BMW security flaw allows theft in 180 seconds or less

[tkyoshi]

Pretty Crazy Stuff!


There has been an unusual spike in the number of BMWs stolen in the UK this year, with some sources suggesting the number may be 300 cars or higher. The cars are being stolen without activating car alarms or immobilizers.

The suspected method involves the use of devices that plug into the car's OBD port and can program blank key fobs, leaving owners with keys to missing cars.


http://www.technolog.msnbc.msn.com/technology/technolog/hackers-steal-bmws-3-minutes-using-security-loophole-868400

http://www.1addicts.com/forums/showthread.php?t=712717

[djemzine]

How come it only happens to BMW? Meaning aren't there loopholes for other car manufactures out there?

[tkyoshi]

How come it only happens to BMW? Meaning aren't there loopholes for other car manufactures out there?

Well for the 1M it's easier because the alarm has a "Blind Spot" near the OBD II Port so you can fiddle with it w/o the alarm going off.

The OBD Port apparently is always active (even when the car is off) and allows programming of new keys through the OBD Port (which is the loophole). I would imagine probably disabling the programming of keys say when the car alarm is active or something would close this hole.

On the other hand this would mean tons of vehicles that would need to be re-flashed with a software update and who knows if they want to open that can of worms (bean counters).

[longitude]

repost: http://forums.redflagdeals.com/gone-3-minutes-keyless-feature-bmw-1200809/

[EPcjay]

repost: http://forums.redflagdeals.com/gone-3-minutes-keyless-feature-bmw-1200809/

The dates of the OP are older here than your link?