Slashdot Mirror

← Back to Stories (view on slashdot.org)

BMW Cars Vulnerable To Blank Key Attack

Posted by timothy on from the now-that-is-a-catchy-slogan dept.

Techmeology writes "Thieves have discovered how to steal BMW cars produced since 2006 by using the onboard computer that is able to program blank keys. The device used — originally intended for use by garages — is able to reprogram the key to start the engine in around three minutes. The blank keys, and reprogramming devices, have made their way onto the black market and are available for purchase over the Internet."

10 of 291 comments (clear)

  1. Imagine if this was self-driving car by Googlefu · · Score: 5, Interesting

    Not only would Google's self-driving car be vulnerable to this attack, it would start driving around itself! And you would be responsible for everything the hacked vehicle did.

    I agree with the previous note. It raises some very interesting points and why Google's self-driving cars would be bad. Just imagine if someone hacked your car and it ran over someone.

    1. Re:Imagine if this was self-driving car by Krneki · · Score: 5, Insightful
      It can happen yes, but what is more likely to happen an incompetent/drunk driver running you over or a hacked AI car?

      AI car will not be perfect, but I'm sure as hell they will be much better then the regular Joe.

      --
      Love many, trust a few, do harm to none.
    2. Re:Imagine if this was self-driving car by Krneki · · Score: 5, Insightful

      It's security vs ease of use. Maybe they hopped no one would bother, now they know it and the next model will be more secure. The thing about science is that is moving on, while human driving is not.

      --
      Love many, trust a few, do harm to none.
    3. Re:Imagine if this was self-driving car by Anonymous Coward · · Score: 5, Funny

      BMW driver here. Absolutely correct. I always drive in the middle of the road and I also yell "ka-ching" and "score" when I:

      Knock over bicyclists
      Clip old ladies
      Back up over children
      Pass (usually on the right) morons in Priuses, Smart Cars and other econo-boxes like Hondas and Rustangs.
      Cut off mom-mobiles where the housewives are talking on the cell phone to their mom.

      My driver's seat is usually (partially) filled with a small asian chick with big tits and bigger sunglasses. It is a misnomer that I talk on cell phones while I pass you. In reality, I don't talk on the cell phone because my trophy passenger takes my calls for me.

      However, I wouldn't be caught dead on spandex or on a bike. That's who we run over, man. Why would would a predator become prey?

      Remember, the difference between a porcupine and a BMW is that with a BMW, the pricks are on the inside. Drive safe! Stay out of my way.

    4. Re:Imagine if this was self-driving car by daem0n1x · · Score: 5, Funny

      Just imagine if a locomotive boiler explodes and kill someone. Steam trains are bad. We should use horses.

      Just imagine if a house falls down and people get crushed. Houses are bad. We should live in caves.

      Just imagine if your laptop explodes and you die. Laptops are bad, we should use abacuses.

    5. Re:Imagine if this was self-driving car by gstovall · · Score: 5, Informative

      Asimov did study this scenario, and it led to the zeroth law, basically known only to the robots.

      0. A robot may not harm humanity, or, by inaction, allow humanity to come to harm.

      As in Star Trek, "The needs of the many outweigh the needs of the few...or the one"

  2. In other news: by AtomicDevice · · Score: 5, Insightful

    Highly advanced cyber-thieves discover method to steal cars with a coat hanger and a screw driver! Everyone cower in terror!

    Not that this isn't dumb security on BMW's part, but the thing keeping people from stealing your car is their conscience and the police, not your hyper-powerful super-locks. They might keep some dumb teenagers out of your car, but not car thieves who buy blank keys on the black market and learn to reprogram them.

    --
    Ze Atomic Device! It iz Ztolen!
  3. Dupe by Muros · · Score: 5, Informative

    http://news.slashdot.org/story/12/07/10/1657203/hackers-steal-keyless-bmw-in-under-3-minutes

  4. Security and lifetime of your typical car by sinij · · Score: 5, Insightful

    Cars are expected to last at least 10 years, many last much longer, well into mid 20s.

    Such timescales are 'forever' in the sense of IT security. Just look at 'recent' examples - WEP was rolled out around 2000 and is now broken in just a couple minutes. Most cars made in 2000 are still on the road.

    I'd go as far as saying that it is impossible to secure your car for its expected useful life without the use of physical security.

  5. Passive alarm system. by SternisheFan · · Score: 5, Interesting

    True story. Some years back in N.Y.C. thieves stole a restored vintage car, not knowing the owner had installed his own homemade anti-theft deterrent system. As they're tooling around in Manhattan, the thief who's driving sees a large unlabled red button mounted all by itself in the dash. The guy says to his buddy, "Hey,I wonder what this does...", and presses it. In the middle of a block the engine shuts down, the horn blares, and the car's lights keep flashing on and off. Unable to restart it, the thieves abandon the car, and that owner was laughing when he got it back, unscathed, the same day. So this story shows how you don't always need an expensive complicated alarm system to get the job done.