on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

2015 Mini Cooper snapped uncovered on the road

The third generation of reborn Mini is nearly upon us. Just look at the trail of breadcrumbs the Anglo-Saxon automaker has been leaving us.
First we saw the upcoming new Mini Cooper, spied from above at a photo shoot, which Mini was quick to point out was not its best angle. Then BMW's retro-hatch division showcased the Mini Vision concept, and followed up just yesterday with details of the new engines and chassis that will underpin the latest model. And now we have the clearest batch of spy shots we've seen yet.
Not only were these shots taken from a better angle, but also show the new Mini in the more tempting Cooper S trim - complete with hood scoop, split-spoke alloys, roof spoiler and twin central exhaust tips.

2014 Mini John Cooper Works Countryman All4

The standard Mini Countryman is a bit of an odd duck against the backdrop of 'normal' small crossovers like the Mazda CX-5 and the Ford Escape, but I sort of get it. Apply the same winning Mini formula to a CUV, and you get a smaller-than-average entry in the segment, one that is far more entertaining to drive than the norm, more stylish inside and out and pretty expensive when cross-shopped. That list of qualities doesn't appeal to all crossover shoppers, sure, but it intrigues a big enough list that the Countryman has reason for being.
Now, add the expensive John Cooper Works package to the Countryman's already niche goodies list, and Mini starts to lose me. So, I'm getting the softer suspended, taller, generally less dynamically joyful version of the brand's core values, but now you're charging me at least $35,000 ($13k more expensive than the basic, front-drive Cooper Countryman and $7k more than the MSRP of the Cooper S All4 version)? What's that? You're going to make it look like a garish, tippy-toed tuner car in the process? Take my money.
Or, actually, let me keep it. I can swing with a lot of the weirdness that Mini has to offer, but this car pushed me past my limit.