This is easy - the legitimate customer has physical access to the in car screen where the attacker does not.<p>&quot;To pair your phone, please ensure you&#x27;re sitting in the car with the parking brake applied, enter this code when prompted by the car...&quot;