2005 Bmw 645 Ci on 2040-cars

Auto blog

BMW Hack: the auto industry's big cyber-security warning sign [w/video]

A cyber-security hole that left more than two million BMWs vulnerable may be the most serious breach the auto industry has faced in its emerging fight against car hackers. Security experts are not only concerned that researchers found weaknesses inside the company's Connected Drive remote-services system. They're worried about how the hackers gained entry. German researchers spoofed a cell-phone station and sent fake messages to a SIM card within a BMW's telematics system. Once inside, they locked and unlocked car doors. Other researchers have demonstrated it's possible to hack into a car and control its critical functions, but what separates this latest exploit from others is that it was conducted remotely. In an industry that's just coming to grips with the security threats posed by connectivity in cars, the possibility of a remote breach has been an ominous prospect. The fact it has now occurred may mean a landmark threshold has been crossed. "It's as close as I've seen to a genuine, remote attack on telematics," said Mike Parris, head of the secure car division at SBD, a UK-based automotive technology consulting company. "At this point, the OEMs are trying to play a game of catch up." Previous researchers in the automotive cyber-security field have launched remote attacks that are similar in nature, though not the same. In 2010, academics at California-San Diego and the University of Washington demonstrated they could remotely control essential functions of a car, but they needed to be within close proximity of the vehicle. In November 2014, researchers at Argus Cyber Security remotely hacked cars with an aftermarket device called a Zubie plugged into their diagnostic ports. But the remote attack was predicated on the Zubie dongle having physically been installed in the car. With the BMW hack, researchers compromised the car without needing physical access or proximity. The German Automobile Association, whose researchers conducted the BMW study, said it infiltrated the system "within minutes" and left undetected, a feat that raises the possibility that a hacker could do the same in a real-world scenario. Messages Were Sent Unencrypted Security analysts described the BMW infiltration as a "man in the middle" attack. Researchers mimicked a cellular base station and captured traffic between the car and the BMW Connected Drive service, which drivers can access and control via an app on their cell phones.

Dealers mobilize to protect their margins from automaker subscription services

Six individual auto brands — Lincoln, Cadillac, Porsche, Mercedes, BMW and Volvo — have established or are trialing a vehicle subscription service in the U.S. Three third-party companies — Flexdrive, Clutch and Carma — run brand-agnostic subscription services. And three automakers — Mercedes-Benz, BMW, and General Motors — have also launched short-term rental services. Dealers, afraid of how these trends might affect their margins, are building political and lawmaking campaigns to protect their revenue streams. So far, three states are investigating automaker subscriptions, and Indiana has banned any such service until next year. It's certain that those three states are the first fronts in a long political and legal battle. Powerful dealer franchise laws mandate the existence of dealers and restrict how automakers are allowed to interact with customers to sell a vehicle. On top of that, Bob Reisner, CEO of Nassau Business Funding & Services, said, "Dealers and their associations are among the strongest political operators in many states. They as a group are difficult for state politicians to vote against." In California earlier this year, the state Assembly debated a bill with wide-ranging provisions to protect against what the California New Car Dealers Association called "inappropriate treatment of dealers by manufacturers." One of those provisions stipulated that subscription services need to go through dealers, but that item got stripped out when dealers and manufacturers agreed to discuss the matter further. In Indiana, Gov. Eric Holcomb signed a moratorium on all subscription programs by dealers or manufacturers until May 1, 2019, to give legislators more time to investigate. Dealers in New Jersey have taken their campaign to the state capitol, asking that the cars in subscription programs get a different classification for registration purposes. Automakers run the current subscription services and own the vehicles. Sign-ups and financial transactions happen online or through apps, leaving dealers to do little more than act as fulfillment centers to various degrees, with little legal recourse as to compensation amounts when they're called on to deliver or service a car. That's a bad base to build on for business owners who've sunk millions of dollars into their operations.

BMW exec says public chargers not important for EV success

What has BMW learned from years of electric vehicle test programs and working with Mini E drivers and the ActiveE Electronauts? According to BMW board member Herbert Diess, it's that public charging is not an important piece of the puzzle of making EVs a success. The way those early EV drivers used their vehicles told BMW that, "public infrastructure is not really very important because most people are charging their cars at home," Diess recently told Wards Auto. It's a message we've heard before. Diess' personal experience fits with this conclusion, he said. After driving his company's new i3 city EV for over a year, "not once have I touched public charging." Of course, the i3 does let the driver search for public charging stations and BMW has a partnership with ChargePoint, and Diess is not hinting that BMW is totally against the idea of public charging. Still, Diess' comments are not likely to find a warm welcome with everyone in the EV scene. An August 2012 UCLA study titled "Financial Viability Of Non-Residential Electric Vehicle Charging Stations" (PDF) clearly states: Adoption by consumers will largely be a function of the electric vehicle charging options available. Studies show that most EV charging currently takes place in the home (Carr 2010). Even so, in order for EVs to gain widespread consumer adoption, it is critical for an infrastructure of electric vehicle supply equipment (EVSEs) to exist outside the home. Even BMW's own electric drivers have been sending mixed messages. In 2010, a study of Mini E drivers found that 87.5 percent said a public charging infrastructure is necessary, though 75 percent later said they could manage without such a network.