Car Broken into while locked

DevSecOps

Well-Known Member
First Name
Todd
Joined
Sep 22, 2021
Threads
69
Messages
4,764
Reaction score
11,624
Location
Sacramento, CA
Vehicles
'21 Audi SQ5 / '23 Rivian R1T / '23 M3P
Occupation
CISO
Country flag
I didn't post anything about this but the other day I turned off BT on my phone in order to get my R1T to sleep (I was testing something). I went to the MME, opened the door and drove away.

When I was a few miles down the road I was like, wait a minute, how did I start the car with BT disabled. I thought, surely it was re-enabled somehow. Pulled my phone out and looked and it was still off. I have no idea how I started the car and drove it away. I didn't have a fob anywhere near the car. Both fobs were in a lock box over 100' away.

Also, the multiple sensors in the mach-e used for BLE PaaK detection are supposed to triangulate the range of the device. It's not supposed to open from far away. A car parked on the street should not open when someone is inside the house. Likewise, the car shouldn't start unless the phone is triangulated to be within the cabin of the vehicle.
Sponsored

 
Last edited:

DevSecOps

Well-Known Member
First Name
Todd
Joined
Sep 22, 2021
Threads
69
Messages
4,764
Reaction score
11,624
Location
Sacramento, CA
Vehicles
'21 Audi SQ5 / '23 Rivian R1T / '23 M3P
Occupation
CISO
Country flag
Last edited:

Logal727

Well-Known Member
First Name
C
Joined
Aug 23, 2021
Threads
101
Messages
7,351
Reaction score
11,347
Location
Florida
Vehicles
‘21 Carbonized Gray Mustang Mach-E Premium AWD Ext
Country flag
As a follow up to my previous reply. I just attempted this again. I turned off BT, verified in FP that it was off, verified in my phone that it was off, went to the car, opened the door and started the car.

This shouldn't happen. Something is wonky...

View attachment 105706

View attachment 105707

View attachment 105708
Does Android actually turn off the Bluetooth module when you do it from quick settings? I know if you turn off BT on iPhone from the top right corner swip down menu, it doesn’t actually turn everything off, so stuff like your watch can stay connected, the Mach-E is a similar type of BT connection. You’d have to make sure the entire BT radio is off through the BT menu.
 

DevSecOps

Well-Known Member
First Name
Todd
Joined
Sep 22, 2021
Threads
69
Messages
4,764
Reaction score
11,624
Location
Sacramento, CA
Vehicles
'21 Audi SQ5 / '23 Rivian R1T / '23 M3P
Occupation
CISO
Country flag
Does Android actually turn off the Bluetooth module when you do it from quick settings? I know if you turn off BT on iPhone from the top right corner swip down menu, it doesn’t actually turn everything off, so stuff like your watch can stay connected, the Mach-E is a similar type of BT connection. You’d have to make sure the entire BT radio is off through the BT menu.
It does disconnect everything. Android settings are the same in both places. If I manually go into settings it will show that it's turned off there as well. FP even says it's off as does the Rivian app. Watch was disconnected as well. PaaK should not be working with BT disabled.

Additional data point, I was at home both times. The car knows I'm at home, which would be the same for the OP. So, could this be something Ford did to help reduce the PaaK problems at home?

I've reported this already and they are looking into it. It could very well be a bug with Android as well where it's not being disabled, but strange that it appears to everything that it is.

Edit: Additional data point - Powered off my phone completely and left it off. Car still unlocked and started.


See a couple posts down: https://www.macheforum.com/site/threads/car-broken-into-while-locked.29779/post-677869
 
Last edited:

Mach-Lee

Well-Known Member
First Name
Lee
Joined
Jul 16, 2021
Threads
262
Messages
11,356
Reaction score
24,986
Location
Wisconsin
Vehicles
2022 Mach-E Premium AWD
Occupation
Sci/Eng
Country flag
It does disconnect everything. Android settings are the same in both places. If I manually go into settings it will show that it's turned off there as well. FP even says it's off as does the Rivian app. Watch was disconnected as well. PaaK should not be working with BT disabled.

Additional data point, I was at home both times. The car knows I'm at home, which would be the same for the OP. So, could this be something Ford did to help reduce the PaaK problems at home?

I've reported this already and they are looking into it. It could very well be a bug with Android as well where it's not being disabled, but strange that it appears to everything that it is.

Edit: Additional data point - Powered off my phone completely and left it off. Car still unlocked and started.
And there are no fobs stored in the car? They still work without battery when close enough to the antennas. Faraday shields also aren't 100% foolproof.

Also try without your phone. iPhones still leave BLE active when off unless specially disabled.
 

DevSecOps

Well-Known Member
First Name
Todd
Joined
Sep 22, 2021
Threads
69
Messages
4,764
Reaction score
11,624
Location
Sacramento, CA
Vehicles
'21 Audi SQ5 / '23 Rivian R1T / '23 M3P
Occupation
CISO
Country flag
And there are no fobs stored in the car? They still work without battery when close enough to the antennas. Faraday shields also aren't 100% foolproof.

Also try without your phone. iPhones still leave BLE active when off unless specially disabled.
I had a piece of a dissembled FOB that I was testing with, and forgot about, at the very bottom of the center console. No battery and in a Faraday bag and it was what was causing the car to start. That's wild.

Ok, so ignore everything I said previously... I'm gonna take the L here and move on. Thanks Lee.
Sponsored

 
 







Top