With a device that captures the data sent from a keyless fob to a car. If there's a pushbutton start, they can also start the vehicle.

Owners are advised to keep their fobs in tin cans or special devices to prevent signals (which doesn't, however, protect while the owner is actually using the device).