[inversionOf]

And then what? You can't actually do anything with the car without the keys. Steal the goods in it? Well most thieves just smash a window rather than relying upon social engineering, presuming that even worked.

OnStar started as a data connection for diagnostics and emergency services -- it reports back various diagnostic details, and gives your location and accident details in a serious event. Once they had the cellular data connection they added utility for things like lock out assistance and remote start, and locating your car (e.g. in a big parking lot).

[balabaster]

Smashing a window draws attention, social engineering when done right does not until it's way too late... certainly nobody watching in the parking lot would think twice about a guy on a cellphone getting into "his" car. They would however think twice and may perhaps even alert authorities or take your picture if they saw you smashing a window to get into what's quite probably someone else's car.

[inversionOf]

So instead you make a traceable call to OnStar, before which you will have amassed all of the personal details to somehow socially engineer them into letting you into the vehicle (not just their names and personal details, but the system also has a code you have to tell them).

This is one of those hysterical overreaches that has no correlation with real world crime at all.

[balabaster]

Be that as it may, security breaches occur in complex and presumed safe systems every day - look at how a social engineer used data found from one system (Amazon) to exploit another (Apple) to get further information and cause users havoc last year. Both systems were presumed to have safeguards that kept intruders out. When humans are part of the security equation, in my experience, all bets are off.

In this case, it may (or may not) be a hysterical over-reach, only time will really tell.