Navigation, Premium, Cold Weather, Convenience, & Sport Packages Leather on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Judge to approve settlement of Mini CVT lawsuits

BMW has agreed to settle a number of class-action lawsuits out of court. The suits stem from drivetrain issues on the 2001 to 2006 R50 Mini Cooper - in particular, its continuously variable transmission. The transmission was known to fail, often without warning on otherwise healthy and well-maintained vehicles. This wasn't the only major issue to afflict the original BMW-era Mini models.
According to legal site Topclassactions.com, the suits alleged that BMW knowingly hid the defects in the CVT from customers while informing dealers of the issue. The first suit was filed in 2011, while four additional suits have followed. Now, BMW has reportedly settled, offering to reimburse 1,200 owners that needed repairs within eight years or 150,000 miles of their purchase. Repair prices for the transmission range from $6,000 to $9,000.
Under the agreement, BMW will also offer up to $4,100 to members of the suit that had fixes performed at a third-party shop, while owners who sold their cars at a loss due to the issues are slated to receive up to $2,000. Finally, owners who are part of the suit will be warrantied for a further eight years and 150,000 miles.

Driver in the UK moves an ambulance just to free up a parking space

Finding a parking spot in a populated area can be a huge hassle. Drivers will circle a parking lot or a street a half dozen times, sometimes following a pedestrian like a lion hunting its prey in the hopes that that person will free up a spot. That said, there is no excuse for the guy who allegedly moved an ambulance in order to free up a parking space. According to Yahoo News, a driver in the UK got behind the wheel of an ambulance while paramedics were treating a victim in the back so he could park his Mini Cooper in a space that was being blocked. According to the paramedics, they didn't communicate at all with the Mini driver. The patient suffered "distress and discomfort" but was otherwise unaffected. Unfortunately, police are still trying to find the driver. While we can't do much from Michigan, we can provide a brief description. The suspect is a white male with dark hair in his 50s that stands about 5 feet 10 inches tall. The Cooper had a license plate that starts with RJ60. If you have any information, call the police in the UK at 101 or Crimestoppers anonymously on 0800 555 111. Related Video: News Source: Yahoo! NewsImage Credit: Getty Read This MINI