RE: Video: Key fob reprogrammers steal BMW in 3 mins

RE: Video: Key fob reprogrammers steal BMW in 3 mins

Author
Discussion

Bumble SV

248 posts

208 months

Tuesday 3rd July 2012
quotequote all
Madmatt74 said:
Normal key locking the car in Reverse worked well for SAAB.

I never heard of anyone driving away in one that didnt already have a key.

Simple and affective, until they work around it.
Although I don't disagree with your comment, it is an unfair comparison - I've heard of very few people WANTING a Saab!

Cotic

469 posts

154 months

Wednesday 4th July 2012
quotequote all
Matgoodwin said:
When I bought my 123d (which was stolen last month using this method), it only came with one key. I decided it would be wise to get another key in case I lost it. When I went to BMW, they had to order me a new one which took a couple of days to arrive and came cut and pre-programmed for my car. They did not need access to my car or the existing key to get this so the idea that you need the OBD port for this purpose is completely false. Also I have read that it the tool the thieves are using does not program a new key from the car, it adds an existing key from any old BMW to the accepted keys list in the CAS, which suggests to me that the system is actually getting exploited rather than doing what it should be doing (I may be completely wrong about this - please correct me if I am).
Not really - BMW have the data on their internal system to programme you another key, they don't have to access your car to do it, because, well - they built it in the first place.

The issue here is that the crims can do all this ONLY by accessing your car, they do not need privileged acccess to BMW's systems to do it. Therein lies the problem. Blame the EU 'block exemption' requirements...

Baron Greenback

7,026 posts

152 months

Wednesday 4th July 2012
quotequote all
roger.daltrey said:
In reply to previous poster about the tracker - you can buy a 'jammer' from Amazon of all places

See this

http://www.amazon.co.uk/Mini-Jammer-Blocker-Vehicl...

Only £20 and it blocks GPS

Didn't know it was this easy !!

Seems to make Trackers redundant if they are this easy to overcome ?
I was amazed this was for sale in amazon I email to press officer at amazon and it is no longer for sale at amazon. For the moment!

Scuffers

20,887 posts

276 months

Wednesday 4th July 2012
quotequote all
Cotic said:
Matgoodwin said:
When I bought my 123d (which was stolen last month using this method), it only came with one key. I decided it would be wise to get another key in case I lost it. When I went to BMW, they had to order me a new one which took a couple of days to arrive and came cut and pre-programmed for my car. They did not need access to my car or the existing key to get this so the idea that you need the OBD port for this purpose is completely false. Also I have read that it the tool the thieves are using does not program a new key from the car, it adds an existing key from any old BMW to the accepted keys list in the CAS, which suggests to me that the system is actually getting exploited rather than doing what it should be doing (I may be completely wrong about this - please correct me if I am).
Not really - BMW have the data on their internal system to programme you another key, they don't have to access your car to do it, because, well - they built it in the first place.

The issue here is that the crims can do all this ONLY by accessing your car, they do not need privileged acccess to BMW's systems to do it. Therein lies the problem. Blame the EU 'block exemption' requirements...
sorry, EU regs have nothing to do with this, that covers OBD ECU codes, NOT security systems.

the problem (for the X time) is that the CAS units are un-encrypted, thus to add a key (number) to it is child's play.



Zod

35,295 posts

260 months

Wednesday 4th July 2012
quotequote all
Well, it's happened again. 19 months after the M5 got stolen, 1 month after the last attempt to steal the X5, it was stolen at 2.30 in the morning.

I cannot express how furious this makes me.


ZesPak

Original Poster:

24,447 posts

198 months

Wednesday 4th July 2012
quotequote all
Zod said:
Well, it's happened again. 19 months after the M5 got stolen, 1 month after the last attempt to steal the X5, it was stolen at 2.30 in the morning.

I cannot express how furious this makes me.
eek

What kind of place was it in? Driveway? Garage? Any other security rather than the regular BMW 'security'?

Gutted for you!

Zod

35,295 posts

260 months

Wednesday 4th July 2012
quotequote all
ZesPak said:
Zod said:
Well, it's happened again. 19 months after the M5 got stolen, 1 month after the last attempt to steal the X5, it was stolen at 2.30 in the morning.

I cannot express how furious this makes me.
eek

What kind of place was it in? Driveway? Garage? Any other security rather than the regular BMW 'security'?

Gutted for you!
Outside the house. Just the BMW "security". Insurance company didn't require a Tracker when we bought the car new. Should have got one though. The M5 had one and was recovered as a result.

bertie

8,550 posts

286 months

Wednesday 4th July 2012
quotequote all
Zod said:
ZesPak said:
Zod said:
Well, it's happened again. 19 months after the M5 got stolen, 1 month after the last attempt to steal the X5, it was stolen at 2.30 in the morning.

I cannot express how furious this makes me.
eek

What kind of place was it in? Driveway? Garage? Any other security rather than the regular BMW 'security'?

Gutted for you!
Outside the house. Just the BMW "security". Insurance company didn't require a Tracker when we bought the car new. Should have got one though. The M5 had one and was recovered as a result.
Bugger, sorry to hear that.frown

I'm in 2 minds about Trackers , part of me thinks catch the little scrotes...and then the other part thinks once it's been nicked I don't want it back, just take the insurance money.

Gixer

4,463 posts

250 months

Wednesday 4th July 2012
quotequote all
peteO said:
im gonna say the same as most people... if they want it, no matter how well you secure it, they'll just break in to your house, beath the crap out of you and take the keys!

on a seperate note, seeing as everyone apart from me seems to know how to break in to cars, how do i get in to my 1980 corvette? the battery is dead and the door locks are frozen so wont open with the key...
Friend of mine locked himself out of a C3 vette a couple of years ago. AA/RAC was called (can't remember which), he tried all the usual methods and failed to get in. He sat in deep thought for a few mins, then tried something very original and got in. Top marks for thinking out of the box.

Am I going to say how he got in on a public forum? Not a chance. Would it work on other makes? Certainly.

lombardo8

105 posts

148 months

Wednesday 4th July 2012
quotequote all
Gixer said:
Friend of mine locked himself out of a C3 vette a couple of years ago. AA/RAC was called (can't remember which), he tried all the usual methods and failed to get in. He sat in deep thought for a few mins, then tried something very original and got in. Top marks for thinking out of the box.

Am I going to say how he got in on a public forum? Not a chance. Would it work on other makes? Certainly.
Pictures or it didnt happen. evil

lombardo8

105 posts

148 months

Wednesday 4th July 2012
quotequote all
Zod said:
Well, it's happened again. 19 months after the M5 got stolen, 1 month after the last attempt to steal the X5, it was stolen at 2.30 in the morning.

I cannot express how furious this makes me.
Will you be buying another BMW to replace the stolen BMW that replaced the stolen BMW? confusedmad

Cotic

469 posts

154 months

Wednesday 4th July 2012
quotequote all
Scuffers said:
sorry, EU regs have nothing to do with this, that covers OBD ECU codes, NOT security systems.

the problem (for the X time) is that the CAS units are un-encrypted, thus to add a key (number) to it is child's play.
Indeed, but you'll agree that without BER, the crim's abilty to get hold of the diagnostic equipment in the first place would be rather more tricky?

The added key to the CAS unit would be an 'easy' fix, I'll grant you, but only workable if the BER allows it...

bertie

8,550 posts

286 months

Wednesday 4th July 2012
quotequote all
Cotic said:
Scuffers said:
sorry, EU regs have nothing to do with this, that covers OBD ECU codes, NOT security systems.

the problem (for the X time) is that the CAS units are un-encrypted, thus to add a key (number) to it is child's play.
Indeed, but you'll agree that without BER, the crim's abilty to get hold of the diagnostic equipment in the first place would be rather more tricky?

The added key to the CAS unit would be an 'easy' fix, I'll grant you, but only workable if the BER allows it...
Why have key pairing available via ODB, just not necessary, it's just to make it convinient for dealers and for production at end of line.

As I've said beofre, plenty of other manufacturers require one authenticated key to be present to allow adding of further keys, that sorts it.


ZesPak

Original Poster:

24,447 posts

198 months

Wednesday 4th July 2012
quotequote all
I stated this before, but can people who like to blame the EU for this please elaborate how:

  1. It's the EU's fault the OBD is accessible without opening a door?
  2. It's the EU's fault the OBD is accessible without triggering the alarm?
  3. It's the EU's fault it's that easy to program new keys in the car? No code required, no new key?
As for the last point, more than one manufacturers will warn you that there will be serious costs involved if you lose BOTH keys, and advise you to always have a spare one made if you lose one. Why? Without an original key, the entire unit will need replacement. That's not only costly, but a quite some work and not to be done without opening the door or activating the alarm.

Edited by ZesPak on Wednesday 4th July 11:01

Zod

35,295 posts

260 months

Wednesday 4th July 2012
quotequote all
lombardo8 said:
Zod said:
Well, it's happened again. 19 months after the M5 got stolen, 1 month after the last attempt to steal the X5, it was stolen at 2.30 in the morning.

I cannot express how furious this makes me.
Will you be buying another BMW to replace the stolen BMW that replaced the stolen BMW? confusedmad
Dont' know at this stage. I've just written to their UK MD suggesting I won't unless I can be reassured that the problem has been resolved.

bertie

8,550 posts

286 months

Wednesday 4th July 2012
quotequote all
ZesPak said:
I stated this before, but can people who like to blame the EU for this please elaborate how:

  1. It's the EU's fault the OBD is accessible without opening a door?
  2. It's the EU's fault the OBD is accessible without triggering the alarm?
  3. It's the EU's fault it's that easy to program new keys in the car?
Quite, EU rules have nothing to do with it.

It's a system put in place to make production easy and the crims have found a way in.

Scuffers

20,887 posts

276 months

Wednesday 4th July 2012
quotequote all
Cotic said:
Scuffers said:
sorry, EU regs have nothing to do with this, that covers OBD ECU codes, NOT security systems.

the problem (for the X time) is that the CAS units are un-encrypted, thus to add a key (number) to it is child's play.
Indeed, but you'll agree that without BER, the crim's abilty to get hold of the diagnostic equipment in the first place would be rather more tricky?

The added key to the CAS unit would be an 'easy' fix, I'll grant you, but only workable if the BER allows it...
once again, there is no EU directive that says BMW have to give out the info/equipment for the security systems.

BER covers diagnostics, period.

BMW made the choice to use OBD for the CAS unit and then NOT to encrypt it.

Uncle John

4,322 posts

193 months

Wednesday 4th July 2012
quotequote all
@ZOD.

That is an absoulute choker!! To say you must be fuming must be an understatement.

Looks more han likely it's the same scumbags doing the nicking and must be local.

What did the Police say or do??

Zod

35,295 posts

260 months

Wednesday 4th July 2012
quotequote all
Uncle John said:
@ZOD.

That is an absoulute choker!! To say you must be fuming must be an understatement.

Looks more han likely it's the same scumbags doing the nicking and must be local.

What did the Police say or do??
Said they'd go looking for it. Not much hope there without a Tracker.

Sexual Chocolate

1,583 posts

146 months

Wednesday 4th July 2012
quotequote all
From what year and what BMW models does this effect? Could someone break into my 57 plate X5 and do the same trick?