RKE fobs are usually made by different manufactures that use 315 MHZ (for North America). The one I tested with was made by Texas Instruments which I assume most Ford vehicles use. The signal usually consist of 3 parts; small amount of Bits for the manufacture code, followed by a large security code which is encrypted and rolling, and another small amount of Bits for the function (unlock, lock, panic, trunk). The rolling code only cycles so many times and would not be easy even if you had a device that was able to brute-force it. Since they are using the passenger's side door they are probably using a new method exploitable to flawed vehicles or just people doing insurance fraud. I would assume this method involves overloading the circuit. If anything I would reach out too Texas Instruments and see what they have to say, since they probably created most of the technology behind the RKE fobs. Below I posed a link to an example of a RKE fob made by TI and a link to a video I made in 2009. http://www.ti.com/lit/ds/slws011d/slws011d.pdf http://www.youtube.com/watch?v=l24mgY2Ro8g

So the new android phones in Japan has ICS and can prevent cancer. What now apple? WHAT NOW?

Read this article in E Ink FTW!!!!!