2000 Bmw M Roadster Dinan Isr 3 on 2040-cars

Auto blog

BMW Hack: the auto industry's big cyber-security warning sign [w/video]

A cyber-security hole that left more than two million BMWs vulnerable may be the most serious breach the auto industry has faced in its emerging fight against car hackers. Security experts are not only concerned that researchers found weaknesses inside the company's Connected Drive remote-services system. They're worried about how the hackers gained entry. German researchers spoofed a cell-phone station and sent fake messages to a SIM card within a BMW's telematics system. Once inside, they locked and unlocked car doors. Other researchers have demonstrated it's possible to hack into a car and control its critical functions, but what separates this latest exploit from others is that it was conducted remotely. In an industry that's just coming to grips with the security threats posed by connectivity in cars, the possibility of a remote breach has been an ominous prospect. The fact it has now occurred may mean a landmark threshold has been crossed. "It's as close as I've seen to a genuine, remote attack on telematics," said Mike Parris, head of the secure car division at SBD, a UK-based automotive technology consulting company. "At this point, the OEMs are trying to play a game of catch up." Previous researchers in the automotive cyber-security field have launched remote attacks that are similar in nature, though not the same. In 2010, academics at California-San Diego and the University of Washington demonstrated they could remotely control essential functions of a car, but they needed to be within close proximity of the vehicle. In November 2014, researchers at Argus Cyber Security remotely hacked cars with an aftermarket device called a Zubie plugged into their diagnostic ports. But the remote attack was predicated on the Zubie dongle having physically been installed in the car. With the BMW hack, researchers compromised the car without needing physical access or proximity. The German Automobile Association, whose researchers conducted the BMW study, said it infiltrated the system "within minutes" and left undetected, a feat that raises the possibility that a hacker could do the same in a real-world scenario. Messages Were Sent Unencrypted Security analysts described the BMW infiltration as a "man in the middle" attack. Researchers mimicked a cellular base station and captured traffic between the car and the BMW Connected Drive service, which drivers can access and control via an app on their cell phones.

World Car of the Year finalists announced

To say the 2014 Geneva Motor Show was packed full of news is an understatement as big as the show's home at the Palexpo convention center. Despite everything that we were able to cover during this year's show, there's still more coming out of Switzerland, including the announcement of the finalists for the 2014 World Car of the Year Awards.
We reported on the original list of finalists over three weeks ago, and now, that initial list has been pared down to three finalists for each of the five awards. The finalists were announced at a press conference by frequent Autoblog contributor and co-chair of the awards, Matt Davis (above).
The finalists for the overall title of 2014 World Car of the Year are the Audi A3, the BMW 4 Series and the Mazda3. The World Luxury Car of the Year will be either the Bentley Flying Spur, the Mercedes-Benz S-Class or the Land Rover Range Rover Sport, while the Performance Car of the Year will be awarded to the Chevrolet Corvette Stingray, the Ferrari 458 Speciale or the Porsche 911 GT3 (which, um, yeah...).

European car sales up 8% in February

Three weeks ago an analyst increased projections for European car sales this year, expecting them to climb three percent compared to last year instead of 2.7 percent. That number is a postive sign after years of hard times but it turns out February was especially good, overall European sales climbing eight percent on a wave of southern European recovery and discounts - and this comes after five months of gains including January's 7.2-percent jump over the year before.
The only country of Europe's five largest markets to post a decline was France, just as it did in January, Germany, the UK and Italy posting solid double-digit numbers, Spain rocking the charts with an 18-percent increase because of a government program to encourage trade-ins.
The only brand to miss the wave was Volkswagen, dropping 0.8 percent as it watched the double-digit growth at sister brands Audi, Seat and Skoda lift the Volkswagen Group sales up by seven-percent. Peugeot overcame flat sales at Citroën to improve the group by 3.5 percent, BMW and the Mercedes-Benz/Smart combo rose by four percent, the Fiat group jumped 5.8 percent, Ford was up 11 percent, the Renault Group 11.5 percent, General Motors 12 percent and the Toyota clan by 14 percent.