Forums
New posts
Search forums
What's new
New posts
New profile posts
Latest activity
Members
Registered members
Current visitors
New profile posts
Search profile posts
Log in
Register
What's new
Search
Search
Search titles only
By:
New posts
Search forums
Menu
Log in
Register
Install the app
Install
RAM TRX - TRX-Forum.com
Bronco Raptor - BroncoRaptorForum.com
Forums
GEN 2 (2017-2020) Ford F-150 Raptor Forums
Ford F-150 Raptor General Discussions [GEN 2]
Keyfob Boosting - Thefts
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Reply to thread
Message
<blockquote data-quote="OriginalToken" data-source="post: 1467483" data-attributes="member: 27465"><p>I don't think we are saying different things, but I may be describing things with the wrong names or terminology.</p><p></p><p>From my observations:</p><p></p><p>I am not talking about the RKE part of the operation. I.e. when you send an unlock command from in the house. That only happens on 903 MHz and will happen assuming the key fob sends the right ID and code. As far as I known, there is no low frequency component in this action. There may be a high frequency (UHF) response from the truck to the fob, under some conditions. I suspect this is how the fob can give you the green or red lights on remote start, to indicate success or failure.</p><p></p><p>What I was talking about was what happens when you touch the door handle.</p><p></p><p>Touching the door handle causes the truck to send a low frequency, 125 kHz, short range interrogate signal to the fob. If the fob is in range, the fob then sends an ID and unlock to the truck on UHF, in my case 903 MHz. This is the same kind of low frequency 125 kHz signal sent when the PATS sends. I mean it may not be the same content, or from the same antennas, but it is on the same frequency and the fob is looking for the same type of signal.</p><p></p><p>I suspect, but am not sure, just based on my signal strength measurements, that the 125 kHz signal sent when you touch the door handle is from the doors, and the 125 kHz signal sent on START / STOP is from the center console. But I did not pursue this very far, so I am not 100% on that. Regardless, it is a very similar signal used two different ways.</p><p></p><p>The fob then sends a 903 MHz signal in response, presumably with the right ID and content.</p><p></p><p>I think we are saying the same thing, but I am probably not using the right names. Like I said, that was what I gathered from sniffing the RF with a receiver.</p><p></p><p></p><p></p><p>No, he was not doing what I was describing, he was capturing the rolling code, the technique I was talking about does not care or capture the code. (I think) He needed the second key fob because he first used the jamming technique that ends up with the car locking the jammed key fob out, black listing that fob until the unit is reprogrammed, and restarting the rolling code.</p><p></p><p>What I was talking about was receiving and forwarding the low frequency, 125 kHz, signal, unchanged, on another frequency, then converting it back down to 125 kHz to be applied to the real registered key fob. It would not allow me to keep controlling, sending the right codes, after leaving the area of the registered fob, but it would allow the registered fob to respond to the low frequency, short range, interrogate signal at long ranges. If done correctly the registered key fob would receive the low frequency, 125 kHz, signal that you forwarded, on 125 kHz, and respond. It would have no concept that it was beyond the range of the truck LF signal.</p><p></p><p>T!</p></blockquote><p></p>
[QUOTE="OriginalToken, post: 1467483, member: 27465"] I don't think we are saying different things, but I may be describing things with the wrong names or terminology. From my observations: I am not talking about the RKE part of the operation. I.e. when you send an unlock command from in the house. That only happens on 903 MHz and will happen assuming the key fob sends the right ID and code. As far as I known, there is no low frequency component in this action. There may be a high frequency (UHF) response from the truck to the fob, under some conditions. I suspect this is how the fob can give you the green or red lights on remote start, to indicate success or failure. What I was talking about was what happens when you touch the door handle. Touching the door handle causes the truck to send a low frequency, 125 kHz, short range interrogate signal to the fob. If the fob is in range, the fob then sends an ID and unlock to the truck on UHF, in my case 903 MHz. This is the same kind of low frequency 125 kHz signal sent when the PATS sends. I mean it may not be the same content, or from the same antennas, but it is on the same frequency and the fob is looking for the same type of signal. I suspect, but am not sure, just based on my signal strength measurements, that the 125 kHz signal sent when you touch the door handle is from the doors, and the 125 kHz signal sent on START / STOP is from the center console. But I did not pursue this very far, so I am not 100% on that. Regardless, it is a very similar signal used two different ways. The fob then sends a 903 MHz signal in response, presumably with the right ID and content. I think we are saying the same thing, but I am probably not using the right names. Like I said, that was what I gathered from sniffing the RF with a receiver. No, he was not doing what I was describing, he was capturing the rolling code, the technique I was talking about does not care or capture the code. (I think) He needed the second key fob because he first used the jamming technique that ends up with the car locking the jammed key fob out, black listing that fob until the unit is reprogrammed, and restarting the rolling code. What I was talking about was receiving and forwarding the low frequency, 125 kHz, signal, unchanged, on another frequency, then converting it back down to 125 kHz to be applied to the real registered key fob. It would not allow me to keep controlling, sending the right codes, after leaving the area of the registered fob, but it would allow the registered fob to respond to the low frequency, short range, interrogate signal at long ranges. If done correctly the registered key fob would receive the low frequency, 125 kHz, signal that you forwarded, on 125 kHz, and respond. It would have no concept that it was beyond the range of the truck LF signal. T! [/QUOTE]
Insert quotes…
Verification
Post reply
Members online
debauch
Nick@Apollo-Optics
brunorulez
silvertige
Dev
Spike Spiegel
NJ2020
tegtitan10
vill
Telecaster480
ToadSmasher2K1
HTXShadow
ReluctantRaptorGuy
MurderedOutSVT
Jepper84
gjw535
FP_RPTR
pat247
Skyfrog
tominphx
Jay_P
decodo
MZRaptor72
RobSpring661
elking
Speedhunter
GooseTuned
billw
Dunn
ausmark
mprice1234
scottybs
Ruger
Rptrrob702
Reptar854
awd5906
bakwaas4eva
HeyItsARaptor
MORaptor
mobin
hamster
HORN HIGH ACES
someday
Hard R
GCATX
jAKe47
Braaaaptor
eljefe_tx
daveh8541
CecilK12
... and 20 more.
Forum statistics
Threads
93,198
Posts
1,955,818
Members
56,485
Latest member
bjorn-dpc
Forums
GEN 2 (2017-2020) Ford F-150 Raptor Forums
Ford F-150 Raptor General Discussions [GEN 2]
Keyfob Boosting - Thefts
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.
Accept
Learn more…
Top