BMW
X1 / X2
forum
BMW Garage BMW Meets Register Today's Posts
BMW X1 and X2 forums (U11/U10) General BMW X1 and X2 Discussion (U11 / U10) (2023+) Comfort Access - relay attack

Post Reply
 
Thread Tools Search this Thread
      01-30-2024, 12:42 AM   #1
srbs73
Major
srbs73's Avatar
United Kingdom
572
Rep
1,205
Posts

Drives: BMW i4 M50
Join Date: Jun 2020
Location: UK

iTrader: (0)

Comfort Access - relay attack

A couple of weeks ago, the ring doorbell caught a thief checking out my 1 week old i4. Since then, we've reverted to putting the steering locks on the i4 and iX1 overnight.

I also did a check on all the keys to ensure they were shutting off after 3 mins. Both keys on the i4 turned off as expected but the iX1 keys didn't.

I'm thinking this is related to the fact the iX1 has the Digital Key Plus which uses UWB? Does anyone know if the key fobs also use that and therefore not vulnerable to the current relay attacks?
Appreciate 0
      01-30-2024, 03:01 AM   #2
Tunners
Captain
Tunners's Avatar
United Kingdom
372
Rep
635
Posts

Drives: BMW X1 (U11) 30e M Sport
Join Date: Feb 2023
Location: Manchester

iTrader: (0)

Quote:
Originally Posted by srbs73 View Post
A couple of weeks ago, the ring doorbell caught a thief checking out my 1 week old i4. Since then, we've reverted to putting the steering locks on the i4 and iX1 overnight.

I also did a check on all the keys to ensure they were shutting off after 3 mins. Both keys on the i4 turned off as expected but the iX1 keys didn't.

I'm thinking this is related to the fact the iX1 has the Digital Key Plus which uses UWB? Does anyone know if the key fobs also use that and therefore not vulnerable to the current relay attacks?
As far as I can tell the key should go to sleep. See attached link.

https://u11.bimmerpost.com/forums/sh...&highlight=UWB
Appreciate 0
      01-30-2024, 03:30 AM   #3
srbs73
Major
srbs73's Avatar
United Kingdom
572
Rep
1,205
Posts

Drives: BMW i4 M50
Join Date: Jun 2020
Location: UK

iTrader: (0)

Useful thread. I think the iX1 does use the UWB. Looks like the additional bit is the key works out how far it is from the car, so if it's being boosted, it won't respond.
Appreciate 0
      01-30-2024, 03:31 AM   #4
MontyB1
Lieutenant Colonel
1638
Rep
1,991
Posts

Drives: BMW X3
Join Date: Nov 2021
Location: UK

iTrader: (0)

They should go to sleep as above, but we put them in a pouch anyway just by default / habit as much as anything. I have steering lock on mine but she doesn't, it's used a lot more often so she doesn't like the hassle of taking it on or off all the time.
Appreciate 0
      01-30-2024, 03:36 AM   #5
srbs73
Major
srbs73's Avatar
United Kingdom
572
Rep
1,205
Posts

Drives: BMW i4 M50
Join Date: Jun 2020
Location: UK

iTrader: (0)

Ours is definitely not going to sleep within 5 minutes. I was testing at the same time as the i4 with the motion key - put the keys on the wheelie bin next to the doors and time trying to open the door after 3m and 5m. i4 shuts off at 3m, iX1 I could open the door still after 6+ mins.
Appreciate 0
      01-30-2024, 06:09 AM   #6
MontyB1
Lieutenant Colonel
1638
Rep
1,991
Posts

Drives: BMW X3
Join Date: Nov 2021
Location: UK

iTrader: (0)

Mmmm that's not good, I haven't tested if it continues to be honest only that the punches work which they do.

Probably good we are still using them then maybe....
Appreciate 0
      01-30-2024, 07:19 AM   #7
srbs73
Major
srbs73's Avatar
United Kingdom
572
Rep
1,205
Posts

Drives: BMW i4 M50
Join Date: Jun 2020
Location: UK

iTrader: (0)

Quote:
Originally Posted by MontyB1 View Post
Mmmm that's not good, I haven't tested if it continues to be honest only that the punches work which they do.

Probably good we are still using them then maybe....
As mentioned previously, looking at the other thread linked by Tunners, with the UWB key, the car knows it's not within a few metres and therefore ignores it.

Looks a lot more secure, as once you walk away from the car, the relay attack can't happen. With my i4 key, it's possible if someone followed me home, they could steal the car in the 3-5 mins it takes from me walking through the door, putting the keys in the drawer / 3 minute motion sensor switching it off.

After the incident a couple of weeks ago, resorted to steering lock overnight.
Appreciate 0
      01-30-2024, 07:48 AM   #8
metapod
Private
United_States
30
Rep
54
Posts

Drives: U11 X1 28i xDrive
Join Date: Jun 2008
Location: NH

iTrader: (0)

Garage List
2023 BMW X1  [0.00]
No sure if this makes you feel any better:
https://faq.bmw.com.au/s/article/Veh...language=en_AU

I tried recording and playing back signals from my key and it didn't do anything, but that's not as sophisticated as a relay attack.
Appreciate 0
      01-30-2024, 07:58 AM   #9
John27
John27
United Kingdom
45
Rep
128
Posts

Drives: X1 xDrive 23i M Sport
Join Date: Aug 2023
Location: London

iTrader: (0)

I may have misunderstood things but I thought the Digital Key (using mobile phone) uses UWB technology but the keys simply go to sleep in a couple of minutes but are not themselves, using UWB technology. Happy to be corrected on that.

Personally, keep the keys in a faraday bag and that in a faraday box at home and use just the faraday bag when out (signal can easily be grabbed when exiting the car in say, a car park). I also have Ghost 2 Pro fitted which hopefully makes it harder to steal even if they get the code signals.
Appreciate 0
      01-30-2024, 08:04 AM   #10
srbs73
Major
srbs73's Avatar
United Kingdom
572
Rep
1,205
Posts

Drives: BMW i4 M50
Join Date: Jun 2020
Location: UK

iTrader: (0)

Quote:
Originally Posted by metapod View Post
No sure if this makes you feel any better:
https://faq.bmw.com.au/s/article/Veh...language=en_AU

I tried recording and playing back signals from my key and it didn't do anything, but that's not as sophisticated as a relay attack.
That article seems a bit misleading as my i4 was built after our iX1 but still has the same key as my 2020 3 series - seems to behave the same so doubt it's UWB as I don't have Digital Key Plus either (only Digital Key). iX1 key is definitely not turning off after 2 or 3 mins.
Appreciate 0
      01-30-2024, 08:09 AM   #11
srbs73
Major
srbs73's Avatar
United Kingdom
572
Rep
1,205
Posts

Drives: BMW i4 M50
Join Date: Jun 2020
Location: UK

iTrader: (0)

Quote:
Originally Posted by John27 View Post
I may have misunderstood things but I thought the Digital Key (using mobile phone) uses UWB technology but the keys simply go to sleep in a couple of minutes but are not themselves, using UWB technology. Happy to be corrected on that.

Personally, keep the keys in a faraday bag and that in a faraday box at home and use just the faraday bag when out (signal can easily be grabbed when exiting the car in say, a car park). I also have Ghost 2 Pro fitted which hopefully makes it harder to steal even if they get the code signals.
Found this thread which suggests the new keys do use UWB too:

https://g07.bimmerpost.com/forums/sh....php?t=2013576

Edit: also found this BMW page that confirms it. Got there in the end!

https://www.bmw.com/en/innovation/bm...-wideband.html
Appreciate 1
John2745.00
      01-30-2024, 09:36 AM   #12
timesone
Second Lieutenant
timesone's Avatar
Canada
241
Rep
271
Posts

Drives: 2023 BMW X1
Join Date: Oct 2023
Location: Toronto

iTrader: (0)

If my X1 had manual transmission like my M2 the car thieves here won’t even bother
Appreciate 2
      01-30-2024, 10:19 AM   #13
SpaceSilver.X1
world's slowest BMW driver
1554
Rep
1,003
Posts

Drives: U11, G60, W211, AZ20
Join Date: Nov 2023
Location: no front license plate state

iTrader: (0)

Quote:
Originally Posted by timesone View Post
If my X1 had manual transmission like my M2 the car thieves here won’t even bother

also works great if you don't want the valet to park your car for you! especially at hotels that only have valet parking and no self-parking.

https://www.youtube.com/shorts/PN26_2Y35JA
Appreciate 0
      01-30-2024, 12:11 PM   #14
metapod
Private
United_States
30
Rep
54
Posts

Drives: U11 X1 28i xDrive
Join Date: Jun 2008
Location: NH

iTrader: (0)

Garage List
2023 BMW X1  [0.00]
You can't even get a manual 3 series anymore. Bigly sad.
Appreciate 0
      01-30-2024, 12:36 PM   #15
SpaceSilver.X1
world's slowest BMW driver
1554
Rep
1,003
Posts

Drives: U11, G60, W211, AZ20
Join Date: Nov 2023
Location: no front license plate state

iTrader: (0)

Quote:
Originally Posted by metapod View Post
You can't even get a manual 3 series anymore. Bigly sad.
even VW will no longer off manual transmission on the new upcoming VW Golf GTI(the last ICE).

after 40+ years of driving, I think it's about time that I finally learn to drive a stick shift, before it's too late?
Appreciate 0
      01-30-2024, 01:46 PM   #16
timesone
Second Lieutenant
timesone's Avatar
Canada
241
Rep
271
Posts

Drives: 2023 BMW X1
Join Date: Oct 2023
Location: Toronto

iTrader: (0)

Quote:
Originally Posted by SpaceSilver.X1 View Post
even VW will no longer off manual transmission on the new upcoming VW Golf GTI(the last ICE).

after 40+ years of driving, I think it's about time that I finally learn to drive a stick shift, before it's too late?
lol I’m learning to drive dct
Appreciate 0
      01-30-2024, 01:54 PM   #17
SpaceSilver.X1
world's slowest BMW driver
1554
Rep
1,003
Posts

Drives: U11, G60, W211, AZ20
Join Date: Nov 2023
Location: no front license plate state

iTrader: (0)

Quote:
Originally Posted by timesone View Post
lol I’m learning to drive dct
so true....

when I first got the X1, it didn't feel like a "real" automatic transmission. I eventually figured out that it was more or less a manual transmission that was capable of shifting gears by itself. I learned to adapt myself to how the DCT behaved. I can almost anticipate how the DCT is going to do and accelerate/brake or make turns accordingly.

like I've said elsewhere, it was kind of learning to adapt to the way my cat behaved. Once I adapted, I was totally happy with my cat! That's the opposite of having a dog because a dog adapts to the human.
Appreciate 0
      01-30-2024, 04:22 PM   #18
COOLGREANY
Riding BMWs since 1976
COOLGREANY's Avatar
169
Rep
597
Posts

Drives: 24 xDrive28i Space Silver
Join Date: Feb 2013
Location: Florida

iTrader: (0)

Garage List
Quote:
Originally Posted by srbs73 View Post

I also did a check on all the keys to ensure they were shutting off after 3 mins.
How do you check to see of the keys have shutoff?
__________________
2024 X1 xDrive28i (Space Silver), 2014 BMW X1 (E84) (sold), 2010 MINI Cooper S Clubman, 2011 BMW R1200GS Motorcycle and various BMW motorcycles since 1976
Appreciate 0
      01-31-2024, 01:11 AM   #19
srbs73
Major
srbs73's Avatar
United Kingdom
572
Rep
1,205
Posts

Drives: BMW i4 M50
Join Date: Jun 2020
Location: UK

iTrader: (0)

Quote:
Originally Posted by COOLGREANY View Post
How do you check to see of the keys have shutoff?
I put the wheelie bin next to the drivers door and put the key on top and set timer for 3 minutes, after that try and pull the door handle. On my i4 and previous M340i (had the same key fob), after 3 minutes pulling the door handle won't unlock. If you pick the key up, it will unlock again.
Appreciate 1
      01-31-2024, 08:54 AM   #20
MMandov
Private
30
Rep
77
Posts

Drives: iX1 eDrive20
Join Date: Dec 2023
Location: Bulgaria (EU)

iTrader: (0)

There is no need for the key to shut off. We are lucky to be one of the few BMW vehicles that use UWB for keyless, which prevents relay attacks: https://www.adac.de/rund-ums-fahrzeu...steme/keyless/

Use webpage translate to read it in English. ADAC is the top car association in Germany and seems to be pushing hard against legacy keyless that is more a tool for thieves than for car owners.
Here is a PDF listing all models tested. Also in German: https://assets.adac.de/image/upload/...312_idwlqg.pdf
Appreciate 2
metapod30.00
jimdem51.00
Post Reply

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -5. The time now is 04:40 AM.




u11
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.
1Addicts.com, BIMMERPOST.com, E90Post.com, F30Post.com, M3Post.com, ZPost.com, 5Post.com, 6Post.com, 7Post.com, XBimmers.com logo and trademark are properties of BIMMERPOST