Comment Re:Still Evil (Score 1) 195
1) Find car you'd like to steal or strip.
2) Social engineer the car to be a part of this "rental agreement".
3) "rent" car using the usual fake ID stuff (or just tell them you're an illegal and they're not allowed to discriminate against you).
4) Drive to steel walled warehouse or just strip the parts you want, after all they have fake ID.
5) Profit!
I am virtually certain GM is not prepared for the security implications of this.
It seems that you don't have a very good idea of how the program works.
First of all, you can't provide fake ID, because to participate as a renter you must present a driver's license to RelayRides. They check with your state's DMV to determine if the license is up to date and if you have a relatively clean driving record before they agree to insure you. Only then will you be able to go on-line and rent someone else's car. It would be very difficult to "fake" this.
GM is simply making OnStar anti-theft protection standard on all of their cars. One feature of this is that the owner can use a smart phone app to unlock the car. So, you must have a valid smartphone account for this to work, again identifying you as the culprit.
If the car is stolen, OnStar's GPS tracking features will be a huge help in locating the car.
I'm not saying that there's no way to spoof the app and make it look like someone else stole the car. I'm just saying, it would take a much more sophisticated approach than you mention.