Bmw: M3 on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

BMW i5, i7 rumors surface again

When we first wrote about a rumored BMW i5 in January 2014, after speaking to the Munich-based head of electric vehicle operations and strategy, BMW USA wrote to tell us that the "suggestion of a BMW i model larger than the i3 is hypothetical at this point." After that note came a year of speculation from places like Car and Driver, Automobile and Autocar zeroing in on what this "hypothetical" EV would look like. Car has this year's first scoop, laying out a few more of the ideas behind the expansion of the i line. Said to be aimed straight at the Tesla Model S, it is based on the long-wheelbase, Chinese-market 5 Series but will be badged as either an i5 or an i7. Expected to arrive in time for the 2018 model year to join the next-generation 5 Series, it will be priced to compete with the Model S, but loading up on options can push that beyond $125,000, according to Car. Outside will be a sedan body, possibly with cues from the 6 Series Gran Coupe and the next 7 Series. The internals will be a mix of components like steering, brakes, and suspension from the next ICE 5 Series, with a plug-in hybrid, battery-extending powertrain derived from the i8. Car's info suggests a four-cylinder motor with around 245 horsepower up front, with a 204-hp e-motor also up front and a 90-hp e-motor in the back, as opposed to the i8's single motor. That arrangement provides about 544 total horsepower and will allow the sedan to run in purely electric front- or rear-wheel drive, or as a petrol-electric all-wheel drive. Electric range should be around 80 miles, and the ICE will be limited to operation above 40 miles per hour. There's reason to start putting weight behind these specs because they repeat, almost exactly, those written in the Automobile piece from December. That story said BMW wants to build 30,000 of them per year, and a concept could come in 2017. Featured Gallery 2014 BMW i3: First Drive View 33 Photos News Source: CarImage Credit: Copyright 2015 Sebastian Blanco / AOL Green Rumormill BMW Hybrid Sedan bmw i bmw i5

Dealers mobilize to protect their margins from automaker subscription services

Six individual auto brands — Lincoln, Cadillac, Porsche, Mercedes, BMW and Volvo — have established or are trialing a vehicle subscription service in the U.S. Three third-party companies — Flexdrive, Clutch and Carma — run brand-agnostic subscription services. And three automakers — Mercedes-Benz, BMW, and General Motors — have also launched short-term rental services. Dealers, afraid of how these trends might affect their margins, are building political and lawmaking campaigns to protect their revenue streams. So far, three states are investigating automaker subscriptions, and Indiana has banned any such service until next year. It's certain that those three states are the first fronts in a long political and legal battle. Powerful dealer franchise laws mandate the existence of dealers and restrict how automakers are allowed to interact with customers to sell a vehicle. On top of that, Bob Reisner, CEO of Nassau Business Funding & Services, said, "Dealers and their associations are among the strongest political operators in many states. They as a group are difficult for state politicians to vote against." In California earlier this year, the state Assembly debated a bill with wide-ranging provisions to protect against what the California New Car Dealers Association called "inappropriate treatment of dealers by manufacturers." One of those provisions stipulated that subscription services need to go through dealers, but that item got stripped out when dealers and manufacturers agreed to discuss the matter further. In Indiana, Gov. Eric Holcomb signed a moratorium on all subscription programs by dealers or manufacturers until May 1, 2019, to give legislators more time to investigate. Dealers in New Jersey have taken their campaign to the state capitol, asking that the cars in subscription programs get a different classification for registration purposes. Automakers run the current subscription services and own the vehicles. Sign-ups and financial transactions happen online or through apps, leaving dealers to do little more than act as fulfillment centers to various degrees, with little legal recourse as to compensation amounts when they're called on to deliver or service a car. That's a bad base to build on for business owners who've sunk millions of dollars into their operations.