Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×
Crime Transportation

BMW Traps A Car Thief By Remotely Locking His Doors (cnet.com) 368

An anonymous reader quotes CNET: Seattle police caught an alleged car thief by enlisting the help of car maker BMW to both track and then remotely lock the luckless criminal in the very car he was trying to steal... Turns out if you're inside a stolen car, it's perhaps not the best time to take a nap. "A car thief awoke from a sound slumber Sunday morning (November 27) to find he had been remotely locked inside a stolen BMW, just as Seattle police officers were bearing down on him," wrote Jonah Spangenthal-Lee [deputy director of communications for the Seattle Police Department].

The suspect found a key fob mistakenly left inside the BMW by a friend who'd borrowed the car from the owner and the alleged crime was on. But technology triumphed. When the owner, who'd just gotten married a day earlier, discovered the theft, the police contacted BMW corporate, who tracked the car to Seattle's Ravenna neighborhood.

The 38-year-old inside was then booked for both auto theft and possession of methamphetamine.
This discussion has been archived. No new comments can be posted.

BMW Traps A Car Thief By Remotely Locking His Doors

Comments Filter:
  • Happy ending, but (Score:5, Insightful)

    by Anonymous Coward on Monday December 05, 2016 @03:35AM (#53423515)

    Good for the guy who got his car back, and good that they put the would be thief away, but still, can't say I much like the idea that our corporate overlords can track your car (and therefore movements) and remotely lock down your vehicle.

    • Dangerous (Score:5, Insightful)

      by stooo ( 2202012 ) on Monday December 05, 2016 @03:57AM (#53423589) Homepage

      People died while being locked in cars.
      Two examples are : car fallen in the water, and people sleeping in a car while owner and friend locked it. The owner came back after a long hot weeken, his friend was dead inside.
      Double lock is a dangerous feature.

      • Re:Dangerous (Score:4, Insightful)

        by AK Marc ( 707885 ) on Monday December 05, 2016 @04:51AM (#53423713)
        That it's possible doesn't mean it's irresponsible to do it. People die in airplane crashes, that's not a reasonable reason to refuse all air travel.
      • What danger ? (Score:5, Interesting)

        by DrYak ( 748999 ) on Monday December 05, 2016 @05:06AM (#53423735) Homepage

        In an emergency, you're supposed to be able to break a car's side windows.

        I supposed the "sun-cooked" guy had passed out (alcohol ? heat shock, while he was asleep ?) before realising he should get out of the car.

        I'm more surprised that the thief didn't try to break out of the car. But, on the other hand the lock has happened while he was napping inside the car, so he might not have realised what had happened and did not release he should run away as fast as possible before the police arrives.

        I would be much more worried about the remote disabling of the car :
        - was some form of owner's access required in order to do the disabling ? (i.e.: the owner's second fob is needed in order to validate the instruction to lock and ignore the stolen fob ?)
        - or does any sufficiently high executive at BMW have the power to shut down any random car ?

        Also : is the remote access limited to very simple instruction (locking doors and revoking fobs - which as mentioned above shouldn't be dangerous except under special circumstances) or can the car be remotely shut down while it is driving ?

      • Re:Dangerous (Score:5, Insightful)

        by locofungus ( 179280 ) on Monday December 05, 2016 @05:39AM (#53423789)

        Door lock doesn't make any difference if the car is in water. You cannot open the door against the water pressure, locked or not.

        That's why, if you're in a car that falls into water it's essential that you open the windows before the electrics short out

        • Door lock doesn't make any difference if the car is in water. You cannot open the door against the water pressure, locked or not.

          That's why, if you're in a car that falls into water it's essential that you open the windows before the electrics short out

          You can still open the door once the cabin is filled with water because the pressure has equalized. Granted, that assumes that you can hold your breath long enough to do that. As long as you unlock the door before the electronics short out, you'll be fine. See here for specifics: http://www.ehow.com/how_740940... [ehow.com]

      • People died while being locked in cars. Two examples are : car fallen in the water, and people sleeping in a car while owner and friend locked it. The owner came back after a long hot weeken, his friend was dead inside. Double lock is a dangerous feature.

        Agreed given the number of children & dogs that have died from heat exposure because they were locked in a car on a hot day

      • You think double like is dangerous, try double dead lock.

      • I'd like a link to that source. I can't imagine a scenario where someone doesn't find the means to break glass and escape vehicle. I get that not everyone carries a safety knife with a glass breaker / seat belt cutter, but...being locked in a hot car and dying as an adult? Unless it has bulletproof windows...you're going to be able to ball your shirt around your elbow and shatter it.

      • by swell ( 195815 )

        Yes, dangerous! That's why my BMW has no doors or windows or tracking devices. Completely safe.

      • People died while being locked in cars.
        Two examples are : car fallen in the water, and people sleeping in a car while owner and friend locked it. The owner came back after a long hot weeken, his friend was dead inside.
        Double lock is a dangerous feature.

        Oh this wouldn't affect me. I am already dead inside.

    • Some hacker is going to use this app for retaliation when they encounter some BMW driver in traffic behaving like, you know, a BMW driver.

    • It's an anti-theft feature marketed as such. The only "privacy" that was violated here was that of the theif. And fuck him.

    • Exactly... they should not have any access whatsoever to the OWNERS vehicle.

    • Good for the guy who got his car back, and good that they put the would be thief away, but still, can't say I much like the idea that our corporate overlords can track your car (and therefore movements) and remotely lock down your vehicle.

      And when autonomous vehicles become common, they'll drive the perp to the precinct station.

    • Re:Happy ending, but (Score:4, Interesting)

      by mlts ( 1038732 ) on Monday December 05, 2016 @10:11AM (#53424903)

      If it came down to allowing someone from remote to lock the vehicle, preventing egress and disable the starter versus just making a claim to the insurance company, I'd rather forgo the remote locking and if the item is stolen, deal with the insurance company and see about a replacement vehicle, for a few reasons:

      1: Usually a recovered vehicle is trashed big time, and you never know if sometime down the line you might have a dog search at a checkpoint (anyone travelling on I-10 knows about this) yield something the thieves put there in the way of illegal substances.

      2: The vehicle can have a failure and lock someone in. At best, it means smashing a window to get out.

      3: Most importantly, right now, it might just be a vehicle maker that can do this from remote... but it is only a matter of time before someone hacks that, and in a 104 degree day, someone decides to stall and double-lock all BMWs on the roads, forcing rescue teams to go vehicle by vehicle to get people out before they expire. Or, even more insidiously, during an evacuation, disable and lock all vehicles, ensuring nobody is able to exit a city before a hurricane strikes. The hacking team that manages to do this to OnStar will be forever immortalized.

      And this already has happened on a smaller scale. Here in Austin a few years ago, a disgruntled employee logged into a used car dealership's system and disabled 100+ vehicles that were sold by that dealer, where they stalled in the road and started honking their horns. If a guy with a former employee username/PW can do that, imagine what a state sponsored group can do if/when they feel like that, especially with the mindset of most US companies being that security has no ROI.

      tl;dr, keep the remote kill switches. It is only a matter of time before that stuff gets hacked, and perhaps used for ransom ("pay us 2 BTC, or else your car will be disabled and your engine's ECU fried in 12 hours.")

  • by flargleblarg ( 685368 ) on Monday December 05, 2016 @03:37AM (#53423531)
    If it's possible to lock someone inside a car — which is a really terrible feature, by the way — then how long before some car's AI flips out and drives off a bridge — into a river — with passengers inside...and locks the doors shut?
    • Like the Will Smith version of I, Robot
    • If it's possible to lock someone inside a car — which is a really terrible feature, by the way — then how long before some car's AI flips out and drives off a bridge — into a river — with passengers inside...and locks the doors shut?

      And you don't even need to go that far. Imagine if the battery goes flat, or if the door mechanism short-circuits.

      In any case, I'm not even sure locking the door was even necessary, it sounds like the thief was sleeping in the car after a night of amphetamines.

    • Oh wait, Hastings was locked inside a Mercedes as it crashed. Obviously no relation to this BMW story.

      Then again, I'm a bit surprised that they revealed the capability so publicly. It's not like any dictators or powerful authorities would ever abuse such a capability.

      (Don't look at me. I've gone completely paranoid now. I even think Snowden is just a sincere pawn and he was never allowed near any of the really dark stuff.)

  • by gijoel ( 628142 ) on Monday December 05, 2016 @03:40AM (#53423549)
    I found on documentary called Robocop II. [youtube.com]
  • See??? (Score:5, Insightful)

    by 93 Escort Wagon ( 326346 ) on Monday December 05, 2016 @03:41AM (#53423557)

    This incredibly rare set of circumstances is exactly why we should happily and unquestioningly give our freedoms and privacy away to corporations and to the government!

    • This incredibly rare set of circumstances is exactly why we should happily and unquestioningly give our freedoms and privacy away to corporations and to the government!

      Not really that rare, this is just a variation on an old police tactic, bait cars. They have been a great success in Germany/Poland to combat gangs of Russian car thieves, and I'm sure in many other places too. I fail to see why this could not be done more often if the in-car systems has a manufacturer maintenance access point and the owner allows it. All you need is a positive signal from the seat detector used by the seat-belt alarm to makes sure your idiot is in the car, if there is a dash/driver cam, ev

      • This incredibly rare set of circumstances is exactly why we should happily and unquestioningly give our freedoms and privacy away to corporations and to the government!

        Not really that rare, this is just a variation on an old police tactic, bait cars. They have been a great success in Germany/Poland to combat gangs of Russian car thieves, and I'm sure in many other places too.

        Great success? Any statistics to back that up? Yes, we've all seen this on TV. Question is, is it actually working as more than a temporary deterrent.

        I fail to see why this could not be done more often if the in-car systems has a manufacturer maintenance access point and the owner allows it. All you need is a positive signal from the seat detector used by the seat-belt alarm to makes sure your idiot is in the car, if there is a dash/driver cam, even better. Then you just have to be sure the car isn't moving which is where GPS and speedometer readings come in....My self, I'm not planning to break the law so I don't really care although if my car has have remote access although, being an- computer nerd, I'd obviously want the connection to be encrypted and secure.

        Instead of stealing the car, a hacker could simply break into this encrypted "secure" system, override the safety protocols, and apply 100% of the brake force to the vehicles traveling on the freeway en masse...

        Ain't technology cool? Gee, I can't wait for autonomous cars to really take off. And thinking the owner will have to "allow it" is one hell of an

        • Since even with jeeps unconnect system you had to hack each car separately that would be a pain to do.

          • Since even with jeeps unconnect system you had to hack each car separately that would be a pain to do.

            Sounds like rather tedious work, also known as the reason scripts were invented.

        • > Car gets stolen? Fine. That's what I have car insurance for.

          Yes, make other people pay for it. Just use public transportation or get a bicycle...no fancy polluting air conditioning needed either. > Much like the Internet of Things, there's a lot of bullshit that should not be online.

          This is the result of fear of poor implementation. Here's an idea that libertarians won't enjoy: regulate the internet connected devices - require specific security methods be used and then make it a crime for t
          • I've worked in government, where regulations forced specific security requirements. Because the regulations were based on some guy's understanding that was slightly outdated and slightly questionable at time they were written, they were completely outdated and foolish by the time we were following them.

            As an example, regulations require the use of MD5, though weaknesses were found in MD5 in 1996 and it was more completely broken in 2004-2007. SHA-1, SHA-2, or SHA-3 would be much more secure, but regulatio

            • ...What we *can* do is harden systems against script kiddies and accidents - be sure that our systems don't allow employees to accidentally set our customer database to be directly accessible via the web, and our web site doesn't crash when John O'Reilly registers because he has an SQL "quote" in his name.

              I agree we can do a lot to secure systems, but then we also have to mitigate the risk of insider threat. The more valuable an "inaccessible" resource is, the greater the risk of an insider selling access.

              I've been doing information security full time for twenty years and before that I studied law. I don't see any clear way that law can improve information security much. Attempts to do so may well just make things more expensive, and possibly no more secure.

              The fact that it may be no more secure after considerable investment is partly the reason companies appear to simply be rolling over, and writing off network breaches and stolen data as the "cost of doing business" rather than actually investing to better Security all-around. Believe me there are days whe

          • > Car gets stolen? Fine. That's what I have car insurance for. Yes, make other people pay for it. Just use public transportation or get a bicycle...no fancy polluting air conditioning needed either...

            We could do a LOT to eliminate excess traffic, pollution, fuel consumption, and wear and tear on roads and vehicles if corporations simply recognized the fact that we DO have the technology today to support remote work for many positions.

            Unfortunately, most of us still deal with the ancient mentality that one must be in an office building to physically demonstrate a justification for employment.

      • by sjames ( 1099 )

        You're missing the point. The mechanical possibility that the car can lock someone in is a safety hazard. Sure, it's great when it locks a car thief in on purpose, not so great if it locks someone in accidentally on a hot day or if the car has been in an accident (especially if it's on fire).

        It's not a theoretical matter, people have died [nbcnews.com] that way.

    • This seems like the kind of thing that should have been a chapter in Doctorow's "Car Wars [deakin.edu.au]" short story.
  • I call bullshit. (Score:5, Insightful)

    by Heebie ( 1163973 ) on Monday December 05, 2016 @03:52AM (#53423575) Homepage
    Pulling the door opener lever on the door of a car overrides the locking mechanisms. This is a fire-safety requirement. The guy was probably just still asleep when the cops found the car.
    • Re:I call bullshit. (Score:4, Informative)

      by Hachima ( 718971 ) on Monday December 05, 2016 @04:05AM (#53423615)
      The default behavior on BMW cars is that you have to pull the door handle lever twice to open it. The first pull unlocks thw door and it and the second pull opens the door. I've had passengers think they were locked in because while they pulled the handle once they couldn't open the door and I have to tell them to pull it again. I would be surprised if the guy was woken up by the SOS system with a CSR talking to him and he then pulls the handle once and thinks he is locked in since the door doesn't open. Then the CSR messes with the drugged up guy making him think he is locked in if there is any truth to the article and what was being said to him..
      • Re:I call bullshit. (Score:5, Interesting)

        by Zocalo ( 252965 ) on Monday December 05, 2016 @05:16AM (#53423757) Homepage
        The article is light on details as to how the emergency unlock got overridden - maybe the guy was just high and was tricked, but maybe BMW's double-pull safety/security feature gave them a window of opportunity that let them do this. If BMW were repeatedly sending the central lock signal to the car at a faster rate than the recently woken (and potentially also doped up) thief could do the double-pull, then perhaps that would be enough to keep the doors locked. We also have no idea from TFA how long they kept the doors locked for; it might only have been a few minutes, or possibly even less than that. It's entirely possible it was less than the time that the recently woken thief would have taken to gather hits wits and try something else like, say, opening/breaking a window and climbing out.
        • The article is light on details as to how the emergency unlock got overridden

          That's because there's no such thing as emergency unlock.

          There is the opposite though. A specific feature that prevents you from unlocking a car even if you have access to the lock button / mechanism or whatever, and that has been an anti-theft device designed to stop people from smashing a window and opening a door for a good 20 years now.

    • At an airshow, I once sat in a Corvette on display. The door latch will not open the door without battery power, and for some reason the power went out, so I got trapped in the car. An airshow attendant let me out.

      Only months later did I learn the emergency latch to open the door was on the floor. There may be an override for safety reasons, but it's not always obvious.

      Fun fact: at least one Corvette owner actually died in his car on a hot day since he couldn't figure out how to open the door.

  • My car automatically locks the doors when I drive. It unlocks when I pull the interior door handle. I've had the door card off, and there's a mechanical link from the interior door handle to the lock. So is there a separate mechanism that defeats this mechanical link?

    • With my car, once it's been locked with the button on the key fob, after a certain amount of time, it deadlocks the doors - they can not be opened from the inside or outside without being unlocked. The unlock button on the driver's door will no longer function either after the car has been locked from the fob.

      This means I could, if I wanted to, lock the car with the windows partially down and after a minute or so the car would be deadlocked - even if someone reached in to open the door, they would be unable

    • by jrumney ( 197329 )
      My car also locks the doors when I drive, and if you pull the handle while the car is moving, it sounds like a machine gun as the unlock from pulling the handle fights against the lock because the car is moving. A second pull after the door is unlocked is required to actually open the door, and the lock mechanism always beats you to that.
  • by war4peace ( 1628283 ) on Monday December 05, 2016 @04:10AM (#53423639)

    I'm glad it was a thief with doors. A doorless thief would have escaped.
    But I wonder how did they lock his doors remotely?

  • by Vinegar Joe ( 998110 ) on Monday December 05, 2016 @04:16AM (#53423649)

    Their R&D center was located on Chappaquiddick Island in Massachusetts. After a tragic accident as a result of Soviet hacking, Oldsmobile closed the center in 1969.

  • Escape is easy (Score:4, Insightful)

    by LaLLi ( 844692 ) on Monday December 05, 2016 @04:40AM (#53423689)
    I have never seen a "modern" car that doesn't have headrests. Those headrests can be detached and the metal spikes used to break the passenger windows.
    • The headrests from the front seats of my car cannot be removed - all part of some fancy anti-whiplash system. This seems to be a fairly common "modern" design. Sure - the technician probably knows of a way to do it...but you ain't doing it in an emergency.

      Although difficult - the back ones do come out. Seems to be by design - slides up to the top...then one side becomes very very difficult to pull on.

  • by Solandri ( 704621 ) on Monday December 05, 2016 @04:56AM (#53423719)
    The "feature" has already caused at least one death [nbcnews.com].

    Last week, a burglar pried apart some security bars at my business and squeezed in. He was able to make off with some stolen goods because once inside, he was easily able to open the locked exit door. Fire codes require that all building exit doors accessible to the public be openable from the inside even when locked. These laws were made after repeated fires [wikipedia.org] with huge death tolls [wikipedia.org] exacerbated by locked exit doors [wikipedia.org]. That's what the bar on the door you press when leaving most restaurants and stores does. Even when the door is locked, pushing the bar from the inside will open the door. That way if a fire breaks out, you're not trapped inside because the only person who has the key was the idiot who started the fire and is dead.

    Same thing with refrigerators - both the old stand-up units which latched shut, and walk-in refrigerator/freezers used in restaurants. Too many people (especially kids playing) were dying after being trapped inside [wikipedia.org], that laws were passed requiring a mechanism which allows someone inside to open the latch on the outside.

    I don't see why cars should be any different. Yes easy egress makes thievery easier. But preventing that is just not worth the potential loss of life. Any car designer who thinks this is a good idea should be locked inside one of their cars on a sunny day until they admit it's a terrible idea. Heck, after dozens of kids dying each year after being locked in the trunk of a car while playing, we finally passed a law [cornell.edu] mandating a release mechanism inside the trunk. And some idiot car designer decides it would be a good idea to make it impossible for someone inside the passenger compartment to exit at will? Shame on BMW for trying to spin this to the press as a "helpful" feature.
  • This is why when you're in your car, you should keep a glass shattering hammer for a quick escape whether if you're trying to steal a car or escape from a car quickly getting submerged in water.
    • by Chrisq ( 894406 )
      If you don't have a hammer the headrests can often be removed and the metal ends used to break the windows
    • I was going to make a joke about this guy being trapped in a convertible with the top down, but being able to get out of mine even if submerged in water is simple.

      Release the latches. The water should actually help open the roof. That is assuming I even need to in case the electrical system is dead.

  • by fraxinus-tree ( 717851 ) on Monday December 05, 2016 @06:43AM (#53423931)
    Not that I would in the first place.
  • If you're going to steal modern luxury cars, make sure your dealer is trustworthy enough not to swap your meth out for ketamine.
  • Here's one example. I don't know anything about this seller but I bought this exact tool some time ago on Woot.com. You can find somewhat similar tools on Amazon and other websites under the name "life hammer" or "safety hammer".
    http://www.dhgate.com/product/... [dhgate.com]|3634601311
  • by evolutionary ( 933064 ) on Monday December 05, 2016 @09:35AM (#53424685)
    This is a classic example of how even when you pay for a car, you don't really own it. (kind of like iPhones) Anyone could give any reason for "hijacking" the car. If the OWNER of the car could do this, okay. But this had to be done by BMW CORPORATE. Bit of a difference. Cars today should be scaring us. One has to assume any car with a remote lock can remotely imprison you. It's like that scene in the movie "Minority Report": you can be locked in your own car and "kidnapped" to whereever "big brother" (or smarter hacker using big brothers back doors) says you should be taken and that could create a LOT of havoc. We should seriously be rethinking this. You can say "big win against thieves" this is really a side effect, not the primary purpose. The real purpose, is to keep complete ownership of the vehicles and you in the hands of big brother + corporate. The obvious ability to be abused by government agencies and hackers alike don't matter to the creators or the governments that promote them. I wonder if Russian cars are implementing this feature yet. (Putin would LOVE it I'm sure). It's like that NSA information dragnet;it was never designed to protect the common citizen, just the common interests of those who already have perhaps a bit too much power already.
  • Good to see yet another example of the law working out well for those with money.

    Something tells me that the police would not have been so determined if it was a hooptie that was stolen...

    • "BMW Assist" is basically a knock-off of GM's "OnStar". I wouldn't be too surprised if stories like this are happening all the time with less pricey cars. Anytime there is a stolen car with GPS and a communications link, police are going to make a serious attempt to find the car and grab the thief. Locking the scumbag inside the car is just an added bonus.

  • Seems obvious but other than being asleep, why not just roll down the windows if they locked the doors? Unless of coarse they disabled the whole car which is even worse/dangerous ability to have remotely.

    I know I keep a ball peen hammer in the door of my car in case of a water crash as mentioned by many above. Dad saw a documentary or something and bought it for me. I figure it also might serve for self defense if it ever came to it.

  • BMW Traps A Car Thief By Remotely Locking His Doors

    They're not his doors, though, are they?

  • by sdinfoserv ( 1793266 ) on Monday December 05, 2016 @11:09AM (#53425275)
    We've had the ability to virtually eradicate auto theft since the 1970's. There's only 2 ways to steal a car, drive it or tow it. Locking brake systems immobilize vehicles rendering them immovable, thus virtually unstealable. However, for every vehicle stolen, another is sold. (the replacement), so auto industry lobbyists have fought hard both hide this fact and ensure no laws are enacted. All other electronic gadgets are just distractions.

No spitting on the Bus! Thank you, The Mgt.

Working...