Live data from Hacker News

A Dutch first: Ingenious BMW theft attempt

mrooding.me

201–210 of 325 posts

Re: A Dutch first: Ingenious BMW theft attempt

#201
post #6

The thieves would have been wiser to take something, anything to make the narrative of the original break in more believable. They didn't sell the narrative well enough, which left people curious.

I wonder why they bothered with the smash - broken glass would make people take their car to a dealer. Just the "failed jimmying" might have gone if not unnoticed as a police issue procrastinated in fixing. Maybe they were just frustrated auto thieves.

How would they have disabled the alarm without breaking into the car?

Re: A Dutch first: Ingenious BMW theft attempt

#202
post #162

Earlier quoted context omitted.

Yes, like I alluded to it's trivial drawing from any other trusted boot chain implementation. The even better and less user-intensive way to do it would be with asymmetric encryption - the ECU only trusts flashes signed with the vendor public key and to make things even more secure, you could encrypt each flash file server side with a keypair derived each boot on the ECU and sent over the Internet (many manufacturers…

they also dont like tuners because cars engines are often made the same for multiple "trims" so the car with 110 and 160 hp have the same engine but different "map" in the ecu. and only with ecu reflash you can get more power that would cost you x amount of money. imagine a CPU where 6 and 8 core variants are the same but the 6 core is locked in bios and you can unlock it with some tuning software, its like that. and…

> imagine a CPU where 6 and 8 core variants are the same but the 6 core is locked in bios and you can unlock it with some tuning software, its like that.

But isn't this already the case (except locking might be in CPU firmware)? AFAIR this is the case with GPUs.

Re: A Dutch first: Ingenious BMW theft attempt

#203
post #146

Earlier quoted context omitted.

> Here in downtown Amsterdam we called the police because the rear window of someone's car had just been smashed outside our office, and the police's response was "Has anyone been hurt? Nope? Then we're not coming". Amsterdam currently has a big police shortage, that's why. It's not normal, it's just a problem in Amsterdam. https://www.dutchnews.nl/news/2018/07/amsterdam-is-not-lawle...

> It's not normal, it's just a problem in Amsterdam. Right, the two times we needed police in Limburg (Echt and Maastricht, few years apart) it didn't happen either. It had to be life-threatening and the people didn't literally shout "we'll kill you" so the police wasn't gonna bother. Meanwhile on TV they're cycling through parks to fine people some 99 euros for not having a well-behaved dog on a leash (could have us…

Poor dude? You don't park in a disabled spot unless you have a right to be there. That should be common sense.

Re: A Dutch first: Ingenious BMW theft attempt

#204

I used to fix cars for a living. Sometimes it involved “cracking” alarm & immobiliser systems. My clients all claimed they broke/lost their keys to their car - most of the time they were believable (car stuck in front of their driveway, etc). Sometimes less so, but I’d do it anyway because I needed the money and I had no proof of the contrary (innocent until proven guilty right?), although given the sad conditions of…

I just unclip my steering wheel, and pull out my main relay (dash mounted, race car spec). I don't think the car is going very far without those.

It'll go damn far - on a flatbed.

Re: A Dutch first: Ingenious BMW theft attempt

#205
post #82

Earlier quoted context omitted.

You would be surprised how much effort businesses put into building a relationship with local police, that is a big part of a security director's job. The more people they have on site, or the higher their inventory value, the more they are willing to spend on the local PD. I've seen areas built on company property that are effectively police sub-stations, giving cops a place to do paperwork and take a break, in orde…

It is different.

Where, in the Netherlands? I can't think of a way to say this that doesn't sound rude, so I'll just say it: how informed is your opinion? Roughly how big a company are we talking? Have you managed security, or managed security managers?

I ask because a long time ago I worked at a multinational that had facilities all over Europe. I'd have remembered if we got pushback from local management on this matter, but then I suppose they always could have been lying about their security programs... there isn't really a good way to audit law enforcement outreach - until something goes wrong.

Re: A Dutch first: Ingenious BMW theft attempt

#206
post #204

Earlier quoted context omitted.

I just unclip my steering wheel, and pull out my main relay (dash mounted, race car spec). I don't think the car is going very far without those.

It'll go damn far - on a flatbed.

haha! Yeah, but by the time you're involving a flatbed in your thieving, I don't know if any car security is going to be much good :P

Re: A Dutch first: Ingenious BMW theft attempt

#207
Would it be possible, that the order of actions was actually different? The thief first pushed thin tools through the door gasketing and actually cut the wires from the outside. Not sure how well and how successfully, but i actually presume that this wasn't as good cut as they tried to achieve. Then, they tried to break the window and continue with the theft, but the system reported them too fast anyways...?

Re: A Dutch first: Ingenious BMW theft attempt

#208

I used to fix cars for a living. Sometimes it involved “cracking” alarm & immobiliser systems. My clients all claimed they broke/lost their keys to their car - most of the time they were believable (car stuck in front of their driveway, etc). Sometimes less so, but I’d do it anyway because I needed the money and I had no proof of the contrary (innocent until proven guilty right?), although given the sad conditions of…

In Russia and, I guess, similar countries, it's quite rare to encounter a car which isn't protected by an external protection system (not sure how it's called in English, in Russian it's usually called "Сигнализация") which includes shock sensors, alarm system, remote control and car block which protects some vital engine circuits. There are systems with dialog protocol between remote control and car with actual encr…

In Russia and ex-USSR in general cars are very often stolen disregarding any car alarm installed and whatever GPS trackers are inside, even rental cars with multiple trackers and a live feed to someone monitoring them. The reason - they only need a few hours to get to their base of operations where car is dismantled in to parts and then sold separately, often under protection by local law enforcement. And people can't do much - yes, you can see sudden appearance of your car parts on the used parts market, same color, same tuning etc. but you can't prove anything, and all part numbers would be destroyed during dismantle.

Re: A Dutch first: Ingenious BMW theft attempt

#209
post #162

Earlier quoted context omitted.

Yes, like I alluded to it's trivial drawing from any other trusted boot chain implementation. The even better and less user-intensive way to do it would be with asymmetric encryption - the ECU only trusts flashes signed with the vendor public key and to make things even more secure, you could encrypt each flash file server side with a keypair derived each boot on the ECU and sent over the Internet (many manufacturers…

they also dont like tuners because cars engines are often made the same for multiple "trims" so the car with 110 and 160 hp have the same engine but different "map" in the ecu. and only with ecu reflash you can get more power that would cost you x amount of money. imagine a CPU where 6 and 8 core variants are the same but the 6 core is locked in bios and you can unlock it with some tuning software, its like that. and…

Except that CPU manufacturers DO like that, and will give out special unlocked versions of their CPUs and even sponsor overclockers, to see what people can do with their hardware.

This also happens with car manufacturers, in racing and such. Tuners are more under the radar so they don't like that, as well as the warranty claims that were mentioned.

Re: A Dutch first: Ingenious BMW theft attempt

#210

Earlier quoted context omitted.

they also dont like tuners because cars engines are often made the same for multiple "trims" so the car with 110 and 160 hp have the same engine but different "map" in the ecu. and only with ecu reflash you can get more power that would cost you x amount of money. imagine a CPU where 6 and 8 core variants are the same but the 6 core is locked in bios and you can unlock it with some tuning software, its like that. and…

> imagine a CPU where 6 and 8 core variants are the same but the 6 core is locked in bios and you can unlock it with some tuning software, its like that. But isn't this already the case (except locking might be in CPU firmware)? AFAIR this is the case with GPUs.

It's not quite analogous:

https://en.wikipedia.org/wiki/Product_binning

Post reply on HN