BMW Thefts

Author
Discussion

DivideBYZero

89 posts

164 months

Tuesday 8th May 2012
quotequote all
Removed my OBD port on my e92 M3 today. It's only held on by two philips head screws. If it's needed it can be returned fairly quickly. This will do until there is a software fix.

mrmr96

13,736 posts

204 months

Tuesday 8th May 2012
quotequote all
Could someone please tell me which types of key which are vulnerable to this.
Thanks.

Type 1


Type 2



Type 3 (two holes at the top, rectangular in shape)



Type 4 (different from type 3, as type 4 has one hole at the top and is trapezoidal in shape)


TallbutBuxomly

12,254 posts

216 months

Tuesday 8th May 2012
quotequote all
mrmr96 said:
Could someone please tell me which types of key which are vulnerable to this.
Thanks.

I believe these two from what i have seen online.

Type 3 (two holes at the top, rectangular in shape)



Type 4 (different from type 3, as type 4 has one hole at the top and is trapezoidal in shape)

TallbutBuxomly

12,254 posts

216 months

Tuesday 8th May 2012
quotequote all
camel_landy said:
Neat idea...

Would need some thought put into the areas of:

  • What if you have a replacement ECU?
  • Lost codes!
  • If you put a wrong password in, do you get locked out? If not, it just leaves it open for a 'brute force' attack... Which potentially wouldn't slow the thieves down much (if at all!!).
Building on this idea, maybe a system where the code/cert is kept in the key and the OBD port isn't unlocked until the car/key are together... With maybe a manual override using the built in emergency key??

M
Same as with a bank card three times then lockout requiring master override from bmw direct. Leaves no room for continuous attack. Car crims are not going to want to spend 5 minutes fighting with the cars obc to recode a key.

The second that a passkey is installed crims will move to a new/old method such as nicking keys. If you manage to lock yourself out bmw can use their own password to give you access.

Major Fallout

5,278 posts

231 months

Thursday 17th May 2012
quotequote all
I might have solved the problem.






Before I get a swat team bursting through the house, its NOT a real grenade. Its a joke one!

mikel429

124 posts

161 months

Thursday 17th May 2012
quotequote all
MX7 said:
Of course they could. Not only 'could' they, I think it's their obligation to do so if there's such a fundamental flaw.

It might be expensive, but it's far cheaper than losing your reputation.
This reminds me of Ford US and the mid-70's calamity of the Pinto. They kept blowing up when rear-ended due to a flaw in the fuel tank design. Ford sat down and discovered that it would be $100 million to recall and fix all the cars or $50 million to simply pay compensation and write a "We're dreadfully sorry this happened, now here's a cheque and never mention it again" letter. No prizes for guessing which route they went down.

Either way, I would still be less than pleased if some scrote was able to steal my £45k+ BMW with nothing more than a laptop and a cable bought from eBay....

Frik

13,542 posts

243 months

Thursday 17th May 2012
quotequote all
mikel429 said:
No prizes for guessing which route they went down.
Indeed, no prizes as this didn't actually happen.

ITP

2,014 posts

197 months

Thursday 17th May 2012
quotequote all
Why is the OBD 'live' all the time though? If you had to put one of your keys in and have the ignition on before the OBD would release any information there wouldn't be a problem. If your car is in for service at main or Indy they will have your key anyway to do this.

It's just poor design by BMW. They can break into your car but can't turn on the radio or roll down an electric window but they can copy a key and drive your car off? Muppets.

ITP

2,014 posts

197 months

Thursday 17th May 2012
quotequote all
Why is the OBD 'live' all the time though? If you had to put one of your keys in and have the ignition on before the OBD would release any information there wouldn't be a problem. If your car is in for service at main or Indy they will have your key anyway to do this.

It's just poor design by BMW. They can break into your car but can't turn on the radio or roll down an electric window but they can copy a key and drive your car off? Muppets.

theaxe

3,559 posts

222 months

Thursday 17th May 2012
quotequote all
ITP said:
Why is the OBD 'live' all the time though? If you had to put one of your keys in and have the ignition on before the OBD would release any information there wouldn't be a problem. If your car is in for service at main or Indy they will have your key anyway to do this.
Not defending them but I guess it's to allow owners who have lost all of their keys to get new ones coded. I think Audi's approach of not allowing keys to be coded without a live connection/authentication to HQ in Germany is a sensible precaution.

ITP

2,014 posts

197 months

Thursday 17th May 2012
quotequote all
I bet Audi salesmen are loving it too, 'don't buy a BMW, the security is dire, your car may get nicked and your insurance will go through the roof!'

Matthen

1,292 posts

151 months

Thursday 17th May 2012
quotequote all
theaxe said:
Not defending them but I guess it's to allow owners who have lost all of their keys to get new ones coded. I think Audi's approach of not allowing keys to be coded without a live connection/authentication to HQ in Germany is a sensible precaution.
Maybe they should say... "If you're stupid enough to lose both keys, its going to cost you a new ECU" rather than put all these cars at risk.

Edited by Matthen on Thursday 17th May 16:00

va1o

16,032 posts

207 months

Thursday 17th May 2012
quotequote all
hora said:
Why isn't it on Watchdog yet? Watchdog's Solicitors ensuring they wont get sued/get the story correct first?!
This has already been covered.

crocodile tears

755 posts

146 months

Friday 18th May 2012
quotequote all
Major Fallout said:
I might have solved the problem.






Before I get a swat team bursting through the house, its NOT a real grenade. Its a joke one!
biggrin

V8A*ndy

3,695 posts

191 months

Friday 18th May 2012
quotequote all
crocodile tears said:
Major Fallout said:
I might have solved the problem.






Before I get a swat team bursting through the house, its NOT a real grenade. Its a joke one!
biggrin
Stole that for facebook.

Cracker hehe

Paul v8

756 posts

165 months

Saturday 19th May 2012
quotequote all
Not quite sure how it works but there is an I phone app BMW have that you program in with your car to unlock the car with , makes life easier when cant find the keys

ikonic

403 posts

198 months

Saturday 19th May 2012
quotequote all
Paul v8 said:
Not quite sure how it works but there is an I phone app BMW have that you program in with your car to unlock the car with , makes life easier when cant find the keys
Yes, this is a feature available on the latest F models.


Interestingly, it also comes with a "Find my BMW" app which I think is linked to Google maps.


I think it was originally designed for numpties that lost their car in a car park, but I'm guessing it'd make quite a nice tracker-style system which I think thieves would possibly have a job in removing seeing as it's linked in with the car's navigation package.


anonymous-user

54 months

Saturday 19th May 2012
quotequote all
Major Fallout said:
I might have solved the problem.






Before I get a swat team bursting through the house, its NOT a real grenade. Its a joke one!
Try to remember to tell Mrs Fallout to use the passenger door for entry purposes.................. ;-)



ETA: unintentional double entendre there also !!




aw51 121565

4,771 posts

233 months

Sunday 20th May 2012
quotequote all
Frik said:
mikel429 said:
No prizes for guessing which route they went down.
Indeed, no prizes as this didn't actually happen.
There is a page from what appears to be a Cost-Benefit Analysis of the problem mike1429 is referring to, in an early issue of Ralph Nader's book "Unsafe at any speed".

Reference is made to this same problem - including sight of the same page - in at least one TV programme, which also uses the (possibly less than helpful) spoken comment "It was cheaper to let them burn!".

smile

giggity

Original Poster:

849 posts

161 months

Wednesday 12th September 2012
quotequote all
BMW issue on watchdog (bbc 1) now!