Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Recharge Wrap-up: Smart metals, OTA updates, Rolls-Royce LNG ship

"Smart" metals could help engines reduce emissions and invigorate US business. Metallurgist and University of Wisconsin – Milwaukee professor Pradeep Rohatgi combines known metal alloys with materials like ceramics, nanoparticles, and recycled waste to produce strong, lightweight composites with self-lubricating properties that help internal combustion engines run more efficiently. Rohatgi hopes his startup, Intelligent Composites, and its products can help US foundries compete with production outsourced overseas. See the video above, and read more at Phys.org. Almost 203 million cars will be capable of over-the-air (OTA) updates by 2022, according to ABI research. While Tesla has the OTA firmware updates nailed down, other automakers will focus on software update capability. This will take the place of dealer-installed updates and - like Chrysler did after the Jeep hacking incident - updates sent to owners via USB drives. OTA updates will enhance vehicle security and reduce recall rates. Read more at Green Car Congress. European bus manufacturers have agreed upon a standardized charging interface for their electric buses. Irizar, Solaris, VDL and Volvo will use pantograph charging for "opportunity charging" and CCS plugs as the base for overnight charging and network communication. The manufacturers hope other bus makers and charging providers to join them in cooperation over standardized charging. Read more at Green Car Congress. The second Audi Autonomous Driving Cup will take place from March 22 to 24, 2016 at the automaker's Museum Mobile in Ingolstadt, Germany. The competition involves eight university teams implementing basic Audi software in 1:8 scale electric Audi Q5 models, and putting them through the paces of simulated real-world driving situations. The teams develop software architecture to use the suite of sensor to have the cars drive, park, maneuver in traffic and perform emergency braking autonomously. Teams also perform a freestyle event where they put the car through an additional task of their choosing. The winning team gets ˆ10,000, with smaller prizes for second and third place. The competition also gives the students the opportunity to showcase their skills in front of a potential employer. Read more at Green Car Congress. Rolls-Royce will provide the Liquefied Natural Gas (LNG) propulsion for an NSK cargo ship carrying fish food. The ship will deliver 2,700 metric tons of fish food to fish farms along the Norwegian coast.

Question of the Day: What's the greatest British car ever?

The British automotive industry has produced everything from high-production econo-commuters to staggeringly luxurious oligarch-wagons, along the way winning plenty of races and building plenty of beautiful machines. The original Mini led directly to the past half-century of transverse-engine, front-wheel-drive cars built everywhere, the MGB put the sporty little convertible into everyone's reach, and the Morris Oxford became the most beloved motor vehicle in India. So many to choose from, but we want you to pick one. What will it be? Related Video: