E90Post
 


The Tire Rack
 
BMW 3-Series (E90 E92) Forum > BIMMERPOST Universal Forums > General BMW News and Cars Discussion > BMW Connected security concern



Reply
 
Thread Tools Search this Thread
      12-23-2020, 01:58 AM   #1
Vanbmw2010
New Member
4
Rep
23
Posts

Drives: 2012 335i convertible
Join Date: Nov 2010
Location: Vancouver

iTrader: (0)

BMW Connected security concern

I have had the BMW Connected app in my phone for a few years, but never used it or even added my 2012 335is to it.

About a week ago I test drove a new vehicle for about 15 minutes.
I had my phone with me, but didn't connect to the vehicle I was test driving. I did not plug it in with a USB, I did not connect it with Bluetooth. In fact it was in my pocket the entire time.

I also did not even play around with the i drive in the car, aside from clicking on navigation once .

Then yesterday while I was doing my research on the new car, I decided to click on the BMW connected app to explore it, and to my shock the car I test drove was added to my account. I can lock it, unlock it, etc... all the features seem to be working.

How is this possible? I was under the understanding that I had to add the VIN number in the app, and even then enter a code from the car to the app (much like connecting a phone with Bluetooth). Well none of this occurred, so how did it automatically add it?

Could the salesman have pushed it to my phone? He had my phone number but none of my BMW connected details.

Is each car only connected to one Bmw connected account? Could anyone test driving this car next have access and have the car added to their account then?

I'm so confused....
Appreciate 0
      12-23-2020, 03:49 AM   #2
..Rush..
Captain
..Rush..'s Avatar
United_States
983
Rep
928
Posts

Drives: AW E88
Join Date: Mar 2019
Location: USA

iTrader: (0)

It's magic.
Appreciate 0
      12-23-2020, 09:04 AM   #3
paquet
Lieutenant
United_States
632
Rep
433
Posts

Drives: 2019 540i M Sport etc
Join Date: Sep 2020
Location: FL

iTrader: (0)

My guess is the sales person added the car to your account.
For that, they need an email address though, as far as I know.

Or... you've found a rather serious security vulnerability
Appreciate 0
      12-23-2020, 09:04 AM   #4
eff32fl
Lieutenant Colonel
eff32fl's Avatar
1253
Rep
1,997
Posts

Drives: 2019 440i M Sport THP MPPSK
Join Date: Jun 2020
Location: Florida

iTrader: (0)

I think this means you get an unlimited time test drive lol.
Appreciate 0
      12-23-2020, 09:04 AM   #5
m3fuz
First Lieutenant
201
Rep
363
Posts

Drives: 17 X5M, 19 X3 30i, 03 C4S
Join Date: Nov 2020
Location: MetroWest, MA

iTrader: (0)

Sounds like you get a free car!
Appreciate 0
Reply

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -5. The time now is 01:29 AM.




e90post
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.
1Addicts.com, BIMMERPOST.com, E90Post.com, F30Post.com, M3Post.com, ZPost.com, 5Post.com, 6Post.com, 7Post.com, XBimmers.com logo and trademark are properties of BIMMERPOST