Bronco Raptor security advisory

[DarthLincoln]

At least that white car owner is using strategy. I try to park like that, so I only have a vehicle on one side. And then I park near the white line on the empty side, giving more room away from any swinging door.

Same. I also never park on the ramped sections of parking garages where gravity might pull an open door into the downhill car if the occupant is careless.

In that first photo I‘m guessing the owners of those three cars were friends who parked together and the Raptor was protecting the McLaren. It still shocks me that someone would park cars like McLaren and Ferrari at an airport.

Sponsored

 

[5GENIDN]

Just pulled a number out of the air to illustrate a point. You could have a high percentage of one model being stolen and still not be enough to make a "Top stolen" list.

I thought it was an actual count... sorry... We do have a large percentage of Broncos here, including Raptors. In the valley alone we have three Ford dealers selling them and one of those was saying last week they are averaging 2.5 sales a day (of all Broncos). Our valley has a population right at 1 million.

 

[DALOLA]

lol.... you guys will go out on the trail, beat the sh@t out of your Bronco, then worry about a door ding at the airport?

(not singling anyone out here, just finding humor in this weird conversation....)

 

[DarthLincoln]

lol.... you guys will go out on the trail, beat the sh@t out of your Bronco, then worry about a door ding at the airport?

(not singling anyone out here, just finding humor in this weird conversation....)

LOL, yeah my protective parking behavior mainly originates from and applies to driving my BMW M coupe as my only car for ~22 years, until I added the Bronco. But I’ll still choose less vulnerable spots in a parking garage with the Bronco since I don’t care about walking a bit further.

 

[MEDISN]

Try that in downtown Santa Ana.

Too far from the beach. Can't do it.

 

[MEDISN]

lol.... you guys will go out on the trail, beat the sh@t out of your Bronco, then worry about a door ding at the airport?

(not singling anyone out here, just finding humor in this weird conversation....)

It's fine if I dent it, it's not okay when someone else does it! It's the principle!

As someone else said my other vehicles are nicer so it's ingrained to choose parking spaces wisely and be mindful of doors.

I've only had one nasty door ding in the bronco and it was like $300 and 90min to remove by PDR guy. Those aluminum doors are difficult I am told. The same guy did our Escalade previously and it was only $100 and 20min.

 

[Rydfree]

It's fine if I dent it, it's not okay when someone else does it! It's the principle!

As someone else said my other vehicles are nicer so it's ingrained to choose parking spaces wisely and be mindful of doors.

I've only had one nasty door ding in the bronco and it was like $300 and 90min to remove by PDR guy. Those aluminum doors are difficult I am told. The same guy did our Escalade previously and it was only $100 and 20min.

Yeah, unfortunately the aluminum does not have a memory like steel. A steel panel will mostly pop back into shape but a aluminum will have to be thoroughly massaged. Kinda like my old ass

As far as door dings and off roading damage go, I prefer no dents at all. If I can off road the Bronco without dinging it up, I sure don't want a parking lot dent from some careless no parking Karen and her bratty kids !

 

[BigMeatsBronco]

Largely a myth. Do some research.

Somewhat relevant for older vehicles. The vulnerability isn’t really the VIN — it’s weak identity verification in creating a duplicate fob. LE do sometimes suggest this as a way to add a small bit of friction in the process. But in the end, this is almost never used to steal a modern vehicle.

Im not so sure, what are you referring to as a "myth" ?...a laptop, some user credentials, and access to the OBD port is all that's needed to program the key fob...The VIN number itself would only be somewhat helpful for a thief, but still could be used to aquire some information ahead of the heist.

These thefts are a very real thing happening OFTEN to ALL raptors models..

https://fordauthority.com/2025/02/more-ford-f-150-raptor-r-pickups-stolen-near-flat-rock-michigan/#amp_tf=From %1$s&aoh=17708665881230&referrer=https://www.google.com&ampshare=https://fordauthority.com/2025/02/more-ford-f-150-raptor-r-pickups-stolen-near-flat-rock-michigan/


https://thebronconation.com/news-n....m-worth-of-ford-f-150-raptor-pickups-t.12642/

 

[swamp2]

Im not so sure, what are you referring to as a "myth" ?...a laptop, some user credentials, and access to the OBD port is all that's needed to program the key fob...The VIN number itself would only be somewhat helpful for a thief, but still could be used to aquire some information ahead of the heist.

These thefts are a very real thing happening OFTEN to ALL raptors models..

It's a myth that covering your VIN prevents theft.

The links you provided are random stories about F-150 Raptor thefts with zero firm conclusions as to how they were stolen.

All models of cars get stolen.

Tell us how an uncovered VIN gets you access to an ODB port or otherwise enabled a theft?

 

[BigMeatsBronco]

It's a myth that covering your VIN prevents theft.

The links you provided are random stories about F-150 Raptor thefts with zero firm conclusions as to how they were stolen.

All models of cars get stolen.

Tell us how an uncovered VIN gets you access to an ODB port or otherwise enabled a theft?

It don't, but if you have the VIN and Oasis you can get a lot of information. Not the key codes though obviously. The redit story has a post where many of the Raptors had the door handles broken off and the were fully or partially programmed successfully

 

[BigMeatsBronco]

It's a myth that covering your VIN prevents theft.

The links you provided are random stories about F-150 Raptor thefts with zero firm conclusions as to how they were stolen.

All models of cars get stolen.

Tell us how an uncovered VIN gets you access to an ODB port or otherwise enabled a theft?

I'm not gonna spill all the beans here for everybody to see, but the general idea is, with the VIN number is this this...

I can go on Ford's pass app and enter in any VIN number and lo and behold the vehicle will pop up, then, it requests that the user credentials be released from either ford itself or from the actual owner, (through an email notification or verification) if the vehicle is new, then it asks you to start the vehicle. Once the ford pass app is synced, to the truck, obviously you can then unlock the doors and of course.Do remote start as well......

So the logic goes like this... if there's a vehicle that a thief wants to steal.And if the actual owner has never set up ford pass app then all the thief needs to do is load the ford pass app with the VIN number and then when the vehicle is started the next time...whizbang!!! it is synced simple as that.Now they have control of the vehicle through the ford pass app.


Ford should offer me a reward for showing them how easy it is

 

[swamp2]

I'm not gonna spill all the beans here for everybody to see, but the general idea is, with the VIN number is this this...

I can go on Ford's pass app and enter in any VIN number and lo and behold the vehicle will pop up, then, it requests that the user credentials be released from either ford itself or from the actual owner, (through an email notification or verification) if the vehicle is new, then it asks you to start the vehicle. Once the ford pass app is synced, to the truck, obviously you can then unlock the doors and of course.Do remote start as well......

So the logic goes like this... if there's a vehicle that a thief wants to steal.And if the actual owner has never set up ford pass app then all the thief needs to do is load the ford pass app with the VIN number and then when the vehicle is started the next time...whizbang!!! it is synced simple as that.Now they have control of the vehicle through the ford pass app.


Ford should offer me a reward for showing them how easy it is

Pretty sure that won't work. IIRC, full activation and control requires explicit approval via a prompt on the vehicle's infotainment screen after starting the engine.

Obviously, this step needs physical access to the interior and cannot be bypassed remotely or automatically upon startup. If the owner hasn't set up the app, they would see the prompt and would deny it, preventing unauthorized sync.

Of course the rare user could blindly of mistakenly click away, enabling theft.

 

[BigMeatsBronco]

Another case of your speculation, without any effort or hands on experience...I have added the F150 Raptor R to my ford pass account that I don't own, and never owned...but I own the engine...what have you accomplished? IM DONE EXPLAINING THE VULNERABILITY TO YOU.

If your so confident in your speculation, feel free to post your Braptor VIN...

 

[swamp2]

Another case of your speculation, without any effort or hands on experience...I have added the F150 Raptor R to my ford pass account that I don't own, and never owned...but I own the engine...what have you accomplished? IM DONE EXPLAINING THE VULNERABILITY TO YOU.

If your so confident in your speculation, feel free to post your Braptor VIN...

Quite the opposite, I'm reasonably sure ("IIRC" above) from my own experience, in my own truck, there is a confirmation step. That's confirmed by the Internet. See screenshot of the live process in an Expedition. "ACCEPT PROMPT IN VEHICLE" is what it says on the phone.

You are claiming that this is false and this step is not needed?

My VIN: 1FMEE5JROPLC01807 , Molon labe

 

[BigMeatsBronco]

So you could simply be in the vehicle by test driving it or being a mechanic that works on it or numerous other ways to be inside the vehicle momentarily. Especially easy in an new Raptor...with the VIN handy, pre programmed in your phone ahead of time, all you'd have to do is touch couple buttons, literally in and out in seconds. I'm sure a REAL thief would come up with far better solutions, but the vulnerability does in fact exist. Some folks haven't even set up the ford pass app ...

Sponsored