on 2040-cars

Auto blog

BMW Hack: the auto industry's big cyber-security warning sign [w/video]

A cyber-security hole that left more than two million BMWs vulnerable may be the most serious breach the auto industry has faced in its emerging fight against car hackers. Security experts are not only concerned that researchers found weaknesses inside the company's Connected Drive remote-services system. They're worried about how the hackers gained entry. German researchers spoofed a cell-phone station and sent fake messages to a SIM card within a BMW's telematics system. Once inside, they locked and unlocked car doors. Other researchers have demonstrated it's possible to hack into a car and control its critical functions, but what separates this latest exploit from others is that it was conducted remotely. In an industry that's just coming to grips with the security threats posed by connectivity in cars, the possibility of a remote breach has been an ominous prospect. The fact it has now occurred may mean a landmark threshold has been crossed. "It's as close as I've seen to a genuine, remote attack on telematics," said Mike Parris, head of the secure car division at SBD, a UK-based automotive technology consulting company. "At this point, the OEMs are trying to play a game of catch up." Previous researchers in the automotive cyber-security field have launched remote attacks that are similar in nature, though not the same. In 2010, academics at California-San Diego and the University of Washington demonstrated they could remotely control essential functions of a car, but they needed to be within close proximity of the vehicle. In November 2014, researchers at Argus Cyber Security remotely hacked cars with an aftermarket device called a Zubie plugged into their diagnostic ports. But the remote attack was predicated on the Zubie dongle having physically been installed in the car. With the BMW hack, researchers compromised the car without needing physical access or proximity. The German Automobile Association, whose researchers conducted the BMW study, said it infiltrated the system "within minutes" and left undetected, a feat that raises the possibility that a hacker could do the same in a real-world scenario. Messages Were Sent Unencrypted Security analysts described the BMW infiltration as a "man in the middle" attack. Researchers mimicked a cellular base station and captured traffic between the car and the BMW Connected Drive service, which drivers can access and control via an app on their cell phones.

Xcar celebrates 100-year anniversary with Model T tribute

Never mind the fact that XCar hasn't been making videos for the last 100 years, the British duo have gone all silent-moving-pictures in order to make their centenary case for the Ford Model T, a car that was already seven years old in 1915. It's not a review, but a mostly sepia-tinged look at the car that started the mass-market adventure by taking that biblical advice to be fruitful and multiply and populate the Earth abundantly. Since it looks like Xcar is celebrating some kind of milestone, we've also included another video below of the first Xcar review we could find, covering the BMW M1, from the much more recent past - circa 2012.

BMW, Sixt carsharing making money most places

The DriveNow carsharing service, which is a partnership between BMW and Sixt, is growing quite rapidly. "We've been surprised about the explosion of new subscriptions, which has helped boost revenue," says Sixt CEO Erich Sixt. The number of DriveNow users has increased from 215,000 at the end of last year to 300,000 today. Sixt says that DriveNow has been profitable in cities in which it has been established for over a year. Perhaps encouraged by its unexpected success, DriveNow is set to expand even further. The service is currently available in five German cities, as well as in San Francisco, California, and the involved parties are considering a five-year plan to expand to 25 more cities in Europe and the US. Still, Sixt expects DriveNow to report a "small-to-medium, single-digit" loss for this year, according to Sixt CFO Julian zu Putlitz. It's no big deal, just the result of startup costs in new areas. Sixt, which is Germany's largest car rental company, also reported that its own second-quarter income rose 12 percent to $37.7 million, while sales rose 7.6 percent to $585.78 million. DriveNow uses a membership and pay-per-minute model that allows customers to rent BMW and Mini vehicles as they need them. The service also acts as a way to let potential customers try out the vehicles and familiarize themselves with the brands before they buy cars of their own at some point. Depending on the location, DriveNow's fleet includes the BMW 1 Series, ActiveE and X1, as well as several Mini vehicles like the Cooper, Clubman and Countryman. Featured Gallery 2012 BMW ActiveE: First Drive View 31 Photos News Source: BloombergImage Credit: Copyright 2014 AOL Green BMW MINI car sharing profit revenue drivenow sixt