Beemer, Open Thyself! – Security vulnerabilities in BMW's ConnectedDrive - Page 1
Forum section: electronics / general

author: vbalazs
author_rank: Newbie
timestamp: February 17, 2015, 06:35:56 am
content: Hi, I thought it would be worth sharing and talking about this:http://www.heise.de/ct/artikel/Beemer-Open-Thyself-Security-vulnerabilities-in-BMW-s-ConnectedDrive-2540957.htmlQuoteWe know that if something is connected to outside world, it can be hacked. But it looks like they didn't even care.Anyway, nice reverse engineering and documentation that's for sure

author: Rerouter
author_rank: Super Contributor
timestamp: February 17, 2015, 09:47:54 am
content: I'm half certain there was a similar story about a prius or similar hybrid smart car where you could spam the accelerator value on the can bus via some wireless vulnerability, the brake may have still worked, but i would not imagine many would know how to respond, (the brake is more powerful than the motor for anyone curious)

author: wagon
author_rank: Frequent Contributor
timestamp: February 17, 2015, 09:55:15 am
content: Skynet.....

author: max_torque
author_rank: Super Contributor
timestamp: February 17, 2015, 10:54:23 am
content: Sorry to spoil the party, but it's largely irrelevant!I can "get into your car" with nothing more complex than a house brick (or a small piece of a spark plug ceramic insulator....) in less than 5 secs.Why i would want to spend a huge amount of time an effort to "hack" my way in i have no idea??

author: nctnico
author_rank: Super Contributor
timestamp: February 17, 2015, 11:03:04 am
content: No damage and no car alarm going off?

author: pickle9000
author_rank: Super Contributor
timestamp: February 17, 2015, 11:11:46 am
content: No info on making the vehicle drivable in the article. Still, if car theft was the game making new keys would require computer access.

author: Unknown
author_rank: Unknown
timestamp: February 17, 2015, 05:52:56 pm
content: Certainly in Australia there has been a dramatic decrease in theft of newer cars using "traditional" methods (hot wiring, ECU manipulation etc...) but an increase in break and enter offences. Lots of crooks have taken a liking to breaking into your house and stealing your car keys along with your car (how many of you keep your keys at the front door or in a bowl in the living area/kitchen?).Remote unlocking of cars has been possible for quite a while; Volkswagen comes to mind. NRMA (one of the roadside assistance companies in Australia) have been able to do this for years. But they still cannot start the vehicle without the proper key as far as I know.

author: Yago
author_rank: Frequent Contributor
timestamp: February 17, 2015, 06:08:09 pm
content: Quote from: max_torque on February 17, 2015, 10:54:23 amUnlock at red lights and carjack?

author: dannyf
author_rank: Super Contributor
timestamp: February 18, 2015, 01:17:13 am
content: QuoteIs it really a "beemer"?

author: baljemmett
author_rank: Unknown
timestamp: February 18, 2015, 03:13:04 am
content: Quote from: dannyf on February 18, 2015, 01:17:13 amFor some reason, some BMW fans seem to use 'beemer' for the bikes and 'bimmer' for the cars. Peculiar; I avoid the distinction by only using the diminutive when speaking...

author: SeanB
author_rank: Super Contributor
timestamp: February 18, 2015, 04:52:27 am
content: The one car where most seem to have a very rare option in the original purpose, indicators. As well, even though the vehicles have had it since at least the 1970's as standard, they are the most common vehicles driven with non working brake lights or headlights.

author: FreddyVictor
author_rank: Regular Contributor
timestamp: February 18, 2015, 09:40:56 am
content: Quote from: nctnico on February 17, 2015, 11:03:04 ameven worse, up until a year or so ago, once thief had access to OBD port, they could program a blank key and simply drive awaywas a longthreadon uk forum where it was almost a daily post from someone saying they woke up to find their vehicle gone

author: Unknown
author_rank: Unknown
timestamp: February 18, 2015, 07:51:11 pm
content: Quote from: mojo-chan on February 18, 2015, 09:03:02 amI'm pretty sure the owner will be calling the Police the moment they realise their vehicle has been stolen. This also largely prevents it being resold.

author: mikeselectricstuff
author_rank: Super Contributor
timestamp: February 18, 2015, 07:57:51 pm
content: Quote from: Halon on February 18, 2015, 07:51:11 pmExcept if it ends up in a container to country unknownOr broken for sparesOr given a new identity

author: jlmoon
author_rank: Unknown
timestamp: February 18, 2015, 08:06:04 pm
content: Quote from: mojo-chan on February 18, 2015, 09:03:02 amQuoteYou left out one important detail... Pretty hard to sell a car without a Clear Title.

author: tom66
author_rank: Super Contributor
timestamp: February 18, 2015, 08:47:37 pm
content: Quote from: jlmoon on February 18, 2015, 08:06:04 pmPlenty of people who will buy one unknowingly or knowingly with the ability to forge documents or remove security information.