M Sport Pkg, Executive Pkg, Navigation, Comfort Access, Rear-view Camera on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

2014 BMW 328d xDrive Sport Wagon

There's a running joke among auto writers that the perfect car would be a diesel-powered, rear-drive wagon with manual transmission and no power accessories whatsoever. It would only be available in brown and would somehow be as fun to drive as a Mazda MX-5 Miata. Makes total sense, right?
Realistically, no manufacturer is ever going to completely fulfill our wishes, no matter how much we beg, plead, kick and scream about our dream car that most of us would actually never buy. The best we can do is hope for a vehicle that mixes some aspects of this ideal journalist's car. And in today's world, that vehicle just might be the BMW 328d xDrive Sport Wagon.
No, it's not available with a manual gearbox, and power can only be sent through an xDrive all-wheel-drive system. It's also not available in brown (although both Mojave Metallic and Sparkling Bronze Metallic are acceptable stand-ins), but it ticks the two main boxes of being a diesel-powered wagon, one of only a couple such models in the United States.

Dealers mobilize to protect their margins from automaker subscription services

Six individual auto brands — Lincoln, Cadillac, Porsche, Mercedes, BMW and Volvo — have established or are trialing a vehicle subscription service in the U.S. Three third-party companies — Flexdrive, Clutch and Carma — run brand-agnostic subscription services. And three automakers — Mercedes-Benz, BMW, and General Motors — have also launched short-term rental services. Dealers, afraid of how these trends might affect their margins, are building political and lawmaking campaigns to protect their revenue streams. So far, three states are investigating automaker subscriptions, and Indiana has banned any such service until next year. It's certain that those three states are the first fronts in a long political and legal battle. Powerful dealer franchise laws mandate the existence of dealers and restrict how automakers are allowed to interact with customers to sell a vehicle. On top of that, Bob Reisner, CEO of Nassau Business Funding & Services, said, "Dealers and their associations are among the strongest political operators in many states. They as a group are difficult for state politicians to vote against." In California earlier this year, the state Assembly debated a bill with wide-ranging provisions to protect against what the California New Car Dealers Association called "inappropriate treatment of dealers by manufacturers." One of those provisions stipulated that subscription services need to go through dealers, but that item got stripped out when dealers and manufacturers agreed to discuss the matter further. In Indiana, Gov. Eric Holcomb signed a moratorium on all subscription programs by dealers or manufacturers until May 1, 2019, to give legislators more time to investigate. Dealers in New Jersey have taken their campaign to the state capitol, asking that the cars in subscription programs get a different classification for registration purposes. Automakers run the current subscription services and own the vehicles. Sign-ups and financial transactions happen online or through apps, leaving dealers to do little more than act as fulfillment centers to various degrees, with little legal recourse as to compensation amounts when they're called on to deliver or service a car. That's a bad base to build on for business owners who've sunk millions of dollars into their operations.