[olyjohn]

Cars have been this easy to steal forever. Thieves generally take your car in under 30 seconds regardless. This particular vulnerability was just one of the first to get fully documented and distributed to everybody and popularized by an algorithm.

[doodlesdev]

What I understand from this specific case these models don't have an engine immobilizer AND it's very easy to turn on the ignition using a USB cable. If I understood it correctly this is easier than stealing a car in the 80s, you don't even have to smash a window, it's that bad.

The United States is an exception to the rule being the only first world country that I know of to not mandate engine immobilizers (I'm sure someone will be able to point an exception, but overall these are mandatory in a lot of countries for decades already).

[jaclaz]

It is exactly how stealing a car in the 80's was.

You need to access the vehicle (if you are good by opening the door with a lockpick or with some other non-damaging trick, otherwise breaking a window), then you force the ignition block, removing the lock cylinder, then you use something to turn the ignition on.

In the '80's you would have probably used a screwdriver, as what remained below the removed lock cylinder would have been a slot, on these particular models you could use a pair of thin nosed pliers but a USB A connector is coincidentally just the right size for the "tab" that has to be turned.