BMW ConnectedDrive hacked

[swimd]

A security researcher commissioned by ADAC found a vulnerability in the BMW software that allowed him to open any BMW ConnectedDrive enabled car wirelessly. 2 million vehicles are affected.

BMW pushed out a silent update in december but cars that were parked in an underground garage without cell reception or cars that had the battery disconnected for a longer period of time may still be vulnerable...

https://translate.google.com/translate?hl=de&s...

[swimd]

Here is the official story as a PDF:

http://www.fiaregion1.com/download/news/bmw-securi...

[Ved]

It doesn't say the car can be started with the same exploit though but it's not exactly to tricky to steal modern BMWs

Why it wasn't encrypted before is baffling.

[Terminator X]

"ADAC has found security loopholes in BMW Connected Drive-equipped vehicles. It only takes one time preparation and a few minutes to open cars by mobile phone without leaving any traces. According to BMW, this problem affects 2.2 million vehicles of numerous model series manufactured under the BMW, Mini and Rolls Royce brands (see enclosed list)."

Frightening especially if you happened to be driving at the time! I'm sure there was a long thread on here recently with the usual tin foil hat wearers concerned about wifi type data harvesting and transmission (me included) whilst the usual crowd ridiculed us.

TX.

[TheEnd]

" It only takes one time preparation and a few minutes to open cars by mobile phone without leaving any traces."

I wonder what the "one time preparation" is, that sounds like the "get into the car and pair your phone with it" which is more complex then the centuries old pushing a key into a bar of soap to make an impression.

[anonymous-user]

Thing is, currently i can "access your car" in less than 2 seconds, with nothing more than a brick, as long as i don't care about breaking some glass, which tbh, if all i want to do it nick your SatNav, i don't.


ANY security can be broken, the issue is with the fact that our modern legal system seems helpless to stop these scum doing this time after time after time.........

[Northernchimp]

If somebody is determined enough to break in then look on the bright side, no broken glass.

Of course, they probably wouldn't have done so (or selected your car for robbing) if BMW hadn't made it so easy for them in the first place.