This is startling.
The thieves used a device that plugged into the car’s On-Board Diagnostic (ODB) port to program a new unlocking code.
First they deactivated the car’s sensor. Then they broke the driver’s window. The internal ultrasonic sensor system has a “blind spot” just in front of the OBD port. The OBD port remained powered up, even when the car was off. The OBD port did not require a password. It is clear that they can get full access without entering the car.
Apparently, though unconfirmed, BMW has acknowledged the security flaw.
http://www.1addicts.com/forums/showthread.php?t=712717
The thieves used a device that plugged into the car’s On-Board Diagnostic (ODB) port to program a new unlocking code.
First they deactivated the car’s sensor. Then they broke the driver’s window. The internal ultrasonic sensor system has a “blind spot” just in front of the OBD port. The OBD port remained powered up, even when the car was off. The OBD port did not require a password. It is clear that they can get full access without entering the car.
Apparently, though unconfirmed, BMW has acknowledged the security flaw.
http://www.1addicts.com/forums/showthread.php?t=712717