Slashdot Mirror
Hackers Steal Keyless BMW In Under 3 Minutes
An anonymous reader writes with this bit from ZDNet: "It's cool to have a keyless BMW, until you no longer have a keyless BMW. Hackers have figured out how to break into such cars with ease. BMW has acknowledged there is a problem, but is not doing enough to protect its customers (video)."
I own a MINI with a keyless entry system ... MINI is made by BMW these days, so I was a bit concerned.
My first vision was "Yikes - someone either grabs my signal out of the air or else they have some 'rainbow box' that tries a bunch of freqs/combos really fast so they can essentially walk up to my car, get in, and go."
Turns out they have to break your window and connect to your OBD port... This sucks, but to my mind, it's not a whole lot of difference between that and breaking the window then hot-wiring the car. ... If they could just walk up and get in and drive away as if they had the valid key, I'd be a lot more concerned. ... checks insurance policy ... at least I've got theft insurance.
The Digital Sorceress
Ah, but will the insurance companies deny these claims like they have in the past?
Steering wheels are a thin steel hoop enclosed in foam you can hacksaw through them in less than a minute.
love is just extroverted narcissism
The basic design flaw is how key duplication/recovery is handled.
On my motorcycle (a Concours 14 with keyless ignition), to program a new key you need an existing key. The disadvantage is, naturally, if you lose all your keys, you need to replace the computer!
But its better than the alternative. On the BMW, all you need to do is plug into the OOBDII port and tell the computer "Here is the new key". This means if you lose all your keys, you don't have to buy a new computer... But it also means that anyone who can break into the car can create a key and drive off.
Test your net with Netalyzr
The large amount of software hacking and modifications available for the N54 / N55 engines and the iDrive systems disagree with your "locked" assertion.
Show me another car where you can get a $500 piggyback module that allows you to change engine performance through the steering wheel controls by hijacking signals on the CANbus, or changing gauge function on the fly: http://www.burgertuning.com/jb4_pnp_BMW_performance_tuner.html
These engines are a software hacker's dream.
Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
And yet, the speed limit in the passing lane is the same as the speed limit in the right lane. If I'm going at least the speed limit, I don't give a fuck which lane I'm in or who is behind me.
In the state of California, it is illegal to prevent passing by riding in the passing lane when it is possible to merge to the right, regardless of speed.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"