Support road.cc

Like this site? Help us to make it better.

news

“False info” – VanMoof rejects tech website’s claim it hacked one of Dutch firm’s “unstealable” smartbikes

Digital Trends says it bypassed alarm and removed SIM which allows bike to be tracked

The co-founder of VanMoof, the Netherlands-based firm that says its S2 SmartBike is “unstealable” has rejected a tech website’s claim that it managed to hack one in less than a minute and remove the SIM card that enables the bike’s whereabouts to be tracked via GSM.

The e-bike is locked and unlocked via an app, has a hidden wheel lock, alarm, and a front light that flashes the letters SOS in Morse code if it is tampered with, and the company has a team of what it calls “bike hunters” who track down stolen bikes using the GSM system.

It also says that anyone trying to remove the SIM card “would have destroyed the bike in the process.”

However, an article written by Adam Kaslikowski on Digital Trends claimed: “We have found this to be completely untrue.”

The website says it partnered with a digital security expert and engineer who, using tools costing $12, managed to bypass the security system and remove the SIM, meaning the bike could not be traced, all in less than 50 seconds.

“In no way was the bike alarm tripped,” the article said. “In no way was the frame cut. And in absolutely no way was the bike destroyed.”

Digital Trends went on to describe in detail exactly how its had managed to remove the bike’s computer module and remove the SIM, accompanied by a video showing how it was done.

It alleged that “VanMoof is deceiving its customers when it states in its support pages that ‘Removing the SIM card from the SmartBike would be a time-consuming task, and by the time a thief had done it not only would we probably have tracked down the bike, but they would have destroyed the bike in the process’,” adding, “This is patently untrue.”

The article concluded by saying that while removing the SIM card disabled the alarm and wheel lock, “they weren’t that useful in the first place,” but otherwise the bike continued to work properly.

“Our researcher has not yet decided on whether he will keep his VanMoof or not, but we have decided that any company who willfully misguides its consumers is not worth our, or your money,” it added.

On Twitter, Byron from Tree Hugger questioned whether VanMoof “deserved this hostile article from Digital Trends or how to crack their security tutorial,” and asked whether the journalist had approached them to comment or provide a reply.

Responding to his tweet, VanMoof co-founder Taco Carlier said the company had not been approached and if it had been, they would have told Digital Trends that the Stealth Lock was not engaged, describing the article as “false info.”

He wrote: “No they did not reach out to us and asked for comments. If they would we have told them that the Stealth Lock was not engaged while this was filmed. (The alarm would go off immediately if it was engaged). It is false info. We have tried to reach out today.”

Founded in Amsterdam in 2009, last month VanMoof secured €2.5 million in crowdfunded investment in just 12 hours – the fastest equity crowdfunding ever in the Netherlands, according to the company.

The fundraising goal was met at 8.30pm on 12 June by investors on the Oneplanetcrowd platform and VanMoof riders who had been invited to invest by email just that morning, with the target hit before the campaign opened to the wider public.

Add new comment

4 comments

Avatar
Tired of the tr... | 5 years ago
1 like

It is all very interesting from a geek/hacking perspective to work out what is possible or not, but with all these "expensive locks hacked" articles I wonder about the practical relevance.

Even assuming it works as easily as in the video, the thief needs to know exactly what they are doing to get to this specific bike. Most thieves don't have the specific knowledge but just try brute force. So I wonder who goes through the trouble to find out about the specific vulnerabilities for this bike? A thief stealing random bikes is unlikely to encounter one, so why should they know about this, as they also have to be familiar with all sorts of other locks and alarms? There's really only a point if they are stolen to order, i.e. the owners specifically sought out to steal this brand for a well-paying customer.

But is there a market? Luxury cars get nicked by order and shipped to Russia or Africa and sell for 10000s, but a bike which might be perhaps 1000 second-hand? Is that worth all the effort? Especially as, once the computer is removed, it is just an ordinary e-bike without its unique selling point, worth much less.

If somebody is knowledgeable and ressourceful enough to steal it, they surely can, but then they are skilled enough to get a much better paid job or steal something more valuable.

Avatar
hawkinspeter | 5 years ago
0 likes

Surely any kind of GPS tracking could be defeated by wrapping it in aluminium foil anyway (or shoving it into the back of a metal van).

Avatar
Sriracha replied to hawkinspeter | 5 years ago
0 likes
hawkinspeter wrote:

Surely any kind of GPS tracking could be defeated by wrapping it in aluminium foil anyway (or shoving it into the back of a metal van).

Maybe. Certainly it would defeat the GPS. But where's the reward in having a stolen bike in the back of your van?

Avatar
hawkinspeter replied to Sriracha | 5 years ago
0 likes
Sriracha wrote:
hawkinspeter wrote:

Surely any kind of GPS tracking could be defeated by wrapping it in aluminium foil anyway (or shoving it into the back of a metal van).

Maybe. Certainly it would defeat the GPS. But where's the reward in having a stolen bike in the back of your van?

It could buy you time to wrap the GPS in foil and wait for the battery to run out or set up a StingRay device to intercept the communication. But, yes, I'm probably over-thinking it (and not a bike thief).

Latest Comments

 
Logo

Looks like your ad blocker is on.

×

We rely on ads to keep creating quality content for you to enjoy for free.

You can subscribe to road.cc to support us and turn off ads for good

Continue without supporting us

Choose your Ad Blocker

  • Adblock Plus
  • Adblock
  • Adguard
  • Ad Remover
  • Brave
  • Ghostery
  • uBlock Origin
  • uBlock
  • UltraBlock
  • Other
  1. In the extension bar, click the AdBlock Plus icon
  2. Click the large blue toggle for this website
  3. Click refresh
  1. In the extension bar, click the AdBlock icon
  2. Under "Pause on this site" click "Always"
  1. In the extension bar, click on the Adguard icon
  2. Click on the large green toggle for this website
  1. In the extension bar, click on the Ad Remover icon
  2. Click "Disable on This Website"
  1. In the extension bar, click on the orange lion icon
  2. Click the toggle on the top right, shifting from "Up" to "Down"
  1. In the extension bar, click on the Ghostery icon
  2. Click the "Anti-Tracking" shield so it says "Off"
  3. Click the "Ad-Blocking" stop sign so it says "Off"
  4. Refresh the page
  1. In the extension bar, click on the uBlock Origin icon
  2. Click on the big, blue power button
  3. Refresh the page
  1. In the extension bar, click on the uBlock icon
  2. Click on the big, blue power button
  3. Refresh the page
  1. In the extension bar, click on the UltraBlock icon
  2. Check the "Disable UltraBlock" checkbox
  1. Please disable your Ad Blocker
  2. Disable any DNS blocking tools such as AdGuardDNS or NextDNS

If the prompt is still appearing, please disable any tools or services you are using that block internet ads (e.g. DNS Servers).

Logo