Live data from Hacker News

A Dutch first: Ingenious BMW theft attempt

mrooding.me

261–270 of 325 posts

Re: A Dutch first: Ingenious BMW theft attempt

#261
post #251

Earlier quoted context omitted.

It's likely the car has it's own always-on cellular connection.

Yeah, this is what I meant, but that sounds insane to me.

It is probably retrieving the "SKC" code which is necessary to program keys.

However, this is by no means secure where the car's ECU will happily dump its entire storage (including the SKC code) over the diagnostics port if you ask nicely.

Re: A Dutch first: Ingenious BMW theft attempt

#262
Since all protection in cars (no matter how complex is) is mass produced, it is very easy for thieves to purchase same/similar car and study it. However, I'm wondering what will happen if an ordinary Hacker Joe (a guy who knows a little bit of electronics and software) installs custom protection, no matter how simple is?

Knowing that for thieves, the most precious resource is time and if you force them to work more than expected, they might gave up...

Re: A Dutch first: Ingenious BMW theft attempt

#263
post #52

Earlier quoted context omitted.

That's actually not hard to explain to your insurance or the police at all. This happened to me 5 weeks ago. The car was parked directly in front of my entrance door and the key was basically on the other side of that door. The scene of my car not being where it was supposed to be was so surreal that I did not even realize it was missing the first time when I walked out the trash. I basically walked around an invisib…

> I was a bit worried that the box does not shield the signal enough. They make "Faraday Bags" exactly for this purpose.

>They make "Faraday Bags" exactly for this purpose.

Only "they" do not certify them in any way (for several reasons, including the fact that there is not - yet - an accepted standard for measurement) and in any case a Faraday bag (in the sense of a mesh) may be very effective at a given frequency and almost transparent to another one).

A tin box should always outperform a Faraday bag in shielding RF.

JFYI: https://www.forensicfocus.com/Forums/viewtopic/t=3914/

Re: A Dutch first: Ingenious BMW theft attempt

#264
post #204

Earlier quoted context omitted.

It'll go damn far - on a flatbed.

How do they move it onto the flatbed if the hand brake is on?

Who needs a flat bed? Every tow truck has dollies that they can put braked/geared wheels on.

How else would a tow truck tow away a vehicle in gear or with the parking brake on?

Through there are stories of tow trucks towing away vehicles in 1st gear, things seem fine, and then the transmission causes a fire from overheating...

Re: A Dutch first: Ingenious BMW theft attempt

#265
post #27

Reading this article is honestly a bit of a domestic culture shock for me, where does this guy live in The Netherlands? Here in downtown Amsterdam we called the police because the rear window of someone's car had just been smashed outside our office, and the police's response was "Has anyone been hurt? Nope? Then we're not coming". Meanwhile, wherever this guy lives they're sending officers because some BMW call cent…

The BMW customer engineers are smart: perhaps by design, their system doesn’t know if someone is having a heart attack, or a broken window, so they can push the emergency services to respond quickly and find out.

Re: A Dutch first: Ingenious BMW theft attempt

#266

I used to fix cars for a living. Sometimes it involved “cracking” alarm & immobiliser systems. My clients all claimed they broke/lost their keys to their car - most of the time they were believable (car stuck in front of their driveway, etc). Sometimes less so, but I’d do it anyway because I needed the money and I had no proof of the contrary (innocent until proven guilty right?), although given the sad conditions of…

> I’m frankly surprised it took this long for “high tech” car theft to appear, unless it’s been going on for a while

New, expensive cars are stolen or broken into quite often. When broken into, they'll often rip out the infotainment, with high end cars this can be a five-figure repair.

Re: A Dutch first: Ingenious BMW theft attempt

#267
post #27

Reading this article is honestly a bit of a domestic culture shock for me, where does this guy live in The Netherlands? Here in downtown Amsterdam we called the police because the rear window of someone's car had just been smashed outside our office, and the police's response was "Has anyone been hurt? Nope? Then we're not coming". Meanwhile, wherever this guy lives they're sending officers because some BMW call cent…

The key point isn't the BMW, it's the unspecified distress. Lives could literally be on the line, and a fast response might make a difference.

Intelligent design by BMW. Keep it vague, even though it should totally be able to differentiate between a sudden G-force, a button press, or an electrical issue (wire cut), but the car/call centre doesn’t specify the exact causative issue.

Re: A Dutch first: Ingenious BMW theft attempt

#268

I used to fix cars for a living. Sometimes it involved “cracking” alarm & immobiliser systems. My clients all claimed they broke/lost their keys to their car - most of the time they were believable (car stuck in front of their driveway, etc). Sometimes less so, but I’d do it anyway because I needed the money and I had no proof of the contrary (innocent until proven guilty right?), although given the sad conditions of…

> There is very little cryptography involved

Wha? That may have been true about twenty years ago, but not now. BMW was using 256-bit RSA keys to validate ECU firmware and authenticate privileged access in the early 2000s (they're up to 1024-bit keys now) and write-once memory in their instrument clusters for about as long. Other (Euro) car makers using the same vendors offer similar features.

Once you have physical access all bets are off though. That's why the thieves cut the alarm sensors.

Re: A Dutch first: Ingenious BMW theft attempt

#269
post #68

Earlier quoted context omitted.

Several years ago someone tried to climb into our apartment window in Amsterdam (with another guy waiting with a motorbike as getaway vehicle on the street). He was standing on the windowsill and tried to break open the window (it was open but we had one of those locks that limits how far the window opens, so he didn't fit through the gap). They fled once we noticed them. When we tried to report that incident to the…

Standing on someones windowsill isn't illegal?

He was just doing isometric exercise. Nothing illegal about exercise.

Re: A Dutch first: Ingenious BMW theft attempt

#270

Hi guys, very cool to see how this is being picked up over here. Shame on me, but I actually forgot to submit it to Hacker News. The key fob method is out of the question for my car. I've known about it for a while and store my keys in special bags. I see quite a few people asking why a sting wasn't organised. I of course shared the M.O. with the police and we actually had a few phone calls from them over the past fe…

You may want to look into rewiring your OBD port so that it doesn’t work without you flipping a switch somewhere, or building a “key” with a male and female port + some wires, then storing the “key” in some hidden location (spare tire?).

Or just expose two data lines from the OBD wiring harness and jump them together. Remove the jumper to operationalize the OBD port.

FYI: cutting off VCC may not always work since some devices may derive enough power through other lines that have pull-up resistors to function. I’ve seen it happen in other industries.

Not sure if such products exist commercially, but it would have some value for someone to build them.

Post reply on HN