[Haywood]

Pretty scary stuff...

http://www.theblaze.com/stories/2015...is-is-reality/

[M3Bimmer77]

They are talking about Chrysler, what about our case, BMW? I hope there is a big difference between the two manufacturers and modus operandi of the two wifi or Bluetooth or whatever they use to connect to that car and control it. Scary!!!!!

[Cbozz]

Originally Posted by M3Bimmer77

They are talking about Chrysler, what about our case, BMW? I hope there is a big difference between the two manufacturers and modus operandi of the two wifi or Bluetooth or whatever they use to connect to that car and control it. Scary!!!!!

not our M3s! were safe! only thing is that they could use ODB and make their own key and steal the car lol

[Flying Ace]

Originally Posted by M3Bimmer77

They are talking about Chrysler, what about our case, BMW? I hope there is a big difference between the two manufacturers and modus operandi of the two wifi or Bluetooth or whatever they use to connect to that car and control it. Scary!!!!!

To make this hack work, you need the 4GLTE data reception feature... I think they tout the option to keep you connected to your app/email and also serves as communication for the car to the owner and dealer about when you need an oil change and stuff. All this is useless upsell options.

even if I were buying GM, I would not be paying for something that I already have on my phone. I do not need to be connected to all my "apps" while driving.

Same goes with those stupid BMW apps

[8k3]

Good luck trying that with my CCC, they thought they were feature rich by giving us phone audio bluetooth only

[Haywood]

Originally Posted by Flying Ace

To make this hack work, you need the 4GLTE data reception feature... I think they tout the option to keep you connected to your app/email and also serves as communication for the car to the owner and dealer about when you need an oil change and stuff. All this is useless upsell options.

even if I were buying GM, I would not be paying for something that I already have on my phone. I do not need to be connected to all my "apps" while driving.

Same goes with those stupid BMW apps

I thought I read though that BMW was going to be installing LTE in their cars? I could be wrong.

[Flying Ace]

Originally Posted by Haywood

I thought I read though that BMW was going to be installing LTE in their cars? I could be wrong.

yes, they will, but it still requires the owner to buy the hardware option for this and activate the service for this hack to work.

[Z K]

They can gain some access to the car via the car's cellular antenna that is used for BMW assist.

Even for older CCC cars, they can do things like unlock the doors, start/stop the engine and such.

[redpriest]

Originally Posted by Flying Ace

yes, they will, but it still requires the owner to buy the hardware option for this and activate the service for this hack to work.

Your new avatar works well with your handle, LOL

[Flying Ace]

Originally Posted by redpriest

Your new avatar works well with your handle, LOL

thanks, you're the second person to tell me that.

[Flying Ace]

Originally Posted by Z K

They can gain some access to the car via the car's cellular antenna that is used for BMW assist.

Even for older CCC cars, they can do things like unlock the doors, start/stop the engine and such.

hmm, that's true. looks like some of those control functions already exist on our cars.

[afadeev]

Originally Posted by Flying Ace

To make this hack work, you need the 4GLTE data reception feature... I think they tout the option to keep you connected to your app/email and also serves as communication for the car to the owner and dealer about when you need an oil change and stuff. All this is useless upsell options.

Not exactly.
The method of wireless connectivity to the car (1X/CDMA/GSM/LTE) has nothing to do with the Jeep's problem.

Part of Jeep's problem is Sprint wireless service, that apparently, does not fire-wall unsolicited inbound wireless traffic to one's wireless devices. The same vulnerability would allow one to send bogus traffic to your Spring cell phone, and you will be stuck paying for it (among other problems).

The second problem is that Chrysler has, evidently, implemented zero security mechanisms inside the car's network (aka CAN bus). So, once a malicious user compromised one device on that network (entertainment head unit), they were able to program it to control vital areas of the car (steering, transmission, etc). That's just pure network engineering incompetence and negligence on Chrysler's part.

Originally Posted by Flying Ace

even if I were buying GM, I would not be paying for something that I already have on my phone. I do not need to be connected to all my "apps" while driving.
Same goes with those stupid BMW apps

The vast majority of cars in the US have been "connected" for the past 5-10 years.
You may not have been aware of it since auto-manufacturer's haven't been marketing consumer services to you directly, but it's true nonetheless.

a