What's new
By:
Filters
WL Jeep Forum

Welcome to WLJeepforum.com! Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your own topics and posts, as well as connect with other members through your own private inbox!

Disable OBD2 / SGM

RichSNJ

RichSNJ

Well-known member
So, I watched a video the other day that revealed that one of the most popular cars to steal in Canada right now are Ram 1500's. Apparently they're very popular overseas. So they were talking about how they are stolen and it basically revolves around using a high end OBD tool and then programming it to be a key for the car in some way. There was even a guy with a WK2 who posted a video of them stealing his Jeep...

Now, this is an industry wide problem, not necessarily a FCA / Stellantis problem, because you can pretty much do it with any car.

I figured I would be proactive and figure out a way to disable my OBD port, and I decided I would put a switch on the power line somewhere up in the dash so that the switch would have to be on before the port would get any power. No biggie if the OBD port wasn't powered under normal circumstances, so I figured that would work pretty well.

But - it did occur to me that we're supposed to have the nifty Secure Gateway Module which is supposed to protect us from this kind of attack. This is where this becomes a FCA / Stellantis problem....

So I knew about this bypass cable you could get, but I wasn't really sure about what it was doing until I researched this. Turns out there are two connectors that plug in under the passenger footwell into the SGM, and if you want to use an OBD tool, you simply get a 15 dollar cable and unplug those two connectors and plug it in to your cable and you're good to go. Apparently the thieves know all about this and go right for the passenger side when they're stealing Jeeps.

So here's my question... I plan on asking this next week to the service department at my dealer, but I'm expecting a blank stare in return...

Does anybody know what the ramifications are of disabling the power connectors to the SGM? Disabling the power line to the OBD is no big deal as it's a dead end, but I assume that the SGM does something that might be important / missed when it's unplugged?

So while it would have been pretty easy to disable the OBD port, it may not be easy or possible to disable the SGM.

I'm really not all that concerned about my Jeep getting stolen in this manner as I don't live in a high crime area and it's in a garage, but on the other hand, why have an easily exploitable vulnerability enabled when there's no reason to.
 
RichSNJ

RichSNJ

Well-known member
Jake22 said:
I linked this to the start button. Remote Start is retained.
Click to expand...

Yeah, I know I could wire in an actual kill switch, but I'd rather come up with something that just disabled the obd so that I don't have to remember to switch and unswitch crap... I will probably wind up removing the starter relay next time I leave it at the airport though.
 
S

saleen032

Well-known member
The WL's use a different computer system then the vehicles you were reading about. There hasnt been any type of aftermarket computer or even bypass cable that will work with this new system released yet. Disabling power to the OBD port may work, but many devices now are self contained and dont need the power feed from the port. Disabling the gateway module may introduce a bigger can or worms, since the car needs the module to communicate all the computers and modules....
 
RichSNJ

RichSNJ

Well-known member
saleen032 said:
The WL's use a different computer system then the vehicles you were reading about. There hasnt been any type of aftermarket computer or even bypass cable that will work with this new system released yet. Disabling power to the OBD port may work, but many devices now are self contained and dont need the power feed from the port. Disabling the gateway module may introduce a bigger can or worms, since the car needs the module to communicate all the computers and modules....
Click to expand...

If so, I'm sure it's only a matter of time before they release a cable however.

I've done some more research on the subject however and it seems they're able to do this because they are using repeaters to boost the signal from the key fobs from inside your house, and then they can start the car and clone a key using the security chip from your fob... So if you put up a barrier between your fob and your jeep that blocks RF, you can protect yourself against this. I'm not quite sure how people are stealing them from parking garages though - unless they're valet parking or the garage is close to where the fobs are kept.

Regarding the devices being self powered, I'd have to screw around with blocking different pins. I'm aware that the device may be self powered, but I wasn't sure that meant that it would interface it's own power with that of the cars, but if it did, my second choice would be to put a switch or switches on the data lines - that would certainly work, but again, not if they can directly access the SGM...
 
S

saleen032

Well-known member
2021 WK SEG pinouts are completel;y different than the 2021 and up WL's I was trying to post a diagram from the Mopar connector website, but it woudln't load correctly
 
S

saleen032

Well-known member
I sent an email to ZAutomotive about the SEG bypass and the Tazer. Their exact words"It won't unfortunately. No plans to support the L or WL at this time for exactly that reason"
 
You must log in or register to reply here.
Top