Convertible, Low Mileage Classic on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

BMW raises pricing on many models

Buyers interested in a new BMW will start paying a bit more for their Ultimate Driving Machines, beginning yesterday. The Munich, Germany-based manufacturer has announced price hikes across nearly its entire range, covering model years 2013 and 2014, that will sting higher-end customers in particular.
Price increases are enough to get any consumer riled up, but the incremental nature of BMW's increase makes it a bit easier to swallow. All 1 Series and remaining 3 Series Convertibles (including the M3 Convertible) will see a $300 increase in price. All current-generation F30 3 Series, 5 Series GT and X3 crossovers will get their price bumped by $200. $500 increases are coming for the 6 Series range (not including the M6), while the diminutive X1 gets just a $100 increase.
Cars on the losing end of the price hikes include the newest M cars, the M5 and M6 Coupe, Convertible and Gran Coupe, which are being bumped $2,000. BMW is adding $1,000 to the sticker of all Z4s and the entire X6 range, including the X6M.

NHTSA releases updated Takata airbag recalled cars list, but it still has errors

Unfortunately, the government's list still contains errors.
The National Highway Traffic Safety Administration has issued an updated list of vehicle models that it's urging owners to repair under the mushrooming Takata airbag inflator recall. The latest version adds vehicles from new automakers like Subaru and Ford that are missing from the original announcement, and it also removes erroneous entries from General Motors, leaving only the 2005 Saab 9-2X (a reskinned Subaru WRX), and the 2003-2005 Pontiac Vibe, a joint project with Toyota.