Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Behind the scenes of BMW's 'Drift Mob,' Part 1

Generally speaking, marketing and journalism don't mix, but every now and then, what goes into the marketing of a car - the 2015 BMW M235i, in this case - is worth documenting. In that spirit, we took BMW up on its offer to bring us behind the scenes of its upcoming "drift mob" video, starring five red M235i coupes frolicking around a traffic circle in a major world city (BMW has asked us to be coy about which one so as not to blow its cover before the shoot).
The five drivers can all be considered legends of modern-day drifting and stunt driving: Rhys Millen, Samuel Hübinette, Dai Yoshihara, Rich Rutherford and Conrad Grunewald.
As the only US media outlet in attendance, Autoblog plans to follow up with a full story on the experience once BMW polishes and releases the video in a month or so. In the meantime, check out our photos of this epic practice session we captured on our first day hanging with the crew, and be sure to watch this space for more behind-the-scenes action.

2022 New York Auto Show Roundup | All the reveals, reviews, pictures

NEW YORK — In case you missed it, the New York Auto Show took place this year after being canceled in both 2020 and 2021 due to Covid. A lot of manufacturers showed up in force, but not everybody did. No matter, we were there, and we brought you news, photos and scoops from the floor throughout the show. All of our New York-related stories can be found at our central hub here, but if youÂ’d rather just get a small taste of everything in a quick and digestible format, keep scrolling. 2023 Kia Telluride and its new X-Pro trim Kia revealed the TellurideÂ’s first major refresh at New York, and it makes the three-row crossover a little bit more desirable without screwing up what we liked about it before. ThereÂ’s a new X-Line and X-Pro trim for someone who might want a little more off-road capability, and a number of tech improvements. Most notably, a newly-designed dash features new and bigger screens. 2023 Hyundai Palisade The TellurideÂ’s sister car from Hyundai was treated to a similar refresh. Like the Telluride, Hyundai gave the Palisade a slightly revised look, a new off-road trim (called XRT in the PalisadeÂ’s case), more tech inside and a new dash design with full-width air vents. If we had to choose, weÂ’re a little more impressed with the TellurideÂ’s refresh, as a number of us on staff actually prefer the pre-refresh Palisade styling over the new one. 2023 Jeep Wagoneer L and Grand Wagoneer L This one was inevitable. Jeep revealed the longer, roomier versions of its Wagoneer and Grand Wagoneer in New York, and theyÂ’re designated with an “L” at the end of their names. Total length grows by a foot, and the wheelbase goes up by 7 inches versus the standard Wagoneer models. Jeep has essentially allocated all this extra room to the cargo area, as it now offers a staggering 44.2 cubic-feet of space behind the third row. Besides the L, Jeep announced that its new Hurricane inline-six engine would find its first home in the Wagoneer. Efficiency gets a small boost, and power is more than sufficient at either 420 horsepower (standard output) or 510 horsepower (high-output version) from the twin-turbo I-6. Chrysler Airflow Graphite Concept The Stellantis party continues with Chrysler and its slightly revised Airflow. Re-styled for the New York market after initially debuting at CES in Las Vegas, the Airflow Concept gets new paint, changed accent colors, a slightly changed interior design and a new interpretation of the Chrysler logo.