For some reason I just assumed that car remotes use two way communication; it never occurred to me that in 2016 car remotes would still be so fundamentally insecure. This is awful.<p>As for the &quot;remediation&quot; part at the bottom of the post, the only way to really secure the remote will be to use two way communication. Key requests random number from car -&gt; car sends random number to key -&gt; key signs random number and sends it back to the car.<p>This would still leave it vulnerable to forwarding attacks, but at least it wouldn&#x27;t be possible to unlock the car without pressing the button on the remote.