2011 - Bmw X5 on 2040-cars

Auto blog

BMW Hack: the auto industry's big cyber-security warning sign [w/video]

A cyber-security hole that left more than two million BMWs vulnerable may be the most serious breach the auto industry has faced in its emerging fight against car hackers. Security experts are not only concerned that researchers found weaknesses inside the company's Connected Drive remote-services system. They're worried about how the hackers gained entry. German researchers spoofed a cell-phone station and sent fake messages to a SIM card within a BMW's telematics system. Once inside, they locked and unlocked car doors. Other researchers have demonstrated it's possible to hack into a car and control its critical functions, but what separates this latest exploit from others is that it was conducted remotely. In an industry that's just coming to grips with the security threats posed by connectivity in cars, the possibility of a remote breach has been an ominous prospect. The fact it has now occurred may mean a landmark threshold has been crossed. "It's as close as I've seen to a genuine, remote attack on telematics," said Mike Parris, head of the secure car division at SBD, a UK-based automotive technology consulting company. "At this point, the OEMs are trying to play a game of catch up." Previous researchers in the automotive cyber-security field have launched remote attacks that are similar in nature, though not the same. In 2010, academics at California-San Diego and the University of Washington demonstrated they could remotely control essential functions of a car, but they needed to be within close proximity of the vehicle. In November 2014, researchers at Argus Cyber Security remotely hacked cars with an aftermarket device called a Zubie plugged into their diagnostic ports. But the remote attack was predicated on the Zubie dongle having physically been installed in the car. With the BMW hack, researchers compromised the car without needing physical access or proximity. The German Automobile Association, whose researchers conducted the BMW study, said it infiltrated the system "within minutes" and left undetected, a feat that raises the possibility that a hacker could do the same in a real-world scenario. Messages Were Sent Unencrypted Security analysts described the BMW infiltration as a "man in the middle" attack. Researchers mimicked a cellular base station and captured traffic between the car and the BMW Connected Drive service, which drivers can access and control via an app on their cell phones.

Are future vehicular hacks inevitable?

Before the hack of the Uconnect system in a Jeep Cherokee resulted in a 1.4-million vehicle recall, the potential software vulnerabilities in vehicles were already a hot topic with Congressional inquiries and even proposed legislation in the US. As cars' interconnected systems gain the ability to go online, they become open to a host of new threats. Automakers are trying to stop this, but it might be too late to put the genie back into the bottle. Throughout 2015, the issue of software security in vehicles has become increasingly vital. For example, the recent Jeep case wasn't even the biggest hack this year. In February, a major flaw was discovered in the BMW Connected Drive service that allowed researchers to remotely lock and unlock the doors and potentially affected 2.2 million cars. The fix was an over-the-air patch for the problem. Automakers are actively working to fix the issues. Mercedes-Benz, BMW, and Audi reportedly are using encrypted connections and firewalls in their vehicles to prevent hacking. "Absolute, 100-percent safety isn't possible," Daimler spokesperson Benjamin Oberkersch said to Automotive News Europe. "But we develop our systems, tested by internal and external experts, so they're up to date." These vulnerabilities seem to be popping up more often. A successful hack took $14 in parts from Radio Shack in one case. There was also a 60 Minutes report earlier in the year about DARPA's ability to hack into OnStar to take control of a Chevrolet Impala. Experts aren't so sure companies can contend with hackers' advancement. "The difficulty for the carmakers at the moment is the question whether they can keep pace with advances in technology, and especially hacking technology," Rainer Scholz, executive director for telematics consultant EY, said to Automotive News Europe. "We seriously doubt they can." At this point, vehicle hacks are coming more from researchers looking for holes than from those with malicious intent. Still, the vulnerabilities are definitely there. It's up to automakers to keep patching the problems before they become dangerous to drivers. Related Video: News Source: Automotive News Europe - sub. req.Image Credit: Bill O'Leary / The Washington Post via Getty Images Audi BMW Jeep Mercedes-Benz Safety Technology Emerging Technologies hacking cyber security

2015 BMW Alpina B6 xDrive Gran Coupe

Alpina has been lovingly modifying BMWs for half a century, but as we learned during a tour of the company's HQ in Buchloe, Germany, Alpina has been in the wine distribution business for nearly as long. The company has an estimated million bottles on reserve in two warehouses and a beautiful wine cellar/tasting room on property in western Bavaria, just yards from where its 1,500 hand-crafted automobiles per year are produced.
What does that have to do with the new B6 Gran Coupe? Well, it may help make sense of the overall character of Alpina's automobiles, especially vis-à-vis the similarly priced, similarly powerful M Cars that BMW sells in far greater numbers. Alpinas are built by wine connoisseurs for wine connoisseurs, or wine connoisseur types; they are not rip-snortin' racecars for the road - that's M's domain. Alpinas are esoteric, rich in character and nuanced. But make no mistake: they are very, very fast.
Our brief first drive of the B6 Gran Coupe - the only 6 Series-based Alpina we'll get in the US for 2015 - took place on German autobahns and Austrian alpine roads, where the car is more at home than anywhere in the world, both literally and figuratively. With 540 horsepower and 540 pound-feet of torque on tap from its twin-turbocharged 4.4-liter V8 and xDrive all-wheel drive, the B6 is said to be able to hit 60 miles per hour in 3.7 seconds on its way to a top speed of 198 mph, a massive 43 mph faster than the M6, which is electronically limited to 155 mph. Yet even at insane speeds - we saw an indicated 190 mph on one particularly lonely stretch of Autobahn - the B6 feels more luxurious than sporty, taking the countenance of a low-slung Bentley Continental GT or an Aston Martin Rapide S, not a knife-edged supercar. It doesn't feel scintillating like a Porsche 911 GT2; rather it feels rock steady, like the 4,780-pound luxury sedan it is.