Support road.cc

Like this site? Help us to make it better.

news

“False info” – VanMoof rejects tech website’s claim it hacked one of Dutch firm’s “unstealable” smartbikes

Digital Trends says it bypassed alarm and removed SIM which allows bike to be tracked

The co-founder of VanMoof, the Netherlands-based firm that says its S2 SmartBike is “unstealable” has rejected a tech website’s claim that it managed to hack one in less than a minute and remove the SIM card that enables the bike’s whereabouts to be tracked via GSM.

The e-bike is locked and unlocked via an app, has a hidden wheel lock, alarm, and a front light that flashes the letters SOS in Morse code if it is tampered with, and the company has a team of what it calls “bike hunters” who track down stolen bikes using the GSM system.

It also says that anyone trying to remove the SIM card “would have destroyed the bike in the process.”

However, an article written by Adam Kaslikowski on Digital Trends claimed: “We have found this to be completely untrue.”

The website says it partnered with a digital security expert and engineer who, using tools costing $12, managed to bypass the security system and remove the SIM, meaning the bike could not be traced, all in less than 50 seconds.

“In no way was the bike alarm tripped,” the article said. “In no way was the frame cut. And in absolutely no way was the bike destroyed.”

Digital Trends went on to describe in detail exactly how its had managed to remove the bike’s computer module and remove the SIM, accompanied by a video showing how it was done.

It alleged that “VanMoof is deceiving its customers when it states in its support pages that ‘Removing the SIM card from the SmartBike would be a time-consuming task, and by the time a thief had done it not only would we probably have tracked down the bike, but they would have destroyed the bike in the process’,” adding, “This is patently untrue.”

The article concluded by saying that while removing the SIM card disabled the alarm and wheel lock, “they weren’t that useful in the first place,” but otherwise the bike continued to work properly.

“Our researcher has not yet decided on whether he will keep his VanMoof or not, but we have decided that any company who willfully misguides its consumers is not worth our, or your money,” it added.

On Twitter, Byron from Tree Hugger questioned whether VanMoof “deserved this hostile article from Digital Trends or how to crack their security tutorial,” and asked whether the journalist had approached them to comment or provide a reply.

Responding to his tweet, VanMoof co-founder Taco Carlier said the company had not been approached and if it had been, they would have told Digital Trends that the Stealth Lock was not engaged, describing the article as “false info.”

He wrote: “No they did not reach out to us and asked for comments. If they would we have told them that the Stealth Lock was not engaged while this was filmed. (The alarm would go off immediately if it was engaged). It is false info. We have tried to reach out today.”

Founded in Amsterdam in 2009, last month VanMoof secured €2.5 million in crowdfunded investment in just 12 hours – the fastest equity crowdfunding ever in the Netherlands, according to the company.

The fundraising goal was met at 8.30pm on 12 June by investors on the Oneplanetcrowd platform and VanMoof riders who had been invited to invest by email just that morning, with the target hit before the campaign opened to the wider public.

Simon joined road.cc as news editor in 2009 and is now the site’s community editor, acting as a link between the team producing the content and our readers. A law and languages graduate, published translator and former retail analyst, he has reported on issues as diverse as cycling-related court cases, anti-doping investigations, the latest developments in the bike industry and the sport’s biggest races. Now back in London full-time after 15 years living in Oxford and Cambridge, he loves cycling along the Thames but misses having his former riding buddy, Elodie the miniature schnauzer, in the basket in front of him.

Add new comment

4 comments

Avatar
Tired of the tr... | 5 years ago
1 like

It is all very interesting from a geek/hacking perspective to work out what is possible or not, but with all these "expensive locks hacked" articles I wonder about the practical relevance.

Even assuming it works as easily as in the video, the thief needs to know exactly what they are doing to get to this specific bike. Most thieves don't have the specific knowledge but just try brute force. So I wonder who goes through the trouble to find out about the specific vulnerabilities for this bike? A thief stealing random bikes is unlikely to encounter one, so why should they know about this, as they also have to be familiar with all sorts of other locks and alarms? There's really only a point if they are stolen to order, i.e. the owners specifically sought out to steal this brand for a well-paying customer.

But is there a market? Luxury cars get nicked by order and shipped to Russia or Africa and sell for 10000s, but a bike which might be perhaps 1000 second-hand? Is that worth all the effort? Especially as, once the computer is removed, it is just an ordinary e-bike without its unique selling point, worth much less.

If somebody is knowledgeable and ressourceful enough to steal it, they surely can, but then they are skilled enough to get a much better paid job or steal something more valuable.

Avatar
hawkinspeter | 5 years ago
0 likes

Surely any kind of GPS tracking could be defeated by wrapping it in aluminium foil anyway (or shoving it into the back of a metal van).

Avatar
Sriracha replied to hawkinspeter | 5 years ago
0 likes
hawkinspeter wrote:

Surely any kind of GPS tracking could be defeated by wrapping it in aluminium foil anyway (or shoving it into the back of a metal van).

Maybe. Certainly it would defeat the GPS. But where's the reward in having a stolen bike in the back of your van?

Avatar
hawkinspeter replied to Sriracha | 5 years ago
0 likes
Sriracha wrote:
hawkinspeter wrote:

Surely any kind of GPS tracking could be defeated by wrapping it in aluminium foil anyway (or shoving it into the back of a metal van).

Maybe. Certainly it would defeat the GPS. But where's the reward in having a stolen bike in the back of your van?

It could buy you time to wrap the GPS in foil and wait for the battery to run out or set up a StingRay device to intercept the communication. But, yes, I'm probably over-thinking it (and not a bike thief).

Latest Comments