continuing motoring longevity to way past one's Bus Pass days   😇

Malc

[SH20]

Total inconsistency between dealers,  one says we are fitting the security plate to NX and RX just now, another says only the RX upto 2019 is being dealt with and the dealer so called "expert" was actually talking about the security plate being fitted around the steering column !!!!  

You can't make this nonsense up.  If a dealer doesn't even know that the plate is to restrict access to the headlamp wiring and believes it is fitted around the steering column electrics then why bother.   The time will come when really outstanding Independent Lexus Specialists will become the go to authority for repairs etc  like every other  specialist out there, Mercedes, Jaguar, Bentley etc who know the make inside out and don't try and flannel their customers and often save their customer buckets of money.