2006 Sedan Rwd Navigation Sunroof Cloth Lifetime Warranty We Finance 77k Miles on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

BMW expands Takata airbag recall nationwide, 140k 3 Series affected

Following the urging of the National Highway Traffic Safety Administration, BMW has expanded its recall of vehicles equipped with Takata airbag inflators to cover the entirety of the United States, rather than just high-humidity areas. That means there are about 140,000 owners of 2004 to 2006 model year BMW 3 Series coupes, convertibles, sedans and wagons (that means owners of both E46 and E90 3ers should take note). It's unclear if this recall includes the high-performance M3 Coupe and Convertible. With the expansion of its airbag recall, BMW joins Honda, Mazda, Ford and Fiat Chrysler in moving from a regional to a nationwide recall of vehicles equipped with Takata airbags. According to Reuters, BMW claims none of its vehicles have been subject to the potentially harmful airbag deployments.

BMW i3 REx rated at 117 MPGe, 39 mpg with 72-mile EV range

The numbers haven't made their digital way to the EPA's website yet, but we can now confirm that the BMW i3 with range extender will be officially rated at a combined 117 MPGe with 39 mpg once the battery runs out. That puts the amazing little city car just ahead of the pure-electric Fiat 500e (116 MPGE, combined) and behind the Honda Fit EV (118) and the Chevy Spark EV (119). In the plug-in hybrid category, it's at the top of the class, beating out the Honda Accord PHEV, which is rated at 115 MPGe but is also a much bigger vehicle. The i3 REx also has an official all-electric range of 72 miles and can go another 78 on gas (for a total of 150). When it's not carrying around the extra fuel tank and engine, the all-electric i3 gets 124 MPGe (combined), which is the currently the highest in the US. The i3 EV also has an all-electric range of 81 miles. BMW expects to deliver the first i3 REx in the US this week and delivered the first all-electric version earlier this month. There was a bit of a hold-up on the range-extender version thanks to a delay with getting these EPA numbers. Now that all the bureaucratic boxes have been checked, it's off to customer driveways they go.