2007 Bmw X3, Clean Carfax, 3 Owners, Well Maintained, Beautiful! on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Foreign automakers pay from $38 to $65 per hour to non-union workers

As leaders for the United Auto Workers gather in Detroit for their Special Convention on Collective Bargaining to work out the negotiating stance for this year's new labor agreements with the Detroit 3 automakers, what they most want to do is figure out how to eliminate the two-tier wage scale. However, the lower Tier 2 wage has allowed the domestic automakers to reduce their labor costs, hire more workers, and compete better with their import competition. As it stands, per-hour labor rates including benefits are $58 at General Motors, $57 at Ford, and $48 at Fiat-Chrysler – a reflection of FCA's much greater number of Tier 2 workers. The Center for Automotive Research released a study of labor rates (including benefits) that put numbers to what the imports pay: Mercedes-Benz pays the most, at an average of $65 per hour, Volkswagen pays the least, at $38 per hour, and BMW is just a hair above that at $39 per hour. Among the Detroit competitors, Honda workers earn an average of $49 per hour, at Toyota it's $48 per hour, Nissan is $42 per hour, and Hyundai-Kia pays $41 per hour. The lower import wages are aided by their greater use of temporary workers compared to the domestics. Automotive News says the ten-dollar gap between those foreign camakers and the domestics turns out to about an extra $250 per car in labor, which adds up quickly when you're pumping out many millions of cars. That $250-per-car number is one that, come negotiating time, the Detroit 3 will want to reduce, as the UAW is trying to raise both Tier 1 and Tier 2 wages. Another wrinkle is that the domestic carmakers are considering the wide adoption of a third wage level lower than Tier 2. Some workers who do minor tasks like assembling parts trays kits and battery packs already make less than Tier 2, but the UAW will be quite wary about cementing yet another wage scale at the bottom of the system while it's trying to fight a bigger battle at the top. News Source: Automotive News - sub. req., BloombergImage Credit: AP Photo/Erik Schelzig Earnings/Financials UAW/Unions BMW Chevrolet Fiat Ford GM Honda Hyundai Kia Mercedes-Benz Nissan Toyota Volkswagen labor wages collective bargaining labor costs

Mini JCW Paceman vs. BMW M135i in family faceoff

Over the last year, we've had the chance to drive two of the most exciting hatchbacks in the BMW family - the BMW M135i and the Mini Paceman John Cooper Works - but Autocar has managed to get the two corporate cousins together for a head-to-head comparison. Just like our initial impressions of the Paceman JCW, Autocar has little to complain about this new 215-horsepower hatchback... until it begins to factor in the faster, better-mannered and similarly priced M135i.
Despite laying down an extra 100 hp and delivering a 0-60 time that is almost two seconds quicker, the M135i carries the same price tag of 29,535 pounds in the UK; US pricing for the Paceman starts at $36,200, while it still isn't even clear if the US will be getting the M135i. Even more surprising is the fact that the Paceman falls short of the M135i in regards to rear seat and cargo volume, and just barely squeaks out a win in the fuel economy department. Scroll down to watch the BMW versus Mini hot hatch battle.