2013 Bmw X5 Xdrive35d on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Ford, Toyota clean up in Best Car For The Money Awards

The U.S. News Best Cars for the Money Awards picks winners by looking at the average transaction price, five-year total cost of ownership, the regard a car has from the automotive press, reliability figures from J.D. Power and Associates and safety data from the National Highway Traffic Safety Administration and the Insurance Institute for Highway Safety. The result, according to the magazine, is "the best combination of critical acclaim and long-term value."
Ford nabbed six of the 21 categories that received awards this year, the Focus, Fusion, Fusion Hybrid, Taurus, Escape and Edge getting trophies. Toyota and its Lexus and Scion sub-brands took another five, the Tacoma and Tundra owning the two categories given to pickup trucks. The other ten awards were split between Honda with three, Buick with two, and one each for Subaru, BMW, Hyundai, Chevrolet and Mazda.
Follow the link to see all the winners and read about why they were chosen.

Car technology I'm thankful and unthankful for

The past few years have seen a surge of tech features in new vehicles — everything from cloud-based content to semi-autonomous driving. While some of it makes the driving experience better, not all tech is useful or well thought out. Automakers who are adept at drivetrains, ride quality and in-cabin comforts often fail at infotainment interfaces and connectivity. From testing dozens of vehicles each year and in the spirit of gratitude, here are three car tech features I'm thankful — and a trio I could live without. Thanks Connected search: This seems like a no-brainer since everyone already has it on their smartphones, but not all automakers include it in the dashboard and as part of their nav systems. The best ones, such as Toyota Entune, leverage a driver's connected device to search for a range of services and don't charge a subscription or require a separate data plan for the car. I also like how systems like Chrysler Uconnect use Yelp or other apps to find everything from coffee to gas stations and allow searching via voice recognition. Apple CarPlay and Android Auto: It took two of the largest tech companies to get in-dash infotainment right. While they have their disadvantages (you're forced to use Apple Maps with CarPlay, for example), the two smartphone-integration platforms make it easier and safer to use their respective native apps for phoning, messaging, music and more behind the wheel by transferring a familiar UI to the dashboard — with no subscription required. Heated seats and steering wheels: I really appreciate these simple but pleasant features come wintertime. It's easy to get spoiled by bun-warmers on frosty mornings and using a heated steering wheel to warm the cold hands. I recently tested a 2018 Mercedes-Benz E400 Coupe that also had heated armrest that added to a cozy luxury experience. Bonus points for brands like Buick that allow setting seat heaters to turn on when the engine is remotely started. No thanks Automaker infotainment systems: Automakers have probably poured millions into creating their own infotainment systems, with the result largely being frustration on the part of most car owners. And Apple CarPlay and Android Auto coming along to make them obsolete. While some automaker systems, such as Toyota Entune and FCA's Uconnect, are easy and intuitive to use, it seems that high-end systems (I'm looking at you BMW iDrive and Mercedes-Benz COMAND) are the most difficult.