06 Luxury X3 Awd Suv Leather Nav Extra Clean on 2040-cars

Auto blog

BMW Hack: the auto industry's big cyber-security warning sign [w/video]

A cyber-security hole that left more than two million BMWs vulnerable may be the most serious breach the auto industry has faced in its emerging fight against car hackers. Security experts are not only concerned that researchers found weaknesses inside the company's Connected Drive remote-services system. They're worried about how the hackers gained entry. German researchers spoofed a cell-phone station and sent fake messages to a SIM card within a BMW's telematics system. Once inside, they locked and unlocked car doors. Other researchers have demonstrated it's possible to hack into a car and control its critical functions, but what separates this latest exploit from others is that it was conducted remotely. In an industry that's just coming to grips with the security threats posed by connectivity in cars, the possibility of a remote breach has been an ominous prospect. The fact it has now occurred may mean a landmark threshold has been crossed. "It's as close as I've seen to a genuine, remote attack on telematics," said Mike Parris, head of the secure car division at SBD, a UK-based automotive technology consulting company. "At this point, the OEMs are trying to play a game of catch up." Previous researchers in the automotive cyber-security field have launched remote attacks that are similar in nature, though not the same. In 2010, academics at California-San Diego and the University of Washington demonstrated they could remotely control essential functions of a car, but they needed to be within close proximity of the vehicle. In November 2014, researchers at Argus Cyber Security remotely hacked cars with an aftermarket device called a Zubie plugged into their diagnostic ports. But the remote attack was predicated on the Zubie dongle having physically been installed in the car. With the BMW hack, researchers compromised the car without needing physical access or proximity. The German Automobile Association, whose researchers conducted the BMW study, said it infiltrated the system "within minutes" and left undetected, a feat that raises the possibility that a hacker could do the same in a real-world scenario. Messages Were Sent Unencrypted Security analysts described the BMW infiltration as a "man in the middle" attack. Researchers mimicked a cellular base station and captured traffic between the car and the BMW Connected Drive service, which drivers can access and control via an app on their cell phones.

BMW maintenance plan no longer transferrable to 2nd owner

One of the best innovations in car buying in recent years is the rise of no-cost scheduled maintenance programs. Many people feel really anxious about taking their car in for service, and these deals help mitigate that somewhat. Obviously, it's not free for automakers to implement the offers, and now BMW is altering the way its four-year, 50,000-mile Maintenance Program works for some owners. "To keep such an offer sustainable we had to make a change," said Kenn Sparks, Manager of Business Communications at BMW North America, to Autoblog via email.
The original person to buy or lease the model isn't going to see any difference, but the program is no longer transferable to a second owner, unless that person is in the owners household. Those people include includes parents, siblings, grandparents and grandchildren, in addition to someone like a spouse or children. The original owner just has to advise BMW of new user. "The program change will affect 2nd owners and for them BMW is introducing an optional full-maintenance product that covers the vehicle up to 100,000 miles," said Sparks. Scroll down to read the entire announcement.

Poor headlights cause 40 cars to miss IIHS Top Safety Pick rating

Over the past few months, we've noticed a number of cars and SUVs that have come incredibly close to earning one of the IIHS's highest accolades, the Top Safety Pick rating. They have great crash test scores and solid automatic emergency braking and forward collision warning systems. What trips them up is headlights. That got us wondering, how many vehicles are there that are coming up short because they don't have headlights that meet the organization's criteria for an "Acceptable" or "Good" rating. This is a revision made after 2017, a year in which headlights weren't factored in for this specific award. This is also why why some vehicles, such as the Ford F-150, might have had the award last year, but have lost it for this year. We reached out to someone at IIHS to find out. He responded with the following car models. Depending on how you count, a whopping 40 models crash well enough to receive the rating, but don't get it because their headlights are either "Poor" or "Marginal." We say depending on how you count because the IIHS actual counts truck body styles differently, and the Infiniti Q70 is a special case. Apparently the version of the Q70 that has good headlights doesn't have adequate forward collision prevention technology. And the one that has good forward collision tech doesn't have good enough headlights. We've provided the entire list of vehicles below in alphabetical order. Interestingly, it seems the Volkswagen Group is having the most difficulty providing good headlights with its otherwise safe cars. It had the most models on the list at 9 split between Audi and Volkswagen. GM is next in line with 7 models. It is worth noting again that though these vehicles have subpar headlights and don't quite earn Top Safety Pick awards, that doesn't mean they're unsafe. They all score well enough in crash testing and forward collision prevention that they would get the coveted award if the lights were better.