Hackers Steal Keyless BMW In Under 3 Minutes

← Back to Stories (view on slashdot.org)

Hackers Steal Keyless BMW In Under 3 Minutes

Posted by timothy on Tuesday July 10, 2012 @05:18AM from the and-wait-for-the-upgrade dept.

An anonymous reader writes with this bit from ZDNet: "It's cool to have a keyless BMW, until you no longer have a keyless BMW. Hackers have figured out how to break into such cars with ease. BMW has acknowledged there is a problem, but is not doing enough to protect its customers (video)."

69 of 486 comments (clear)

Min score:

Reason:

Sort:

"stealing" by For+a+Free+Internet · 2012-07-10 05:22 · Score: 5, Funny

It is not "stealing" unless you are a slave to the notion of "property." In the future, everything will belong to me, so this won't be a problem any more. Hi Laura!

--
UNITE with the Campaign for a Free Internet because today, our future begins with tomorrow!
1. Re:"stealing" by sourcerror · 2012-07-10 08:51 · Score: 5, Funny
  
  But, but you wouldn't download a car!
2. Re:"stealing" by bbelt16ag · 2012-07-10 10:43 · Score: 2
  
  is it just me or did you all hear gone on 60 seconds in your head when you read the headline? The new one with nicolas cage...
  
  --
  NEVER NEVER NEVER NEVER NEVER NEVER NEVER NEVER GIVE UP! "No limitations, no boundaries, there is no reason for them."
Nice to know... by gadget+junkie · 2012-07-10 05:22 · Score: 5, Funny

that my "old" BMW 3 series has a complicated security mechanism: to open it, you must have access to the ignition lock.

--
"If a boss demands loyalty, give him integrity. But if he demands integrity, give him loyalty." (John Boyd, 1927-1997)
1. Re:Nice to know... by slew · 2012-07-10 06:01 · Score: 2
  
  that my "old" BMW 3 series has a complicated security mechanism: to open it, you must have access to the door key .
  FTFY
  Otherwize it might be hard to get back in if you lock the doors if you had to get access to the ignition lock ...
  Of course on most older cars the door lock and the ignition lock are keyed the same for convenience of carrying one key. The ignition lock on many modern cars are electronic/RF "keyed" and the mechanical part of the composite ignition key (if there is one) is sometimes just for the door or maybe just the glove-compartment/petrol cap since onn higher end cars, the doors can often only be electronic/RF keyed as well...
2. Re:Nice to know... by snspdaarf · 2012-07-10 07:16 · Score: 4, Funny
  
  that my "old" BMW 3 series has a complicated security mechanism: to open it, you must have access to the door key .
  FTFY
  Otherwize it might be hard to get back in if you lock the doors if you had to get access to the ignition lock ...
  Of course on most older cars the door lock and the ignition lock are keyed the same for convenience of carrying one key.
  No, no, no. He owns a convertible.
  
  --
  Why, without your clothes, you're naked, Miss Dudley!
Whats the difference... by Moheeheeko · 2012-07-10 05:23 · Score: 5, Funny

....between a BMW and a porcupine?
On the porcupine, the pricks are on the outside.
1. Re:Whats the difference... by spire3661 · 2012-07-10 05:28 · Score: 5, Funny
  
  85% of all BMW owners Ive met are assholes. Strangely this doesnt apply to Mercedes owners.
  
  --
  Good-bye
2. Re:Whats the difference... by TWX · 2012-07-10 05:33 · Score: 2
  
  They're only about 65% in my experience...
  
  --
  Do not look into laser with remaining eye.
3. Re:Whats the difference... by QRDeNameland · 2012-07-10 05:35 · Score: 2
  
  What does BMW stand for?
  Big Money Waster.
  The best one I've heard is Behold My Wealth.
  
  --
  Momentarily, the need for the construction of new light will no longer exist.
4. Re:Whats the difference... by Dahamma · 2012-07-10 05:44 · Score: 4, Insightful
  
  It's amazing how many BMW owners are assholes on the road ("I need to win the commute!") And some Mercedes owners seem to act like they own the road ("why is everyone in my way today?"). But neither scares me as much as Lexus soccer moms ("wait, did I drop my Luna bar under the passenger seat again? Oh, there it is! Hoooonnk screeeech!")
  Overall I'd much rather be driving next to someone who cuts you off on purpose than one who didn't even realize they were doing it ;)
5. Re:Whats the difference... by SJHillman · 2012-07-10 05:44 · Score: 4, Funny
  
  Around here, it's mostly Lexus and Prius owners that are total dicks. BMW owners are a mixed bag depending which suburb you're in. Newer Buick owners tend to just be horrible drivers, but that may be because they remember when flint was discovered.
6. Re:Whats the difference... by Yetihehe · 2012-07-10 05:45 · Score: 3, Funny
  
  In Austria - Bayerische Mist Wagon (Bavarian manure wagon)
  
  --
  Extreme Programming - Redundant Array of Inexpensive Developers
7. Re:Whats the difference... by Grishnakh · 2012-07-10 05:48 · Score: 3, Insightful
  
  Yep, at least the person who cuts you off on purpose is actually watching the road and aware of their surroundings. They may be acting in an unsafe manner, but it's still a lot better than someone whose attention is elsewhere; the aggressive drivers who cut you off rarely actually hit you, because they're just being rude, but usually know their car's dimensions pretty well to pull off the maneuver without incident. I'm not saying it's great, but it's preferable to someone who's looking under their seat, at their kids in the back, texting on their phone, etc. instead of looking at the cars around them.
8. Re:Whats the difference... by SJHillman · 2012-07-10 05:50 · Score: 3, Interesting
  
  I was stopped at a traffic light during my morning commute when I watched a woman in the lane next to me slowly roll into the Lexus in front of her, then back off. The Lexus (male driver) then reversed and gently bumped into her. I can only hope they at least knew each other, but even then I wouldn't be playing gentle bumper cars given how touchy some airbag sensors can be.
9. Re:Whats the difference... by Bigby · 2012-07-10 05:51 · Score: 3, Interesting
  
  BMW has an entry-level model that allows people who can't actually afford their cars to get their cars. This is not the case with Mercedes. Those people can generally afford their cars. People who try to spend their way into luxury and debt at the same time tend to be the a$$holes you speak of. Those that actually earned their money to buy such a car are not so much.
10. Re:Whats the difference... by Anonymous Coward · 2012-07-10 06:01 · Score: 2, Funny
  
  That's because there seems to be some kind of Strategic Crown Victoria and Cutlass Ciera Reserve from which old people obtain their vehicles, at least in my area.
11. Re:Whats the difference... by mcgrew · 2012-07-10 06:03 · Score: 2
  
  Overall I'd much rather be driving next to someone who cuts you off on purpose than one who didn't even realize they were doing it
  Not me, a BMW won't do as much damage as a Lexus. But my observation is the twentysomethings who have one of those giant four seater pickup trucks with what looks like thirty inch wheels are the worst. They drive stupid AND are assholes. But I guess being born into money might give one a sense of entitlement, which probably explains the BMW and Ford assholes. They really do think they're better than you.
  
  --
  Free Martian Whores!
12. Re:Whats the difference... by Anonymous Coward · 2012-07-10 06:07 · Score: 3, Insightful
  
  Funny thing is that in Europe it's the Audi drivers (personal experience only).
13. Re:Whats the difference... by deadweight · 2012-07-10 06:08 · Score: 5, Insightful
  
  As a BMW owner, I can say that it seems 85% of the people who come near me turn into assholes when they see the blue-and-white symbol. Do you REALLY need to play boy racer in your Camaro and pass me on the right, drop back, pass me on the left, get ahead of me, and slam on the brakes when I have 3 little kids and a freaking DOG in the car? Do I look like I want to race you? Do you need to make dumb-ass global warming comments when my car gets better MPG than yours? Do you really need to carry on about the 1%ers ruining everything when my car has 200,000 miles on it?
14. Re:Whats the difference... by Ogive17 · 2012-07-10 06:28 · Score: 5, Insightful
  
  I just think 85% of people are assholes, no need to categorize them by favorite car brand.
  
  :)
  
  --
  "Action without philosophy is a lethal weapon; philosophy without action is worthless."
15. Re:Whats the difference... by Joce640k · 2012-07-10 06:30 · Score: 2
  
  Yep. The "asshole BMW owner" demographic all started buying Audis about a decade ago. BMW is slowly becoming OK again.
  
  --
  No sig today...
16. Re:Whats the difference... by MachineShedFred · 2012-07-10 06:40 · Score: 5, Informative
  
  The large amount of software hacking and modifications available for the N54 / N55 engines and the iDrive systems disagree with your "locked" assertion.
  Show me another car where you can get a $500 piggyback module that allows you to change engine performance through the steering wheel controls by hijacking signals on the CANbus, or changing gauge function on the fly: http://www.burgertuning.com/jb4_pnp_BMW_performance_tuner.html
  These engines are a software hacker's dream.
  
  --
  Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
17. Re:Whats the difference... by tompaulco · 2012-07-10 06:42 · Score: 3, Interesting
  
  Mercedes also has a lower end model [edmunds.com]that is comparable with other new sedans
  If $35k is comparable with other new sedans, I guess I won't be buying a new sedan ever again. Interesting how median household income has increased by about 70% in 20 years, while the price of an average new car has increased by over 130%.
  heck, there are pickup trucks that cost more than this one.
  Well, that is because pickup trucks are luxury items now. I feel really bad for farmers, because they used to be able to just go buy a pickup truck and it would be cheap, rugged, and last forever. Now they have to drop $40k to get a serviceable truck. No wonder the farmers can't earn a living. 20 years ago, a Ford F-150 could be bought brand new for $10k. Now it costs on average about $35k and can cost as much as $52k for a well equipped one.That is a five fold increase in cost while salaries have not even doubled.
  
  --
  If you are not allowed to question your government then the government has answered your question.
18. Re:Whats the difference... by agallagh42 · 2012-07-10 06:50 · Score: 5, Insightful
  
  And yet, the speed limit in the passing lane is the same as the speed limit in the right lane. If I'm going at least the speed limit, I don't give a fuck which lane I'm in or who is behind me.
  Who said anything about speed limits? If you're not actively passing someone (or in bumper to bumper traffic), you should not be in the passing lane. Period. Doesn't matter how fast or slow you are going.
  
  --
  Carpe Cerevisi - Seize the Beer
19. Re:Whats the difference... by StatureOfLiberty · 2012-07-10 06:59 · Score: 3, Interesting
  
  Got to know. Was that pun intentional? "Newer Buick owners ... because they remember when flint was discovered"
  flint (the rock)?
  or Flint, Michigan - Buick City Complex.
  Loved it - intentional or not.
20. Re:Whats the difference... by Opportunist · 2012-07-10 07:01 · Score: 3, Interesting
  
  You don't have a dash cam? I sure as hell don't DARE to drive on our roads anymore without one. They're cheap and they can really make insurance hassles a lot easier.
  
  --
  We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
21. Re:Whats the difference... by sdguero · 2012-07-10 07:04 · Score: 5, Interesting
  
  You gotta love the Prius drivers cruising along at 68 MPH in the fast lane during rush hour with their eyes glued on the MPG meter. Unbelievably annoying. They are the new Volvo (but for MPG instead of safety). Meanwhile people are risking lives to get around them by swerving into the slow lanes and get back up to 75-80 MPH.
22. Re:Whats the difference... by drinkypoo · 2012-07-10 07:05 · Score: 5, Informative
  
  And yet, the speed limit in the passing lane is the same as the speed limit in the right lane. If I'm going at least the speed limit, I don't give a fuck which lane I'm in or who is behind me.
  In the state of California, it is illegal to prevent passing by riding in the passing lane when it is possible to merge to the right, regardless of speed.
  
  --
  "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
23. Re:Whats the difference... by MachDelta · 2012-07-10 07:06 · Score: 3, Informative
  
  Modern vehicles have to pass a 5mph crash test with no damage. Rolling into someone at a light should be fine. I once wrecked (in the "it was already scrap" sense) a late 90's Sunfire at a friend's farm and drove it ~15mph into a tree and it just bounced off. Hardly even scratched the bumper. We were pretty impressed with that car actually. It took a hell of a beating before it gave up. Taught us some interesting things too, like that you can tow a car by the trunk lid but not the hood ;)
24. Re:Whats the difference... by Anonymous Coward · 2012-07-10 07:19 · Score: 2, Insightful
  
  I disagree a fat person will burn longer...
25. Re:Whats the difference... by snspdaarf · 2012-07-10 07:23 · Score: 4, Funny
  
  I watched two people do that back in high school. It was funny until they managed to lock bumpers. Then it was not funny anymore.
  
  It was hilarious.
  
  --
  Why, without your clothes, you're naked, Miss Dudley!
26. Re:Whats the difference... by gparent · 2012-07-10 07:35 · Score: 3, Informative
  
  Maybe the laws in the United States are different, but over here if you're merging you're supposed to yield, not cut everyone to be ahead of the pack. It is not an obligation to move to the passing lane when there are cars trying to merge even if it can be convenient to do so.
  AKA, it's a merge lane, not a "go as fast as you can before cutting the next 6 people who were on the highway a longer time than you" lane.
27. Re:Whats the difference... by gparent · 2012-07-10 07:58 · Score: 2
  
  Honestly, I really don't care about people too stupid to learn how to merge without having to stop. You're the one trying to get on the lane, why the fuck should I yield for you when you fail to be competent at it? Use your own brakes. I'd rather hang myself than imagine a version of me that cannot merge like an adult without having eight lanes wide worth of highway.
28. Re:Whats the difference... by Qzukk · 2012-07-10 08:00 · Score: 3, Interesting
  
  how are you going to hit them? They're *passing* you....
  I've met (fortunately without hitting) two classes of people whose antics force me to brake while I'm doing 60 on the freeway:
  One class tries to fit into a space that is 1.5 car lengths wide by flooring it, pulling over at 65+, nearly rear-ending the guy in front doing 60, then slamming on his brakes to 55- so he can make space in front of him.
  The other class hasn't got a fucking clue what's going on, and starts pulling into my lane while I'm about even with him. I'm look over at him through his passenger window and he doesn't even turn his head to look at what's going on when I start honking.
  
  --
  If I have been able to see further than others, it is because I bought a pair of binoculars.
29. Re:Whats the difference... by jbwolfe · 2012-07-10 08:09 · Score: 3, Informative
  
  I considered installing a dash cam too, but then I realized it might be used against me (as in a court of law). Most would call me an asshole behind the wheel. Fair enough, though just like everybody else, I'm certain my driving skills are superior (only in my case they actually are ;-). I've sincerely run out of patience with apathy and inattention. BTW, I extend the following courtesies to all fellow drivers even if they don't reciprocate: stay right except to pass, slower traffic keep right, leave room for those turning right on red, if I pull out in front of you, you will not need to apply the breaks, use turn indicators, pull off the road if I'm lost, forgive innocent errors, never use the horn instead of evasive action, merge at the same speed as traffic, use cell phone only to stream music to the car audio system...I love driving, I just wish everyone else did too.
  
  --
  Have you ever noticed that anybody driving slower than you is an idiot, and anyone going faster than you is a maniac?
30. Re:Whats the difference... by Jeng · 2012-07-10 08:10 · Score: 2
  
  You're the one trying to get on the lane, why the fuck should I yield for you
  
  I really don't give a shit if I get in behind or in front of you, just don't actively block me from getting on the highway. If traffic is backed up and you are in the merge lane, then someone will have to let someone in front of them and it might as well be you.
  I'm not one of those assholes who runs up to the end of an on ramp and then tries to get on, I try at the earliest point I can.
  Also, be aware that different lanes are used for different purposes so use the correct lane for what you are doing.
  Don't be an asshole.
  
  --
  Don't know something? Look it up. Still don't know? Then ask.
31. Re:Whats the difference... by jnork · 2012-07-10 08:43 · Score: 2
  
  “The best swordsman does not fear the second best, he fears the worst since there's no telling what that idiot is going to do.”
  
  --
  Cleverly disguised as a responsible adult.
32. Re:Whats the difference... by Dahamma · 2012-07-10 09:08 · Score: 3, Funny
  
  That wasn't bumper cars. I think you just witnessed a Lexus mating ritual. 9 months later a new Scion will be born.
33. Re:Whats the difference... by agallagh42 · 2012-07-10 09:11 · Score: 2
  
  I hope you're not saying that the AC is correct. It is actually a legal requirement that you must not travel in the passing lane if you are not actively passing someone. Going the speed limit is irrelevant. If there is room to move out of the passing lane, you are legally required to do so, and you can get a ticket if you don't. Unfortunately, such tickets are fairly rare.
  
  --
  Carpe Cerevisi - Seize the Beer
34. Re:Whats the difference... by PoopMonkey · 2012-07-10 10:39 · Score: 2
  
  The number of people you'll find owning SUVs that actually do anything sporty or utility-like is pretty much a rounding error. The same with people driving pickups. They think they look cool so they buy them. Around here, these tend to also be the people I see in the ditch the most in snow because they think that their vehicle will keep them safe without actually having any driving ability.
35. Re:Whats the difference... by cusco · 2012-07-10 10:54 · Score: 2
  
  Or parked in a space (or two) clearly marked "COMPACT". Since my little truckette is older and starting to look a little rough around the edges I'll park in the next space over. Right in the middle of the space, perfectly between the lines. If I'm lucky they'll be climbing in their passenger door when I come back out and I can laugh as they crawl over the middle console and then take about four tries before they can back out (once with the spouse giving the most hilarious hand signals trying to assist).
  
  I used to have a 'Citizen's Arrest Parking Ticket' that I would leave on cars, with nice check boxes and penalties such as being sent to the Click & Clack School of Remedial Parking, but I lost my template in a computer upgrade and never got around to recreating it.
  
  --
  "Think about how stupid the average person is. Now, realise that half of them are dumber than that." - George Carlin
36. Re:Whats the difference... by sjames · 2012-07-10 20:28 · Score: 2
  
  When merging, I have to merge in front of someone. You don't seriously think you're so amazingly great and important that you can't be bothered with the common courtesy of allowing someone to merge, do you?
37. Re:Whats the difference... by sjames · 2012-07-10 20:32 · Score: 2
  
  When you see that someone is trying to merge, you should increase the gap with the car in front of you so he doesn't have to pull a stunt like that.
audi by Anonymous Coward · 2012-07-10 05:25 · Score: 2, Funny

that's why i drive an audi.
Club by magarity · 2012-07-10 05:25 · Score: 4, Funny

Sounds like BMW owners are going to make a run on Pep Boys to get "the club".
1. Re:Club by avandesande · 2012-07-10 05:45 · Score: 4, Informative
  
  Steering wheels are a thin steel hoop enclosed in foam you can hacksaw through them in less than a minute.
  
  --
  love is just extroverted narcissism
2. Re:Club by avandesande · 2012-07-10 06:30 · Score: 2
  
  Another is to never lock a door on a convertible, if someone cuts through the roof to get inside the cost will be much more than anything they could have stolen.
  
  --
  love is just extroverted narcissism
3. Re:Club by Translation+Error · 2012-07-10 06:43 · Score: 3, Informative
  
  Actually, The Club may not be very useful against professional thieves. From Jim Burns, a former Chrysler engineer (source):
  
  At some point, the Club was mentioned. The professional thieves laughed and exchanged knowing glances. What we knew was that the Club is a hardened steel device that attaches to the steering wheel and the brake pedal to prevent steering and/or braking. What we found out was that a pro thief would carry a short piece of a hacksaw blade to cut through the plastic steering wheel in a couple seconds. They were then able to release The Club and use it to apply a huge amount of torque to the steering wheel and break the lock on the steering column (which most cars were already equipped with). The pro thieves actually sought out cars with The Club on them because they didn't want to carry a long pry bar that was too hard to conceal.
  
  --
  When someone says, "Any fool can see ..." they're usually exactly right.
4. Re:Club by TheGratefulNet · 2012-07-10 07:06 · Score: 2
  
  I used to own a ragtop convertible and could never feel ok with that lifestyle. it makes some sense to leave your doors unlocked and try to 'save the top' but you also have to leave nothing of value, ever, in the car. its just too limiting. sold the car. hassle factor too high.
  
  --
  
  --
  "It is now safe to switch off your computer."
Not quite as bad as the Summary seems by DigitalSorceress · 2012-07-10 05:27 · Score: 5, Informative

I own a MINI with a keyless entry system ... MINI is made by BMW these days, so I was a bit concerned.
My first vision was "Yikes - someone either grabs my signal out of the air or else they have some 'rainbow box' that tries a bunch of freqs/combos really fast so they can essentially walk up to my car, get in, and go."
Turns out they have to break your window and connect to your OBD port... This sucks, but to my mind, it's not a whole lot of difference between that and breaking the window then hot-wiring the car. ... If they could just walk up and get in and drive away as if they had the valid key, I'd be a lot more concerned. ... checks insurance policy ... at least I've got theft insurance.

--

The Digital Sorceress
1. Re:Not quite as bad as the Summary seems by drinkypoo · 2012-07-10 05:51 · Score: 2, Informative
  
  No offense, as I'm sure you love your Mini, but nobody is going to spend 3 minutes trying to steal it. There just isn't enough payout for the effort and risk. A real BMW, however, would be well worth it.
  Your comment is either terribly ignorant or designed to cause offense, because the Honda Civic is the most stolen car (and the Accord is #2, down one spot from the last time I looked.) If it's worth stealing a Civic, it's worth stealing a Mini.
  
  --
  "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
2. Re:Not quite as bad as the Summary seems by citizenr · 2012-07-10 05:54 · Score: 2
  
  This sucks, but to my mind, it's not a whole lot of difference between that and breaking the window then hot-wiring the car.
  The ECU/ECM controls all engine functions. If it doesn't give the go ahead, your car won't run, no matter how many wires are cut apart or spliced together.
  You don't hotwire modern cars.
  You swap car computer and drive off.
  
  --
  Who logs in to gdm? Not I, said the duck.
3. Re:Not quite as bad as the Summary seems by Grishnakh · 2012-07-10 05:58 · Score: 2
  
  You're kidding, right? The Mini has far more cars on the road than the higher-end BMWs, so its parts are far more valuable. High-end BMW owners don't buy possibly-stolen parts (like off Ebay or Craigslist), they go to the dealership to get all their service for $$$$. Mini owners are much more likely to do their own work with parts bought on the secondhand market.
  This is the same reason that Hondas topped the most-stolen car lists for many, many years; lots of people had them, lots of their owners worked on them (even swapping engines and the like), so the parts were valuable.
  What the heck is someone going to do with a stolen $80k BMW anyway? They can't register it and get valid tags. They can't strip it and sell it for parts for the reasons above. They might just joyride in it, but the best they can do is ship it to South America and resell it there. Most cars stolen in this country are stolen for their parts, not to ship to 3rd world countries where there's no law enforcement WRT stolen cars, which is why you never see really high-end cars place very high on the stolen-cars lists.
  If you think stealing a Mini "isn't worth it", you're a moron (though honestly, a Honda Civic or these days a Hyundai would be a better choice).
4. Re:Not quite as bad as the Summary seems by NJRoadfan · 2012-07-10 07:07 · Score: 3, Insightful
  
  ...and even if you have theft insurance, be prepared to fight. Some insurers have this bright idea that since you car has an immobilizer security system that its impossible to steal. They apparently hasn't heard of the low tech method of using flat bed tow trucks to take cars off of the street. Most high end cars are stolen around here using a flat bed. Once they have the car, they then crack the immobilizer system at their convenience, re-key/re-code the car, and ship them off to Eastern Europe or South America.
5. Re:Not quite as bad as the Summary seems by Cramer · 2012-07-10 07:38 · Score: 2
  
  Because you're turning the lock exactly as if the proper key were used. There's no immobilizer loop in the door locks to confirm a proper key is being used.
6. Re:Not quite as bad as the Summary seems by Cramer · 2012-07-10 07:53 · Score: 2
  
  They walk up, smash the window, then reach down to the OBD keeping out of sight of the alarm sensors, program their own key, unlock the car (disarms the alarm -- notice the lights flash), get in, push it far enough away noone will hear it start up.
Re:Where's the insurance industry? by Insightfill · 2012-07-10 05:32 · Score: 4, Informative

Ah, but will the insurance companies deny these claims like they have in the past?
Typical geeks... by gatfirls · 2012-07-10 05:38 · Score: 5, Insightful

Got the whole OBD hacking figured out but sticking a peice of tape on a camera is a mechanical feat out of their reach.
Problem and Solution by BronsCon · 2012-07-10 05:43 · Score: 2

Problem: The OBD-II port, which, by mandate in most countries where it is required, may not have any access controls applied to it, is being used for non-diagnostic purposes
Solution: Use a separate port with some actual securty measures for any functions you aren't legally required to expose via OBD-II
Damn, it took me all of 2 seconds to figure that one out, and I'm not a security expert.

--
APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
1. Re:Problem and Solution by gmarsh · 2012-07-10 06:35 · Score: 2
  
  Actually, the OBD-II specification mandates that you provide a certain set of PIDs without any access restrictions.
  As long as that functionality is there, you can do whatever else you want with the port - including locked down, proprietary things. Pretty much car manufacturer out there does this.
2. Re:Problem and Solution by NJRoadfan · 2012-07-10 07:12 · Score: 2
  
  Don't know if its the case with BMWs, but I know VW Group cars (Audi, VW, SEAT, Skoda, etc.) require a dealer computer that contacts VW corporate in order to re-code cars to new keys. The OBD ports in those cars also don't work unless the car is in the "on" position.
The basic design flaw: key recovery... by nweaver · 2012-07-10 05:51 · Score: 5, Informative

The basic design flaw is how key duplication/recovery is handled.
On my motorcycle (a Concours 14 with keyless ignition), to program a new key you need an existing key. The disadvantage is, naturally, if you lose all your keys, you need to replace the computer!
But its better than the alternative. On the BMW, all you need to do is plug into the OOBDII port and tell the computer "Here is the new key". This means if you lose all your keys, you don't have to buy a new computer... But it also means that anyone who can break into the car can create a key and drive off.

--
Test your net with Netalyzr
Looking at this with a very wrong scale in mind by Prikolist · 2012-07-10 06:00 · Score: 5, Interesting

A few years there was a great story in Wired about breaking locks. In summary, even the world's most secure locks are not meant to survive more than 10-15 minutes. And it tells the story of a few experts that broke down one of these locks in under a minute. 3 minutes on a car lock? Either the hackers haven't figured out the best way to break in yet or the security is actually amazing. Wired story

--
I think Linux isn't better than Windows hence in the slashdot realm I'm a troll
Speaking of Backfires by bill_mcgonigle · 2012-07-10 06:40 · Score: 4, Interesting

Sounds like BMW owners are going to make a run on Pep Boys to get "the club".
What Car Theives Think of the Club

At some point, the Club was mentioned. The professional thieves laughed and exchanged knowing glances. What we knew was that the?Club is a hardened steel device that attaches to the steering wheel and the brake pedal to prevent steering and/or braking. What we found out was that a pro thief would carry a short piece of a hacksaw blade to cut through the plastic steering wheel in a couple seconds. They were then able to release The Club and use it to apply a huge amount of torque to the steering wheel and break the lock on the steering column (which most cars were already equipped with). The pro thieves actually sought out cars with The Club on them because they didnâ(TM)t want to carry a long pry bar that was too hard to conceal.

--
My God, it's Full of Source!
OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
Re:The basic design flaw: key recovery... by Jeng · 2012-07-10 06:42 · Score: 3

The difference between your post and everyone else's post is it appears you actually RTFA.

--
Don't know something? Look it up. Still don't know? Then ask.
hacker != thief by ScubaForLife · 2012-07-10 07:00 · Score: 2

If you steal a car, you aren't a hacker. You are a thief. Stop calling people that break the law, "Hackers".
Re:Yawn... by philip.paradis · 2012-07-10 10:08 · Score: 2

I've watched locksmiths get into multiple modern cars with pick kits and a couple of other tools in a matter of seconds per car. In fact, I've never seen one have to resort to drilling anything out. You appear to know crappy locksmiths.

--
Write failed: Broken pipe
Re:Yawn... by Khyber · 2012-07-10 10:57 · Score: 3, Interesting

For a car, you only need a wooden wedge to give yourself access to the solenoid and door handle mechanism without breaking any windows.
Hi, I used to work for Pop-A-Lock.

--
Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.