2001 Bmw Z3 2.5i on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

10 automakers sued over keyless ignitions

Keyless ignition has rapidly proliferated throughout the auto industry to become a fairly normal feature on new cars. It's supposed to offer the convenience of keeping the fob in your pocket and just pressing a button to drive away. However, ten major automakers are now being sued in US District Court over claims that the system is dangerous, Reuters reports. The suit alleges that people are forgetting to shut off the engine, and the lack of an idle timer is the cause for 13 deaths by carbon monoxide poisoning and multiple injuries. The suit currently includes 28 plaintiffs, according to Reuters, but the lawyers are asking for class-action status to potentially add many more. The case goes after a major swath of the industry, including BMW, Daimler, FCA, Ford, General Motors, Honda, Hyundai, Nissan, Toyota, and Volkswagen, plus their related brands like Acura, Infiniti, Mini, and Lexus. In all, over five million vehicles are affected. The assertion here is that people walk away from their vehicle without shutting it off because they believe the engine shuts off automatically. If parked in a garage, carbon monoxide can build up, leading to poisoning. The lawyers claim automakers know this is a problem and also cite 27 complaints to the National Highway Traffic Safety Administration about the issue, according to Reuters. The plaintiffs are asking for an automatic shut-off and damages from the companies. These concerns have come up before, though. Toyota previously faced a lawsuit over a carbon monoxide death after a woman accidentally left her Lexus running. Also earlier this year, GM recalled 64,186 examples of the 2011-2013 Chevrolet Volt because owners weren't shutting them off. The problem resulted in two injuries, and the company released a software update to limit the idling time.

2014 BMW 320i

When BMW switched its entry level 3 Series, the 328i, from a naturally aspirated, 3.0-liter six-cylinder to a turbocharged, 2.0-liter four-cylinder, we weren't entirely sure what to think. Sure, from a pure numbers perspective, the new 2.0-liter cooked the old 3.0's goose, delivering more torque at far more accessible engine speeds while boosting horsepower and fuel economy.
While we miss that revvy six-pot, the numbers for the 2.0 were just way too good to pass up. Then we received news of an even less-powerful 2.0-liter 3 Series - the 320i. This was interesting, as it saw BMW delving into a power level previously owned solely by the anemic Lexus IS 250 and its six-cylinder engine.
Could BMW make a sub-200-horsepower sedan that still drove the way we expected a 3 Series to drive? To find out, we borrowed the new 320i for a week of testing.