Pampered Silver Bmw X3 Si Sport "m" Edition. New Brakes, Tires. Lady Driver. on 2040-cars

Auto blog

BMW Hack: the auto industry's big cyber-security warning sign [w/video]

A cyber-security hole that left more than two million BMWs vulnerable may be the most serious breach the auto industry has faced in its emerging fight against car hackers. Security experts are not only concerned that researchers found weaknesses inside the company's Connected Drive remote-services system. They're worried about how the hackers gained entry. German researchers spoofed a cell-phone station and sent fake messages to a SIM card within a BMW's telematics system. Once inside, they locked and unlocked car doors. Other researchers have demonstrated it's possible to hack into a car and control its critical functions, but what separates this latest exploit from others is that it was conducted remotely. In an industry that's just coming to grips with the security threats posed by connectivity in cars, the possibility of a remote breach has been an ominous prospect. The fact it has now occurred may mean a landmark threshold has been crossed. "It's as close as I've seen to a genuine, remote attack on telematics," said Mike Parris, head of the secure car division at SBD, a UK-based automotive technology consulting company. "At this point, the OEMs are trying to play a game of catch up." Previous researchers in the automotive cyber-security field have launched remote attacks that are similar in nature, though not the same. In 2010, academics at California-San Diego and the University of Washington demonstrated they could remotely control essential functions of a car, but they needed to be within close proximity of the vehicle. In November 2014, researchers at Argus Cyber Security remotely hacked cars with an aftermarket device called a Zubie plugged into their diagnostic ports. But the remote attack was predicated on the Zubie dongle having physically been installed in the car. With the BMW hack, researchers compromised the car without needing physical access or proximity. The German Automobile Association, whose researchers conducted the BMW study, said it infiltrated the system "within minutes" and left undetected, a feat that raises the possibility that a hacker could do the same in a real-world scenario. Messages Were Sent Unencrypted Security analysts described the BMW infiltration as a "man in the middle" attack. Researchers mimicked a cellular base station and captured traffic between the car and the BMW Connected Drive service, which drivers can access and control via an app on their cell phones.

Upcoming new BMW X6 leaks out ahead of full reveal

The X5 may have been the first BMW crossover on the market when it arrived in 2000, opening the door to more high-riding Bavarians to follow, but it's been replaced twice over now. The X3 is on its second generation, and with the X1 having been introduced in 2009 and the X4 soon to hit showrooms, that makes the X6 - introduced in 2008 - the oldest crossover in the BMW lineup. But it won't be for much longer.
Soon BMW will reveal the all-new X6, based on the latest X5 but with that tell-tale slanted roofline. But before it gets the chance, a handful of images have leaked their way all over the Internet to give us an advance look at what to expect.
The overall shape of the new X6 comes across as familiar, if a bit less of an awkward take on the vehicle that (for better or worse) launched the crossover coupe segment. Up front the twin kidney grilles and headlights are larger, in keeping with the latest BMW design language, and the bumper less horizontal and more dynamic. Towards the back there's a sharp crease above the wheel arch blending into the more rakishly shaped tail lights, while the metallic vent behind the front wheel arch lends the flank an even sportier appearance.

BMW, Ferrari, VW cars use tungsten mined by terrorists

Bloomberg Markets is reporting that BMW, Volkswagen and Ferrari have been using tungsten ore sourced from Columbia's FARC rebel terrorists. The extensive story focuses on Columbia's illegal mining trade and calls into question the provenance of the rare ore that is used not only in crankshaft parts production, but is also found in the world's computing and telecommunications industry for use in screens.
The ore is mined by the FARC (Fuerzas Armadas Revolucionarias de Colombia, or Revolutionary Armed Forces of Colombia - People's Army), and exported to Pennsylvania, where it is refined. The refined ore is then sent over to Austria, where a company called Plansee turns it into a finished product. Now, it's important to note that we aren't talking about the world's supply of tungsten here. In 2012, Plansee's American refinery purchased 93.2 metric tons of tungsten, valued at $1.8 million. That's peanuts, with the entire Colombian tungsten mining industry producing just one percent of the world's supplies.
That doesn't make indirectly supporting FARC any more acceptable, though. BMW, VW and Ferrari are all committed to not accepting mineral supplies from the Democratic Republic of Congo, which is also in the grips of a guerrilla insurrection funded, in part, by illegal mining. The same commitment would figure to extend to Colombian mining, but as BMW points out, it's difficult for a multi-national manufacturer to know where every item in its supply chain comes from. A company spokesperson says as much, telling Bloomberg, "These few grams out of the billions of tons of raw materials passing through the BMW supply chain are of no practical relevance."