KeriBlog

Cars, Security & a Peek into my Life

Proper Press Car Keys

Seems straight-forward, but it’s not.

All automakers handle it differently, I like this setup best.

Why?

1 – a protected tag with pertinent information front and back (the grey box is the VIN #)

2 – reverse side lists a phone number to call if I need something

3 – key is easily detached for when photographing the interior

4 – a USB key containing the spec sheet plus PDFs. That’s key, because whenever you need an answer it’s 10pm and no one is going to email you back then.

Specifically, these belong to the 2015 VW Golf I have this week.

 

 

Fake Engine Sounds, it’s Happening

It’s a dichotomy – a quieter engine is a more technologically
advanced and efficient one

But the problem is we consumers still associate noise with power, so automakers are faking it.

Who’s doing it? The list includes BMW, Ford, Lexus, Porsche, Toyota, VW and more.

Read it online at Autonet.

Favourite line:

My proposed compromise:

So to the automakers – not sure this is your best idea, guys. Buyers aren’t happy, and the lack of information on your sites makes you seem shady.

I propose a compromise: keep adding the fake engine sounds, but also tell the buyer that you did. Then add an FAQ to your website on how to disable it, or better yet, add in an “off” switch.

***

Back to ‘Keri on Driving’ – Index

 

 

BMW is 1st Automaker to Admit a Security Flaw

Hat tip to BMW – they may be one of the first automakers to publicly admit to a security flaw in their vehicles.

What Happened

The potential breach was found in BMW’s ConnectedDrive infotainment system.

In Germany, the ADAC (their CAA) discovered a potential security gap during data transmission.

It would have allowed an attacker to use ConnectedDrive to remotely unlock the car’s doors, then potentially access the SIM card to control some of the vehicle’s functions (not critical ones though, like steering or braking.)

What BMW did

They promptly sent out a mass software patch to over 2.2 million vehicles, switched to using HTTPS (like a bank) to encrypt traffic between their servers and the vehicles, and then even posted a press release about it, here.

Why this is meaningful

It’s not the first time an automaker has experienced some sort of potential security breach.

What’s different is how they handled it – swiftly, and openly talked about it, something which often only happens when the manufacturer is publicly shamed.