BMW Patches Security Flaw Affecting Over 2 Million Vehicles

An anonymous reader writes BMW has fixed a security bug which left 2.2 million cars, including models from Rolls Royce and Mini, exposed to hackers. The flaw was discovered in vehicles using BMW's ConnectedDrive software, which runs from an installed on-board Sim card. Via the smartphone app, owners can remotely control a number of functions including door locks, air conditioning and sounding the horn. Researchers from the German motorist association ADAC identified the flaw which allowed the system to connect to fake mobile phone networks, enabling hackers to remotely control the Sim card.

Comments

Re:better solution: don't make cars network-capabl

[houghi]

If you have Google Maps or Apple Maps, you need your data connection. There are other options available. I use Sygic and others are available. All offline. Some free, some you pay for.

If you add a (bluetooth) OBDII dongle, you can get the car data from the engine as well.

Many people have added their tablet (Apple and Android) as their primary interface for media. There is specific software available to do all this. Nothing stops you doing the same with your phone.

At this moment about 95% of the time all my radio does is transfer the sound of my phone to my boxes. I have not configured a radio station yet in the 5 years I have it. On big road trips, I prefer the Garmin, because it is easier to add a route like this into a route on the Garmin using Tyre and the Garmin software.

Added advantages for using my phone and not an internal system? When I want to do changes to it, I can do it at my desk. I can get a new device and upgrade or downgrade it as I please. If I drive with somebody, I can listen to their music. If they steal my car-radio, I buy a new one for 50-100EUR.