Connected Drive hacked..........

Connected Drive hacked..........

Author
Discussion

8Tech

Original Poster:

2,136 posts

199 months

Tuesday 3rd March 2015
quotequote all
It has been reported that around 2.2 million BMW's have security flaws in the Connected Drive system allowing thieves to unlock doors and track cars through a mobile phone without leaving any trace. BMW stated that the "closed" networks are secure but this hack has shown otherwise.

The hack means that the car can be tracked and opened without leaving any trace. This is the result of BMW setting functions accessible remotely for opening the doors, locating the car, speed data, programming and emails.

In my opinion, this system is a pre-cursor to the telematics systems the manufacturers are planning for the cars. Using the upcoming European eCall system that automatically notifies the emergency services in the event of an accident, whether you want it to or not, the "closed" systems will allow the manufacturers to remain in contact with the vehicle through the telematics and monitor the car every time it is driven and notify the owner when service is due, or a fault has occurred. Sounds good? Well wait until they then book the car in for you and let you know, or notify VOSA that you are now driving a car with a warning light showing. (OBD3 if you didn't already know). Or "sorry sir, your car is not warranted for blowing the guts out of the engine because you were illegally doing 120mph on a track day and that is outside the warranty T&C's).

They then remove the diagnostics socket from your car, and as the system is a closed network, your chosen non-OEM garage cannot access the vehicles diagnostics without purchasing the info from the dealer at massive cost.

Welcome to the world on monopoly through innovation.

Jon1967x

7,232 posts

125 months

Tuesday 3rd March 2015
quotequote all
So what's new? You stick your key fob in a machine at the dealer and it tells them loads, no doubt they also know driving parameters as at least one of my cars includes a warning that it stores this kind of information and it can be used in court, my tracker company often ring me up telling where and how fast I'm driving when they lost contact (long running saga on a faulty tracker), your car will probably already ring their help desk if the airbags deploy, and unless you have the fight kit or know the magic sequence of fiddling with buttons you can't adjust the car status to say it's been serviced or the mot has been done.

I also seem to recall I can book a service appointment through the idrive not that I've tried.

Having a car know it's going to breakdown before it does would be useful. Avoiding consequential damage because you had a belt fixed before it failed would save money.

The only thing I'd be concerned of is the security of the data transfer, but then in a world full of the Internet of things that's not going to be unique to cars.

Cars won't be what they are today. It's on the cusp of a revolution. Not only will the technology change eg EV and Hydrogen powered cars, the whole concept of owning your own car might change. Or you'll own it but it will drive itself. To think 20 years ago you were lucky if a BMW had air con or came with a radio. They may just about have traction control, but a 2.5l straight 6 engine would "pump out" 175bhp. How times change.



Ps block exemption legislation will force the manufacturers to allow others to service the cars.



Vroomer

1,866 posts

181 months

Wednesday 4th March 2015
quotequote all
8Tech said:
They then remove the diagnostics socket from your car, and as the system is a closed network, your chosen non-OEM garage cannot access the vehicles diagnostics without purchasing the info from the dealer at massive cost.

Welcome to the world on monopoly through innovation.
Incorrect. It is the obligation to provide free and open access to all dealers that has resulted in all the keyless thefts.

Jon1967x said:
Ps block exemption legislation will force the manufacturers to allow others to service the cars.
Correct.

drmark

4,850 posts

187 months

Wednesday 4th March 2015
quotequote all
8Tech said:
It has been reported that around 2.2 million BMW's have security flaws in the Connected Drive system allowing thieves to unlock doors and track cars through a mobile phone without leaving any trace. BMW stated that the "closed" networks are secure but this hack has shown otherwise.

The hack means that the car can be tracked and opened without leaving any trace. This is the result of BMW setting functions accessible remotely for opening the doors, locating the car, speed data, programming and emails.

In my opinion, this system is a pre-cursor to the telematics systems the manufacturers are planning for the cars. Using the upcoming European eCall system that automatically notifies the emergency services in the event of an accident, whether you want it to or not, the "closed" systems will allow the manufacturers to remain in contact with the vehicle through the telematics and monitor the car every time it is driven and notify the owner when service is due, or a fault has occurred. Sounds good? Well wait until they then book the car in for you and let you know, or notify VOSA that you are now driving a car with a warning light showing. (OBD3 if you didn't already know). Or "sorry sir, your car is not warranted for blowing the guts out of the engine because you were illegally doing 120mph on a track day and that is outside the warranty T&C's).

They then remove the diagnostics socket from your car, and as the system is a closed network, your chosen non-OEM garage cannot access the vehicles diagnostics without purchasing the info from the dealer at massive cost.

Welcome to the world on monopoly through innovation.
Reported by whom - and where? Edited to add - found it.
PS Do you wear a tin-foil hat?


Edited by drmark on Wednesday 4th March 12:32

anonymous-user

55 months

Wednesday 4th March 2015
quotequote all
I got a call from my dealer the other day asking me if I wanted the car serviced. 1 year old, 11000 miles, not due for another year.

So much for remaining "in contact with the vehicle through the telematics and monitor the car every time it is driven and notify the owner when service is due, or a fault has occurred".

Dryce

310 posts

133 months

Wednesday 4th March 2015
quotequote all
Vroomer said:
Incorrect. It is the obligation to provide free and open access to all dealers that has resulted in all the keyless thefts.
The underlying issue is poor implementation.

The stuff about free and open access is a fairly pathetic excuse. It's exposed the poor implementation.


8Tech

Original Poster:

2,136 posts

199 months

Wednesday 4th March 2015
quotequote all
drmark said:
PS Do you wear a tin-foil hat?


Edited by drmark on Wednesday 4th March 12:32
Tin-foil hat. WTF???