PSA - Door Lock Confirmation When Door Ajar

DevSecOps

Well-Known Member
First Name
Todd
Joined
Sep 22, 2021
Threads
69
Messages
4,764
Reaction score
11,624
Location
Sacramento, CA
Vehicles
'21 Audi SQ5 / '23 Rivian R1T / '23 M3P
Occupation
CISO
Country flag
I've reported this issue already to the appropriate people via DM's but I just wanted to make a public post about it because I feel it's a moderately serious issue that people should be aware of.

Steps to reproduce:

Leave a door ajar
While connected to the vehicle with PaaK and showing "Bluetooth Connected" press and hold the lock button
Vehicle will report "Locked successfully"

Expected behavior:

When not connected to Bluetooth the expected message is received "Door Ajar"

Reason for concern:

A user might assume that their vehicle is locked, when in reality it's not only not locked, but is actually opened.
Sponsored

 
Last edited:

Neil4Real

Well-Known Member
Joined
Jul 8, 2021
Threads
17
Messages
3,385
Reaction score
3,073
Location
Southern California
Vehicles
Mach-E GT Performance Edition - Shadow Black
Country flag
I thought the car can still lock even with doors open, but when you close them, they'll be locked? Just like if you press the lock button inside the car, with the door open, the car will be locked when you close the door?
 
OP
OP
DevSecOps

DevSecOps

Well-Known Member
First Name
Todd
Joined
Sep 22, 2021
Threads
69
Messages
4,764
Reaction score
11,624
Location
Sacramento, CA
Vehicles
'21 Audi SQ5 / '23 Rivian R1T / '23 M3P
Occupation
CISO
Country flag
I thought the car can still lock even with doors open, but when you close them, they'll be locked? Just like if you press the lock button inside the car, with the door open, the car will be locked when you close the door?
Yes, but if you do this while connected to Bluetooth the car informs you that the vehicle is completely locked. If you do this while NOT connected to Bluetooth it tells you a door is ajar. Same exact scenario but different messaging.

This could easily cause someone to think their vehicle is secured when it's actually very insecure and open.
 

Neil4Real

Well-Known Member
Joined
Jul 8, 2021
Threads
17
Messages
3,385
Reaction score
3,073
Location
Southern California
Vehicles
Mach-E GT Performance Edition - Shadow Black
Country flag
Yes, but if you do this while connected to Bluetooth the car informs you that the vehicle is completely locked. If you do this while NOT connected to Bluetooth it tells you a door is ajar. Same exact scenario but different messaging.

This could easily cause someone to think their vehicle is secured when it's actually very insecure and open.
Ah!! Okay, that makes sense. Thank you very much for the clarification!
 

Neil4Real

Well-Known Member
Joined
Jul 8, 2021
Threads
17
Messages
3,385
Reaction score
3,073
Location
Southern California
Vehicles
Mach-E GT Performance Edition - Shadow Black
Country flag
When not connected to Bluetooth, I actually get "Locked successfully, but door is ajar" or "Locked successfully, but liftgate is open."
 
OP
OP
DevSecOps

DevSecOps

Well-Known Member
First Name
Todd
Joined
Sep 22, 2021
Threads
69
Messages
4,764
Reaction score
11,624
Location
Sacramento, CA
Vehicles
'21 Audi SQ5 / '23 Rivian R1T / '23 M3P
Occupation
CISO
Country flag
When not connected to Bluetooth, I actually get "Locked successfully, but door is ajar" or "Locked successfully, but liftgate is open."
That is correct when NOT connected to Bluetooth. It warns that a door is ajar. When connected it doesn't warn you which is the problem.
Sponsored

 
 







Top