[Cropwell]

Just noticed that BBC web site is showing a video of a 3 series key being cloned in 2 minutes.

This is the link:
http://www.bbc.co.uk/news/uk-19562487

There is also going to be a report on the BCC Watchdog program at 8pm this evening.

From the BBC article it still seems that BMW are in denial but curiously BMW also state "We are already in the process of enhancing the protection of pre-September 2011 X5 and X6 models and have been contacting owners and carrying out the necessary work accordingly."
Not sure if there is a similar problem with the X3 but would imagine that the systems are similar across the model range but X5/X6 are more likely to be stolen.

Not sure what the insurers are going to make of this!

Call me old fashioned but what is wrong with a physical key, at least this gives a further level of security rather than being solely reliant on electronic devices. I would imagine that the remote access keys carry a higher risk.

There also needs to be more security on the OBD connection as this just makes it too easy for a thief with a laptop to hack the security. See many other posts on the forum which cover this in more detail.

[sfax]

It's only E series that are vulnerable as far as we know.

See this thread

http://x3.xbimmers.com/forums/showthread.php?t=685547

[plob]

From the article you highlighted...

None of our latest models - new 3 Series, 5 Series, 6 Series and 7 Series - nor any other BMW built after September 2011 can be stolen using the method highlighted."

It looks like you should be OK if you have anything built after September 2011

[sfax]

Originally Posted by plob

From the article you highlighted...

None of our latest models - new 3 Series, 5 Series, 6 Series and 7 Series - nor any other BMW built after September 2011 can be stolen using the method highlighted."

It looks like you should be OK if you have anything built after September 2011

If you look at the pistonheads thread (a good read if you have time) there is a lot of debate on what models may or may not be affected. No confirmed reports on F series yet but new X6s have gone (X6 is still E series).

http://www.pistonheads.com/gassing/t...eys&mid=346283

I wouldn't believe a word that BMW say as they've known about this problem for months and still deny it exists. My guess is that Sept 2011 represents the date they released a patch for new E Series models but I might be wrong. Of course, if that's the case, they should offer this patch to all of their existing customers whose cars can be stolen in 2 mins without even setting off the alarm. Right?

[sfax]

FYI There is a new post on pistonheads in the last 20 minutes backing up the "F series not affected" claim from a copper. See link above.

[Cropwell]

Useful thread- Thanks

[sfax]

Also on Channel 4 news tonight. Just missed it but recording on +1 hour. Good that it's now making the national news. It's a disgrace that BMW have let this go on for so long with their head in the sands. Even though the F25 may not be affected, it has put me off BMW as a company. You could argue other big manufacturers would behave in the same way but I think they should have offered a free fix months ago, or at the very least sent owners advice on protecting against OBD theft

[MattUK]

Totally agree.. regardless of it being an industry problem they way they have treated customers is appalling.

Feel sorry for their facebook team who are now fielding a load of wall posts with their typical condescending reply.

The cars, brilliant.. the corporate company, and the way it treats people, totally crap, always have been, you have to battle everything with them.

The dealer network, some of them are superb, but they are restricted and constrained by group.. a particular word comes to mind.

[sfax]

Just watched Watchdog. Good job. They should also have mentioned that you can smash the window and program the cars without setting off the alarm.

If you missed it, or aren't able to watch it, they had a TV presenter program a new blank key in about 2 minutes and drive an M3 away

BMW are now saying they will fix the gaping hole in their security for free - I think. Nothing on whether on X3 is affected but I don't think any of the F series BMWs are affected. Might give them a call tomorrow to confirm but I think they'll be pretty busy for a while

[JimmyTheHand]

Originally Posted by sfax

They should also have mentioned that you can smash the window and program the cars without setting off the alarm.

The channel 4 news did say something about windows and the showed plugging into ODBC port - the bit watchdog hid

[sfax]

Originally Posted by JimmyTheHand

The channel 4 news did say something about windows and the showed plugging into ODBC port - the bit watchdog hid

Yep, just watched C4 news. Not setting off the alarm when you smash the window and stick your arm in is a huge flaw and it should have been mentioned in Watchdog. They also said BMW are now doing something about it like that was a good thing but the disgrace is that they have known about this for so long (they had a fix for existing models in Sept 2011) and they didn't even write to owners to warn them (the police had to do that for them!)

[MattUK]

That'll upset the insurance companies who have refused to pay out on those unfortunate people because 'it wasn't possible'

[JimmyTheHand]

Originally Posted by sfax

They also said BMW are now doing something about it like that was a good thing but the disgrace is that they have known about this for so long (they had a fix for existing models in Sept 2011) and they didn't even write to owners to warn them (the police had to do that for them!)

I suspect fix applied to production models may have been a hardware related/dependant so may be difficult to apply to existing cars - though a year to make a software fix (even with safety testing it might require) seems excessive to me.

I am sure that someone mentioned in a thread speaking to channel 4 news about the thefts, so the fact both channel 4 and watchdog reported on same day suggests BMW asked to hold until ready - which is fine for an software security issue not being actively exploited - but once it goes into wild people need to know.

If I had seen the pistonheads thread 24 hours earlier I'm sure I wouldn't have put down a deposit on new BMW, but likely would have gone for a Q5. After reading the post today might have not been a smart move (at least X3 F25 seems not to be target/vulnerable atm)

[gareth3685]

Originally Posted by sfax

Just watched Watchdog. Good job. They should also have mentioned that you can smash the window and program the cars without setting off the alarm.

Why doesnt smashing the window set the alarm off?


Not until the media get involved do they act, many of us have been aware of this for months. Shocking customer service.

[sfax]

http://x3.xbimmers.com/forums/showpo...1&postcount=39