Convertible 135i 300hp 08 Bmw Sport Package Navigation 1 Series Xenon Navi Turbo on 2040-cars

Auto blog

BMW Hack: the auto industry's big cyber-security warning sign [w/video]

A cyber-security hole that left more than two million BMWs vulnerable may be the most serious breach the auto industry has faced in its emerging fight against car hackers. Security experts are not only concerned that researchers found weaknesses inside the company's Connected Drive remote-services system. They're worried about how the hackers gained entry. German researchers spoofed a cell-phone station and sent fake messages to a SIM card within a BMW's telematics system. Once inside, they locked and unlocked car doors. Other researchers have demonstrated it's possible to hack into a car and control its critical functions, but what separates this latest exploit from others is that it was conducted remotely. In an industry that's just coming to grips with the security threats posed by connectivity in cars, the possibility of a remote breach has been an ominous prospect. The fact it has now occurred may mean a landmark threshold has been crossed. "It's as close as I've seen to a genuine, remote attack on telematics," said Mike Parris, head of the secure car division at SBD, a UK-based automotive technology consulting company. "At this point, the OEMs are trying to play a game of catch up." Previous researchers in the automotive cyber-security field have launched remote attacks that are similar in nature, though not the same. In 2010, academics at California-San Diego and the University of Washington demonstrated they could remotely control essential functions of a car, but they needed to be within close proximity of the vehicle. In November 2014, researchers at Argus Cyber Security remotely hacked cars with an aftermarket device called a Zubie plugged into their diagnostic ports. But the remote attack was predicated on the Zubie dongle having physically been installed in the car. With the BMW hack, researchers compromised the car without needing physical access or proximity. The German Automobile Association, whose researchers conducted the BMW study, said it infiltrated the system "within minutes" and left undetected, a feat that raises the possibility that a hacker could do the same in a real-world scenario. Messages Were Sent Unencrypted Security analysts described the BMW infiltration as a "man in the middle" attack. Researchers mimicked a cellular base station and captured traffic between the car and the BMW Connected Drive service, which drivers can access and control via an app on their cell phones.

Recharge Wrap-up: VW Golf TDI wins green car award, DC buses might go electric

The 2015 Volkswagen Golf TDI has won the award for 2014 Northwest Green Car or the Year. The distinction comes from the Northwest Automotive Press Association during its Drive Revolution event in Portland. Co-chairman of the event, Jeff Zurschmeide, says, "Volkswagen has led the diesel passenger car market for years, and the Golf TDI proves that they're likely to stay on top for a while." The 2015 Golf TDI has 10 more horsepower than the outgoing model, while improving fuel economy thanks to a new engine. It also has a base price $3,000 lower than the 2014 Golf TDI. Read more in the press release below. The BMW i8 gets its laser high-beam headlights from lighting company Osram. The laser lights use half the energy of their LED counterparts, according to BMW, which is important when one is trying to get every last bit of range out of the car's battery. The laser high beams can also reach about twice as far as LED lighting. Because of their brightness, they won't be available on cars sold in the US. In laser-equipped i8s, the laser high beams will not work below 60 kilometers per hour, nor when other lights are detected in front of the vehicle. Head to Automotive News Europe to read more. Renault has delivered a fleet of 30 Kangoo ZEs to Uruguay's government-owned power company, UTE. The electric fleet will allow the company to reduce its CO2 emissions by 36 metric tons, says Renault. 84 percent of Uruguay's electricity comes from renewable sources, with a goal of 90 percent on the horizon. Uruguay aims to get a third of its electricity from wind farms by 2016, meaning these Kangoo ZEs will be powered in no small part by renewable energy. For Renault, "This order is a further sign of the interest in the region for electric vehicles," according to Denis Barbier, Renault's senior vice president, citing previous deliveries in Brazil, Mexico, Argentina and Colombia. Read more in the press release at Renault's website. Washington DC's "Circulator" bus routes may go electric. Some of the diesel buses, which were first put to work in 2003, are nearing the end of their life cycle, and DC sees an opportunity to make the switch to something a little greener. "Electric has not been a viable option in previous procurements, but now it is," says Will Handsfield, Georgetown Business Improvement District's transportation director. Handsfield is concerned about air quality, and says he also appreciates the long-term stability of electric rates compared to diesel.

BMW slapped with discrimination suit by EEOC

According to a report from CNNMoney, BMW has been hit with a lawsuit from the US Equal Employment Opportunity Commission after revised criminal background check policies resulted in the dismissal of 88 contractors, 70 of whom (that's about 80 percent) were black. A total of 645 contractors were required to submit to background checks at BMW's facility in Spartanburg, South Carolina after BMW switched contract companies at its plant.
Though the 88 persons who were not rehired by the new contractor all had criminal records, that may not necessarily be a legal way to screen applicants, as the EEOC counters: "BMW's policy has no time limit with regard to convictions. The policy is a blanket exclusion without any individualized assessment of the nature and gravity of the crimes, the ages of the convictions, or the nature of the claimants' respective positions."
BMW's actions were in violation of the Civic Rights Act of 1964, according to the EEOC, because they utilized "a criminal conviction policy that disproportionately screened out African-Americans." A recent bulletin offering guidance from the EEOC on the Civil Rights Act can be found here, but the EEOC's stance on the issue has been the same for years: "Since issuing its first written policy guidance in the 1980s regarding the use of arrest and conviction records in employment decisions, the EEOC has advised employers that under certain circumstances, their use of that information to deny employment opportunities could be at odds with Title VII."