New BMW's getting stolen using blank BMW keys

New BMW's getting stolen using blank BMW keys

Author
Discussion

river_rat

688 posts

204 months

Friday 2nd May 2014
quotequote all
No broken glass, nothing.

A friend of my parents had 2 BMW's stolen from their driveway in 2 days recently.

paulmoonraker

2,850 posts

164 months

Friday 2nd May 2014
quotequote all
anonymous said:
[redacted]
It's a 'software' update. It was therefore only a matter of time until it was hacked.

There is no replacement for some good old mechanical protection sometimes - like a proper key.

MikeOxhard

1,153 posts

248 months

Friday 2nd May 2014
quotequote all
We had an '62' Audi A4 go missing last night from next door - Dudley area, West Mids.

Police came round this morning and reckon that A4 / A5 and 3 / 5 series are the highest theft risk again with 7 3 series going missing in the last 2 weeks

They mentioned the ODB port hack and it's still the main way of the cars going walkies on both marques. . . . . .

Time to dig out the disklock again :-(

Steffan

10,362 posts

229 months

Friday 2nd May 2014
quotequote all
anonymous said:
[redacted]
My auto electrical client who like me is very old said just that to me 30 odd years ago. He suggested that If he wanted to break the electronic security system on any car it would be possible and he maintains that to this day. The car makers clearly are not concerned presumably because they are not at risk. This is indeed worrying if 2 BMW's can be stolen without keys there clealy is still a serious problem with the affected cars.

cptsideways

13,551 posts

253 months

Friday 2nd May 2014
quotequote all
Is it possible to "backdate" the cars updated software via the OBD port???

MaxPayne

19 posts

141 months

Friday 2nd May 2014
quotequote all
I'm curious to know whether the F series models are susceptible to the same hack. Some scrote attempted to steal my old car (e90 330i M-Sport) back in September 2012. I've since traded this in for an F20 125d.

I've yet to find anyone who's had their F10/20/30 stolen other than by having the keys taken.

Yadizzle1

689 posts

126 months

Friday 2nd May 2014
quotequote all
My dealer told me of a story where two x5's had been stolen from the same house without breaking into the cars. Apparently they lifted the cars slowly onto a flatbed truck as apparently if you raise the cars slowly and try to keep them level, the tilt sensor won't activate!

MaxPayne

19 posts

141 months

Saturday 3rd May 2014
quotequote all
Yadizzle1 said:
My dealer told me of a story where two x5's had been stolen from the same house without breaking into the cars. Apparently they lifted the cars slowly onto a flatbed truck as apparently if you raise the cars slowly and try to keep them level, the tilt sensor won't activate!
That's a fair point, although I would assume that lifting a car onto a flatbed is more the exception than the rule. I guess this could apply to any car.

I'm still not sure whether the newer F-series cars are as easy to hack.

MaxPayne

19 posts

141 months

Saturday 3rd May 2014
quotequote all
river_rat said:
My E92 335d was stolen last night. Software update done. Keys still in house.
I'm really sorry to hear that. I felt gutted with just a smashed side window and damaged interior, even though they didn't take the car, so I've no idea how it must feel to have the car actually taken.

Does this mean that the new security update has already been compromised I wonder?

Steffan

10,362 posts

229 months

Sunday 4th May 2014
quotequote all
MaxPayne said:
river_rat said:
My E92 335d was stolen last night. Software update done. Keys still in house.
I'm really sorry to hear that. I felt gutted with just a smashed side window and damaged interior, even though they didn't take the car, so I've no idea how it must feel to have the car actually taken.

Does this mean that the new security update has already been compromised I wonder?
It certainly raises the question. If two BMW's have been stolen from the same address without keys recently there must be a suspicion that the security systems are defective. More detail needed from the source who made those statements, please.

river_rat

688 posts

204 months

Sunday 4th May 2014
quotequote all
Apparently they have scanners and sit in a supermarket car park, for example, pick up the signal from your remote when you return to car, follow you home so they know where to find car later. Clone a key using scanned information, return and drive car away.

That is what the police told the guy that had 2 cars stolen from his driveway.

I know my car had the most up to date software, yet has gone without keys so there is obviously a major security flaw still.

pingu393

7,824 posts

206 months

Sunday 4th May 2014
quotequote all
river_rat said:
Apparently they have scanners and sit in a supermarket car park, for example, pick up the signal from your remote when you return to car, follow you home so they know where to find car later. Clone a key using scanned information, return and drive car away.

That is what the police told the guy that had 2 cars stolen from his driveway.

I know my car had the most up to date software, yet has gone without keys so there is obviously a major security flaw still.
I thought there were two parts to the code. One part is held within the key(s). The other part is held within the car. The car part is the only part that is transmitted and it is different on every transmission. Unless you have the key code you cannot unlock the full code. It's public key encryption.

Edit: I have just done some reading. It is public key encryption, but the car transmits a code (fairly obviously - doh) that the car reads and responds to. The code in the key is a rolling key and is different each time it is transmitted. The signal can be grabbed, but can't be used unless you know the next code. This is where there is a flaw in the system used by car manufacturers. Hackers have discovered the pseudo-random sequencing order of the key code changes. If they grab your current key code, they know the key code they need to open your car will be in the next few numbers in the sequence. As all cars start from a different place on the list, the chances of them being successful without a starting place are negligible.

Edited by pingu393 on Sunday 4th May 12:37

JimmyTheHand

1,001 posts

143 months

Sunday 4th May 2014
quotequote all
river_rat said:
Apparently they have scanners and sit in a supermarket car park, for example, pick up the signal from your remote when you return to car, follow you home so they know where to find car later. Clone a key using scanned information, return and drive car away.
I thought they used rolling codes now which is design to stop that sort of attack - though if the criminals have found a flaw in the algorithm (which wouldn't surprise me) used to generate the codes they'd be able to predict next codes required.

BE57 TOY

2,628 posts

148 months

Sunday 4th May 2014
quotequote all
Have any new shape Z4s been taken this way?

loose cannon

6,030 posts

242 months

Thursday 8th May 2014
quotequote all
Was mentioned on the breakfast show news this morning
And affects all new bmw's the guy presenting was stood next to a new z4
And advises crook locks and further security measures, I think bmw have a serious problem now
And the cars are going to become uninsurable

Mr Bimmer

283 posts

165 months

Thursday 8th May 2014
quotequote all
river_rat said:
My E92 335d was stolen last night. Software update done. Keys still in house.
How old was your car and are you 100% sure you had the security update?

Mr Bimmer

283 posts

165 months

Thursday 8th May 2014
quotequote all
loose cannon said:
Was mentioned on the breakfast show news this morning
And affects all new bmw's the guy presenting was stood next to a new z4
And advises crook locks and further security measures, I think bmw have a serious problem now
And the cars are going to become uninsurable
Let's not forget. Anyone who has left their engine running, keys in car or laying around is bound to be blaming it on key cloning.

Just saying.

loose cannon

6,030 posts

242 months

Thursday 8th May 2014
quotequote all
Very true there will always be blaggers, but it still doesn't do anything to reassure
Anybody who has spent out a lot of money on there pj
And the grief that comes with a stolen car is a right pitta
Let alone the financial loss

Mr Bimmer

283 posts

165 months

Thursday 8th May 2014
quotequote all
loose cannon said:
Very true there will always be blaggers, but it still doesn't do anything to reassure
Anybody who has spent out a lot of money on there pj
And the grief that comes with a stolen car is a right pitta
Let alone the financial loss
Car theft has been rife for as long as anyone can remember. It's nothing new. If owners are in fact proud of their cars, then they should maybe take a few precautions of their own.

MaxPayne

19 posts

141 months

Thursday 8th May 2014
quotequote all
I'd still really like to know if any of the F-series cars are susceptible to the hack that has supposedly been addressed on the older E cars.

I realise no software/security is fool-proof but I wonder whether the criminals have now worked out how to hack the OBD port of these newer cars.

My reasons for asking are purely selfish having bought an F20 last year!