Hackers Steal Keyless BMW In Under 3 Minutes

← Back to Stories (view on slashdot.org)

Hackers Steal Keyless BMW In Under 3 Minutes

Posted by timothy on Tuesday July 10, 2012 @05:18AM from the and-wait-for-the-upgrade dept.

An anonymous reader writes with this bit from ZDNet: "It's cool to have a keyless BMW, until you no longer have a keyless BMW. Hackers have figured out how to break into such cars with ease. BMW has acknowledged there is a problem, but is not doing enough to protect its customers (video)."

40 of 486 comments (clear)

Min score:

Reason:

Sort:

"stealing" by For+a+Free+Internet · 2012-07-10 05:22 · Score: 5, Funny

It is not "stealing" unless you are a slave to the notion of "property." In the future, everything will belong to me, so this won't be a problem any more. Hi Laura!

--
UNITE with the Campaign for a Free Internet because today, our future begins with tomorrow!
1. Re:"stealing" by sourcerror · 2012-07-10 08:51 · Score: 5, Funny
  
  But, but you wouldn't download a car!
Nice to know... by gadget+junkie · 2012-07-10 05:22 · Score: 5, Funny

that my "old" BMW 3 series has a complicated security mechanism: to open it, you must have access to the ignition lock.

--
"If a boss demands loyalty, give him integrity. But if he demands integrity, give him loyalty." (John Boyd, 1927-1997)
1. Re:Nice to know... by snspdaarf · 2012-07-10 07:16 · Score: 4, Funny
  
  that my "old" BMW 3 series has a complicated security mechanism: to open it, you must have access to the door key .
  FTFY
  Otherwize it might be hard to get back in if you lock the doors if you had to get access to the ignition lock ...
  Of course on most older cars the door lock and the ignition lock are keyed the same for convenience of carrying one key.
  No, no, no. He owns a convertible.
  
  --
  Why, without your clothes, you're naked, Miss Dudley!
Whats the difference... by Moheeheeko · 2012-07-10 05:23 · Score: 5, Funny

....between a BMW and a porcupine?
On the porcupine, the pricks are on the outside.
1. Re:Whats the difference... by spire3661 · 2012-07-10 05:28 · Score: 5, Funny
  
  85% of all BMW owners Ive met are assholes. Strangely this doesnt apply to Mercedes owners.
  
  --
  Good-bye
2. Re:Whats the difference... by Dahamma · 2012-07-10 05:44 · Score: 4, Insightful
  
  It's amazing how many BMW owners are assholes on the road ("I need to win the commute!") And some Mercedes owners seem to act like they own the road ("why is everyone in my way today?"). But neither scares me as much as Lexus soccer moms ("wait, did I drop my Luna bar under the passenger seat again? Oh, there it is! Hoooonnk screeeech!")
  Overall I'd much rather be driving next to someone who cuts you off on purpose than one who didn't even realize they were doing it ;)
3. Re:Whats the difference... by SJHillman · 2012-07-10 05:44 · Score: 4, Funny
  
  Around here, it's mostly Lexus and Prius owners that are total dicks. BMW owners are a mixed bag depending which suburb you're in. Newer Buick owners tend to just be horrible drivers, but that may be because they remember when flint was discovered.
4. Re:Whats the difference... by Yetihehe · 2012-07-10 05:45 · Score: 3, Funny
  
  In Austria - Bayerische Mist Wagon (Bavarian manure wagon)
  
  --
  Extreme Programming - Redundant Array of Inexpensive Developers
5. Re:Whats the difference... by Grishnakh · 2012-07-10 05:48 · Score: 3, Insightful
  
  Yep, at least the person who cuts you off on purpose is actually watching the road and aware of their surroundings. They may be acting in an unsafe manner, but it's still a lot better than someone whose attention is elsewhere; the aggressive drivers who cut you off rarely actually hit you, because they're just being rude, but usually know their car's dimensions pretty well to pull off the maneuver without incident. I'm not saying it's great, but it's preferable to someone who's looking under their seat, at their kids in the back, texting on their phone, etc. instead of looking at the cars around them.
6. Re:Whats the difference... by SJHillman · 2012-07-10 05:50 · Score: 3, Interesting
  
  I was stopped at a traffic light during my morning commute when I watched a woman in the lane next to me slowly roll into the Lexus in front of her, then back off. The Lexus (male driver) then reversed and gently bumped into her. I can only hope they at least knew each other, but even then I wouldn't be playing gentle bumper cars given how touchy some airbag sensors can be.
7. Re:Whats the difference... by Bigby · 2012-07-10 05:51 · Score: 3, Interesting
  
  BMW has an entry-level model that allows people who can't actually afford their cars to get their cars. This is not the case with Mercedes. Those people can generally afford their cars. People who try to spend their way into luxury and debt at the same time tend to be the a$$holes you speak of. Those that actually earned their money to buy such a car are not so much.
8. Re:Whats the difference... by Anonymous Coward · 2012-07-10 06:07 · Score: 3, Insightful
  
  Funny thing is that in Europe it's the Audi drivers (personal experience only).
9. Re:Whats the difference... by deadweight · 2012-07-10 06:08 · Score: 5, Insightful
  
  As a BMW owner, I can say that it seems 85% of the people who come near me turn into assholes when they see the blue-and-white symbol. Do you REALLY need to play boy racer in your Camaro and pass me on the right, drop back, pass me on the left, get ahead of me, and slam on the brakes when I have 3 little kids and a freaking DOG in the car? Do I look like I want to race you? Do you need to make dumb-ass global warming comments when my car gets better MPG than yours? Do you really need to carry on about the 1%ers ruining everything when my car has 200,000 miles on it?
10. Re:Whats the difference... by Ogive17 · 2012-07-10 06:28 · Score: 5, Insightful
  
  I just think 85% of people are assholes, no need to categorize them by favorite car brand.
  
  :)
  
  --
  "Action without philosophy is a lethal weapon; philosophy without action is worthless."
11. Re:Whats the difference... by MachineShedFred · 2012-07-10 06:40 · Score: 5, Informative
  
  The large amount of software hacking and modifications available for the N54 / N55 engines and the iDrive systems disagree with your "locked" assertion.
  Show me another car where you can get a $500 piggyback module that allows you to change engine performance through the steering wheel controls by hijacking signals on the CANbus, or changing gauge function on the fly: http://www.burgertuning.com/jb4_pnp_BMW_performance_tuner.html
  These engines are a software hacker's dream.
  
  --
  Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
12. Re:Whats the difference... by tompaulco · 2012-07-10 06:42 · Score: 3, Interesting
  
  Mercedes also has a lower end model [edmunds.com]that is comparable with other new sedans
  If $35k is comparable with other new sedans, I guess I won't be buying a new sedan ever again. Interesting how median household income has increased by about 70% in 20 years, while the price of an average new car has increased by over 130%.
  heck, there are pickup trucks that cost more than this one.
  Well, that is because pickup trucks are luxury items now. I feel really bad for farmers, because they used to be able to just go buy a pickup truck and it would be cheap, rugged, and last forever. Now they have to drop $40k to get a serviceable truck. No wonder the farmers can't earn a living. 20 years ago, a Ford F-150 could be bought brand new for $10k. Now it costs on average about $35k and can cost as much as $52k for a well equipped one.That is a five fold increase in cost while salaries have not even doubled.
  
  --
  If you are not allowed to question your government then the government has answered your question.
13. Re:Whats the difference... by agallagh42 · 2012-07-10 06:50 · Score: 5, Insightful
  
  And yet, the speed limit in the passing lane is the same as the speed limit in the right lane. If I'm going at least the speed limit, I don't give a fuck which lane I'm in or who is behind me.
  Who said anything about speed limits? If you're not actively passing someone (or in bumper to bumper traffic), you should not be in the passing lane. Period. Doesn't matter how fast or slow you are going.
  
  --
  Carpe Cerevisi - Seize the Beer
14. Re:Whats the difference... by StatureOfLiberty · 2012-07-10 06:59 · Score: 3, Interesting
  
  Got to know. Was that pun intentional? "Newer Buick owners ... because they remember when flint was discovered"
  flint (the rock)?
  or Flint, Michigan - Buick City Complex.
  Loved it - intentional or not.
15. Re:Whats the difference... by Opportunist · 2012-07-10 07:01 · Score: 3, Interesting
  
  You don't have a dash cam? I sure as hell don't DARE to drive on our roads anymore without one. They're cheap and they can really make insurance hassles a lot easier.
  
  --
  We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
16. Re:Whats the difference... by sdguero · 2012-07-10 07:04 · Score: 5, Interesting
  
  You gotta love the Prius drivers cruising along at 68 MPH in the fast lane during rush hour with their eyes glued on the MPG meter. Unbelievably annoying. They are the new Volvo (but for MPG instead of safety). Meanwhile people are risking lives to get around them by swerving into the slow lanes and get back up to 75-80 MPH.
17. Re:Whats the difference... by drinkypoo · 2012-07-10 07:05 · Score: 5, Informative
  
  And yet, the speed limit in the passing lane is the same as the speed limit in the right lane. If I'm going at least the speed limit, I don't give a fuck which lane I'm in or who is behind me.
  In the state of California, it is illegal to prevent passing by riding in the passing lane when it is possible to merge to the right, regardless of speed.
  
  --
  "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
18. Re:Whats the difference... by MachDelta · 2012-07-10 07:06 · Score: 3, Informative
  
  Modern vehicles have to pass a 5mph crash test with no damage. Rolling into someone at a light should be fine. I once wrecked (in the "it was already scrap" sense) a late 90's Sunfire at a friend's farm and drove it ~15mph into a tree and it just bounced off. Hardly even scratched the bumper. We were pretty impressed with that car actually. It took a hell of a beating before it gave up. Taught us some interesting things too, like that you can tow a car by the trunk lid but not the hood ;)
19. Re:Whats the difference... by snspdaarf · 2012-07-10 07:23 · Score: 4, Funny
  
  I watched two people do that back in high school. It was funny until they managed to lock bumpers. Then it was not funny anymore.
  
  It was hilarious.
  
  --
  Why, without your clothes, you're naked, Miss Dudley!
20. Re:Whats the difference... by gparent · 2012-07-10 07:35 · Score: 3, Informative
  
  Maybe the laws in the United States are different, but over here if you're merging you're supposed to yield, not cut everyone to be ahead of the pack. It is not an obligation to move to the passing lane when there are cars trying to merge even if it can be convenient to do so.
  AKA, it's a merge lane, not a "go as fast as you can before cutting the next 6 people who were on the highway a longer time than you" lane.
21. Re:Whats the difference... by Qzukk · 2012-07-10 08:00 · Score: 3, Interesting
  
  how are you going to hit them? They're *passing* you....
  I've met (fortunately without hitting) two classes of people whose antics force me to brake while I'm doing 60 on the freeway:
  One class tries to fit into a space that is 1.5 car lengths wide by flooring it, pulling over at 65+, nearly rear-ending the guy in front doing 60, then slamming on his brakes to 55- so he can make space in front of him.
  The other class hasn't got a fucking clue what's going on, and starts pulling into my lane while I'm about even with him. I'm look over at him through his passenger window and he doesn't even turn his head to look at what's going on when I start honking.
  
  --
  If I have been able to see further than others, it is because I bought a pair of binoculars.
22. Re:Whats the difference... by jbwolfe · 2012-07-10 08:09 · Score: 3, Informative
  
  I considered installing a dash cam too, but then I realized it might be used against me (as in a court of law). Most would call me an asshole behind the wheel. Fair enough, though just like everybody else, I'm certain my driving skills are superior (only in my case they actually are ;-). I've sincerely run out of patience with apathy and inattention. BTW, I extend the following courtesies to all fellow drivers even if they don't reciprocate: stay right except to pass, slower traffic keep right, leave room for those turning right on red, if I pull out in front of you, you will not need to apply the breaks, use turn indicators, pull off the road if I'm lost, forgive innocent errors, never use the horn instead of evasive action, merge at the same speed as traffic, use cell phone only to stream music to the car audio system...I love driving, I just wish everyone else did too.
  
  --
  Have you ever noticed that anybody driving slower than you is an idiot, and anyone going faster than you is a maniac?
23. Re:Whats the difference... by Dahamma · 2012-07-10 09:08 · Score: 3, Funny
  
  That wasn't bumper cars. I think you just witnessed a Lexus mating ritual. 9 months later a new Scion will be born.
Club by magarity · 2012-07-10 05:25 · Score: 4, Funny

Sounds like BMW owners are going to make a run on Pep Boys to get "the club".
1. Re:Club by avandesande · 2012-07-10 05:45 · Score: 4, Informative
  
  Steering wheels are a thin steel hoop enclosed in foam you can hacksaw through them in less than a minute.
  
  --
  love is just extroverted narcissism
2. Re:Club by Translation+Error · 2012-07-10 06:43 · Score: 3, Informative
  
  Actually, The Club may not be very useful against professional thieves. From Jim Burns, a former Chrysler engineer (source):
  
  At some point, the Club was mentioned. The professional thieves laughed and exchanged knowing glances. What we knew was that the Club is a hardened steel device that attaches to the steering wheel and the brake pedal to prevent steering and/or braking. What we found out was that a pro thief would carry a short piece of a hacksaw blade to cut through the plastic steering wheel in a couple seconds. They were then able to release The Club and use it to apply a huge amount of torque to the steering wheel and break the lock on the steering column (which most cars were already equipped with). The pro thieves actually sought out cars with The Club on them because they didn't want to carry a long pry bar that was too hard to conceal.
  
  --
  When someone says, "Any fool can see ..." they're usually exactly right.
Not quite as bad as the Summary seems by DigitalSorceress · 2012-07-10 05:27 · Score: 5, Informative

I own a MINI with a keyless entry system ... MINI is made by BMW these days, so I was a bit concerned.
My first vision was "Yikes - someone either grabs my signal out of the air or else they have some 'rainbow box' that tries a bunch of freqs/combos really fast so they can essentially walk up to my car, get in, and go."
Turns out they have to break your window and connect to your OBD port... This sucks, but to my mind, it's not a whole lot of difference between that and breaking the window then hot-wiring the car. ... If they could just walk up and get in and drive away as if they had the valid key, I'd be a lot more concerned. ... checks insurance policy ... at least I've got theft insurance.

--

The Digital Sorceress
1. Re:Not quite as bad as the Summary seems by NJRoadfan · 2012-07-10 07:07 · Score: 3, Insightful
  
  ...and even if you have theft insurance, be prepared to fight. Some insurers have this bright idea that since you car has an immobilizer security system that its impossible to steal. They apparently hasn't heard of the low tech method of using flat bed tow trucks to take cars off of the street. Most high end cars are stolen around here using a flat bed. Once they have the car, they then crack the immobilizer system at their convenience, re-key/re-code the car, and ship them off to Eastern Europe or South America.
Re:Where's the insurance industry? by Insightfill · 2012-07-10 05:32 · Score: 4, Informative

Ah, but will the insurance companies deny these claims like they have in the past?
Typical geeks... by gatfirls · 2012-07-10 05:38 · Score: 5, Insightful

Got the whole OBD hacking figured out but sticking a peice of tape on a camera is a mechanical feat out of their reach.
The basic design flaw: key recovery... by nweaver · 2012-07-10 05:51 · Score: 5, Informative

The basic design flaw is how key duplication/recovery is handled.
On my motorcycle (a Concours 14 with keyless ignition), to program a new key you need an existing key. The disadvantage is, naturally, if you lose all your keys, you need to replace the computer!
But its better than the alternative. On the BMW, all you need to do is plug into the OOBDII port and tell the computer "Here is the new key". This means if you lose all your keys, you don't have to buy a new computer... But it also means that anyone who can break into the car can create a key and drive off.

--
Test your net with Netalyzr
Looking at this with a very wrong scale in mind by Prikolist · 2012-07-10 06:00 · Score: 5, Interesting

A few years there was a great story in Wired about breaking locks. In summary, even the world's most secure locks are not meant to survive more than 10-15 minutes. And it tells the story of a few experts that broke down one of these locks in under a minute. 3 minutes on a car lock? Either the hackers haven't figured out the best way to break in yet or the security is actually amazing. Wired story

--
I think Linux isn't better than Windows hence in the slashdot realm I'm a troll
Speaking of Backfires by bill_mcgonigle · 2012-07-10 06:40 · Score: 4, Interesting

Sounds like BMW owners are going to make a run on Pep Boys to get "the club".
What Car Theives Think of the Club

At some point, the Club was mentioned. The professional thieves laughed and exchanged knowing glances. What we knew was that the?Club is a hardened steel device that attaches to the steering wheel and the brake pedal to prevent steering and/or braking. What we found out was that a pro thief would carry a short piece of a hacksaw blade to cut through the plastic steering wheel in a couple seconds. They were then able to release The Club and use it to apply a huge amount of torque to the steering wheel and break the lock on the steering column (which most cars were already equipped with). The pro thieves actually sought out cars with The Club on them because they didnâ(TM)t want to carry a long pry bar that was too hard to conceal.

--
My God, it's Full of Source!
OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
Re:The basic design flaw: key recovery... by Jeng · 2012-07-10 06:42 · Score: 3

The difference between your post and everyone else's post is it appears you actually RTFA.

--
Don't know something? Look it up. Still don't know? Then ask.
Re:Yawn... by Khyber · 2012-07-10 10:57 · Score: 3, Interesting

For a car, you only need a wooden wedge to give yourself access to the solenoid and door handle mechanism without breaking any windows.
Hi, I used to work for Pop-A-Lock.

--
Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.