8-cylinder, Nightvision, Heat Steering Wheel, Gray/red Leather Interior on 2040-cars

Auto blog

BMW Hack: the auto industry's big cyber-security warning sign [w/video]

A cyber-security hole that left more than two million BMWs vulnerable may be the most serious breach the auto industry has faced in its emerging fight against car hackers. Security experts are not only concerned that researchers found weaknesses inside the company's Connected Drive remote-services system. They're worried about how the hackers gained entry. German researchers spoofed a cell-phone station and sent fake messages to a SIM card within a BMW's telematics system. Once inside, they locked and unlocked car doors. Other researchers have demonstrated it's possible to hack into a car and control its critical functions, but what separates this latest exploit from others is that it was conducted remotely. In an industry that's just coming to grips with the security threats posed by connectivity in cars, the possibility of a remote breach has been an ominous prospect. The fact it has now occurred may mean a landmark threshold has been crossed. "It's as close as I've seen to a genuine, remote attack on telematics," said Mike Parris, head of the secure car division at SBD, a UK-based automotive technology consulting company. "At this point, the OEMs are trying to play a game of catch up." Previous researchers in the automotive cyber-security field have launched remote attacks that are similar in nature, though not the same. In 2010, academics at California-San Diego and the University of Washington demonstrated they could remotely control essential functions of a car, but they needed to be within close proximity of the vehicle. In November 2014, researchers at Argus Cyber Security remotely hacked cars with an aftermarket device called a Zubie plugged into their diagnostic ports. But the remote attack was predicated on the Zubie dongle having physically been installed in the car. With the BMW hack, researchers compromised the car without needing physical access or proximity. The German Automobile Association, whose researchers conducted the BMW study, said it infiltrated the system "within minutes" and left undetected, a feat that raises the possibility that a hacker could do the same in a real-world scenario. Messages Were Sent Unencrypted Security analysts described the BMW infiltration as a "man in the middle" attack. Researchers mimicked a cellular base station and captured traffic between the car and the BMW Connected Drive service, which drivers can access and control via an app on their cell phones.

BMW wants to expand DriveNow carsharing program to 25 new cities

Daimler's Car2go car-sharing service just announced that it will debut in Rome, its 26th global city. Now, BMW says it wants to expand its own carsharing program to, wait for it, 25 more cities. Coincidence? We think not. BMW is looking to bring its DriveNow carsharing program, with its Mini Coopers and 1 Series, to as many as 15 new cities in Europe as well as 10 in the US, Bloomberg News says, citing comments BMW executive Peter Schwarzenbauer made at the Geneva Motor Show last week. The service is now operational in Berlin, Hamburg, Cologne, Munich, Dusseldorf and San Francisco and serves about a quarter-million people. Of course, it's that last city, where DriveNow started operations in August 2012, that's been somewhat problematic. San Francisco has tough guidelines when it comes to where the cars can be parked, with so few public parking areas to choose from. DriveNow charges $39 for membership in San Francisco, then $12 for the first half hour of driving and 32 cents for each additional minute. DriveNow competes directly against Car2go, which charges around $25 to become a member and then 41 cents a minute to rent a Smart ForTwo.

Carmakers, NHTSA to unveil auto-emergency braking agreement tomorrow

Happy St. Patrick's Day Eve. Tomorrow, there will be green beer, corned beef and cabbage, and automatic emergency braking for all. Weird combo, we know. But on St. Patty's we can expect an official announcement from a pact of automakers making auto-braking systems standard equipment by 2022. That's per a report from Reuters, which cites three sources familiar with the plans. Originally announced in September 2015 by 10 automakers and the National Highway Traffic Safety Administration, the agreement is expected to be even larger when the details are unveiled tomorrow. According to Reuters, the manufacturers of 99 percent of the US domestic market's vehicles will be represented by the new agreement. It's believed that standard AEB systems could prevent thousands of accidents across the country. Expect more on the official announcement when it's made. Related Video: