Hackers Steal Keyless BMW In Under 3 Minutes

← Back to Stories (view on slashdot.org)

Hackers Steal Keyless BMW In Under 3 Minutes

Posted by timothy on Tuesday July 10, 2012 @05:18AM from the and-wait-for-the-upgrade dept.

An anonymous reader writes with this bit from ZDNet: "It's cool to have a keyless BMW, until you no longer have a keyless BMW. Hackers have figured out how to break into such cars with ease. BMW has acknowledged there is a problem, but is not doing enough to protect its customers (video)."

23 of 486 comments (clear)

Min score:

Reason:

Sort:

"stealing" by For+a+Free+Internet · 2012-07-10 05:22 · Score: 5, Funny

It is not "stealing" unless you are a slave to the notion of "property." In the future, everything will belong to me, so this won't be a problem any more. Hi Laura!

--
UNITE with the Campaign for a Free Internet because today, our future begins with tomorrow!
1. Re:"stealing" by sourcerror · 2012-07-10 08:51 · Score: 5, Funny
  
  But, but you wouldn't download a car!
Nice to know... by gadget+junkie · 2012-07-10 05:22 · Score: 5, Funny

that my "old" BMW 3 series has a complicated security mechanism: to open it, you must have access to the ignition lock.

--
"If a boss demands loyalty, give him integrity. But if he demands integrity, give him loyalty." (John Boyd, 1927-1997)
1. Re:Nice to know... by snspdaarf · 2012-07-10 07:16 · Score: 4, Funny
  
  that my "old" BMW 3 series has a complicated security mechanism: to open it, you must have access to the door key .
  FTFY
  Otherwize it might be hard to get back in if you lock the doors if you had to get access to the ignition lock ...
  Of course on most older cars the door lock and the ignition lock are keyed the same for convenience of carrying one key.
  No, no, no. He owns a convertible.
  
  --
  Why, without your clothes, you're naked, Miss Dudley!
Whats the difference... by Moheeheeko · 2012-07-10 05:23 · Score: 5, Funny

....between a BMW and a porcupine?
On the porcupine, the pricks are on the outside.
1. Re:Whats the difference... by spire3661 · 2012-07-10 05:28 · Score: 5, Funny
  
  85% of all BMW owners Ive met are assholes. Strangely this doesnt apply to Mercedes owners.
  
  --
  Good-bye
2. Re:Whats the difference... by Dahamma · 2012-07-10 05:44 · Score: 4, Insightful
  
  It's amazing how many BMW owners are assholes on the road ("I need to win the commute!") And some Mercedes owners seem to act like they own the road ("why is everyone in my way today?"). But neither scares me as much as Lexus soccer moms ("wait, did I drop my Luna bar under the passenger seat again? Oh, there it is! Hoooonnk screeeech!")
  Overall I'd much rather be driving next to someone who cuts you off on purpose than one who didn't even realize they were doing it ;)
3. Re:Whats the difference... by SJHillman · 2012-07-10 05:44 · Score: 4, Funny
  
  Around here, it's mostly Lexus and Prius owners that are total dicks. BMW owners are a mixed bag depending which suburb you're in. Newer Buick owners tend to just be horrible drivers, but that may be because they remember when flint was discovered.
4. Re:Whats the difference... by deadweight · 2012-07-10 06:08 · Score: 5, Insightful
  
  As a BMW owner, I can say that it seems 85% of the people who come near me turn into assholes when they see the blue-and-white symbol. Do you REALLY need to play boy racer in your Camaro and pass me on the right, drop back, pass me on the left, get ahead of me, and slam on the brakes when I have 3 little kids and a freaking DOG in the car? Do I look like I want to race you? Do you need to make dumb-ass global warming comments when my car gets better MPG than yours? Do you really need to carry on about the 1%ers ruining everything when my car has 200,000 miles on it?
5. Re:Whats the difference... by Ogive17 · 2012-07-10 06:28 · Score: 5, Insightful
  
  I just think 85% of people are assholes, no need to categorize them by favorite car brand.
  
  :)
  
  --
  "Action without philosophy is a lethal weapon; philosophy without action is worthless."
6. Re:Whats the difference... by MachineShedFred · 2012-07-10 06:40 · Score: 5, Informative
  
  The large amount of software hacking and modifications available for the N54 / N55 engines and the iDrive systems disagree with your "locked" assertion.
  Show me another car where you can get a $500 piggyback module that allows you to change engine performance through the steering wheel controls by hijacking signals on the CANbus, or changing gauge function on the fly: http://www.burgertuning.com/jb4_pnp_BMW_performance_tuner.html
  These engines are a software hacker's dream.
  
  --
  Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
7. Re:Whats the difference... by agallagh42 · 2012-07-10 06:50 · Score: 5, Insightful
  
  And yet, the speed limit in the passing lane is the same as the speed limit in the right lane. If I'm going at least the speed limit, I don't give a fuck which lane I'm in or who is behind me.
  Who said anything about speed limits? If you're not actively passing someone (or in bumper to bumper traffic), you should not be in the passing lane. Period. Doesn't matter how fast or slow you are going.
  
  --
  Carpe Cerevisi - Seize the Beer
8. Re:Whats the difference... by sdguero · 2012-07-10 07:04 · Score: 5, Interesting
  
  You gotta love the Prius drivers cruising along at 68 MPH in the fast lane during rush hour with their eyes glued on the MPG meter. Unbelievably annoying. They are the new Volvo (but for MPG instead of safety). Meanwhile people are risking lives to get around them by swerving into the slow lanes and get back up to 75-80 MPH.
9. Re:Whats the difference... by drinkypoo · 2012-07-10 07:05 · Score: 5, Informative
  
  And yet, the speed limit in the passing lane is the same as the speed limit in the right lane. If I'm going at least the speed limit, I don't give a fuck which lane I'm in or who is behind me.
  In the state of California, it is illegal to prevent passing by riding in the passing lane when it is possible to merge to the right, regardless of speed.
  
  --
  "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
10. Re:Whats the difference... by snspdaarf · 2012-07-10 07:23 · Score: 4, Funny
  
  I watched two people do that back in high school. It was funny until they managed to lock bumpers. Then it was not funny anymore.
  
  It was hilarious.
  
  --
  Why, without your clothes, you're naked, Miss Dudley!
Club by magarity · 2012-07-10 05:25 · Score: 4, Funny

Sounds like BMW owners are going to make a run on Pep Boys to get "the club".
1. Re:Club by avandesande · 2012-07-10 05:45 · Score: 4, Informative
  
  Steering wheels are a thin steel hoop enclosed in foam you can hacksaw through them in less than a minute.
  
  --
  love is just extroverted narcissism
Not quite as bad as the Summary seems by DigitalSorceress · 2012-07-10 05:27 · Score: 5, Informative

I own a MINI with a keyless entry system ... MINI is made by BMW these days, so I was a bit concerned.
My first vision was "Yikes - someone either grabs my signal out of the air or else they have some 'rainbow box' that tries a bunch of freqs/combos really fast so they can essentially walk up to my car, get in, and go."
Turns out they have to break your window and connect to your OBD port... This sucks, but to my mind, it's not a whole lot of difference between that and breaking the window then hot-wiring the car. ... If they could just walk up and get in and drive away as if they had the valid key, I'd be a lot more concerned. ... checks insurance policy ... at least I've got theft insurance.

--

The Digital Sorceress
Re:Where's the insurance industry? by Insightfill · 2012-07-10 05:32 · Score: 4, Informative

Ah, but will the insurance companies deny these claims like they have in the past?
Typical geeks... by gatfirls · 2012-07-10 05:38 · Score: 5, Insightful

Got the whole OBD hacking figured out but sticking a peice of tape on a camera is a mechanical feat out of their reach.
The basic design flaw: key recovery... by nweaver · 2012-07-10 05:51 · Score: 5, Informative

The basic design flaw is how key duplication/recovery is handled.
On my motorcycle (a Concours 14 with keyless ignition), to program a new key you need an existing key. The disadvantage is, naturally, if you lose all your keys, you need to replace the computer!
But its better than the alternative. On the BMW, all you need to do is plug into the OOBDII port and tell the computer "Here is the new key". This means if you lose all your keys, you don't have to buy a new computer... But it also means that anyone who can break into the car can create a key and drive off.

--
Test your net with Netalyzr
Looking at this with a very wrong scale in mind by Prikolist · 2012-07-10 06:00 · Score: 5, Interesting

A few years there was a great story in Wired about breaking locks. In summary, even the world's most secure locks are not meant to survive more than 10-15 minutes. And it tells the story of a few experts that broke down one of these locks in under a minute. 3 minutes on a car lock? Either the hackers haven't figured out the best way to break in yet or the security is actually amazing. Wired story

--
I think Linux isn't better than Windows hence in the slashdot realm I'm a troll
Speaking of Backfires by bill_mcgonigle · 2012-07-10 06:40 · Score: 4, Interesting

Sounds like BMW owners are going to make a run on Pep Boys to get "the club".
What Car Theives Think of the Club

At some point, the Club was mentioned. The professional thieves laughed and exchanged knowing glances. What we knew was that the?Club is a hardened steel device that attaches to the steering wheel and the brake pedal to prevent steering and/or braking. What we found out was that a pro thief would carry a short piece of a hacksaw blade to cut through the plastic steering wheel in a couple seconds. They were then able to release The Club and use it to apply a huge amount of torque to the steering wheel and break the lock on the steering column (which most cars were already equipped with). The pro thieves actually sought out cars with The Club on them because they didnâ(TM)t want to carry a long pry bar that was too hard to conceal.

--
My God, it's Full of Source!
OUTSIDE_IP=$(dig +short my.ip @outsideip.net)