1971 Morris Mini British Racing Green, Union Flag, Restored, Left Hand Drive on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Carfection looks for the ultimate pocket rocket

If there's one thing we love, it's a good showdown. Especially when it's on video, done by some Englishmen, and involving some manner of performance machinery. Like this latest clip, for example, from Carfection. The team formerly known as Xcar have assembled three very compelling supermini hot hatches: two we can get on our side of the pond, and one we can't. One American, one Frenchman, and one Brit. One cheap, one expensive, and one somewhere in between. They all pack turbo fours, of course, but placed in entirely different packages. There's the evergreen favorite Ford Fiesta ST, the Renault Clio RS 220 Trophy that should have the rest licked, and the retro rocket that is the Mini JCW. And there's only one way to find out which is the best. It's a tough contest, to be sure, but lest you think it all comes down to specifications or which one's the newest, you'll want to think again. Because when it comes to hot hatches, all the electronic gizmos and power boosts in the world can't show up a perfectly dialed-in chassis that lets you hug the curves and feel like you're going a lot faster than you actually are. But don't take our word for it – see what our British friends have to say about it in the Queen's English in the seventeen-minute clip above. Related Video:

J.D. Power: Mini, Lexus again offer most satisfying sales experience

JD Power has released its annual Sales Satisfaction Index Study, and once again Mini and Lexus have taken top honors. Overall, buyers are more satisfied with the auto-buying sales experience than they were last year, with those surveyed reporting an average score of 664 points on a 1,000-point scale. That's up from 648 in 2011. Dealer satisfaction also increased by five points over last year as well.
All told, Lexus brought home an index score of 737, which was high enough to put it atop the luxury brands for the second year in a row. JD Power says Infiniti came in second in that category with a score of 728 and Cadillac rounded out the podium with it's rating of 725. Speaking of Infiniti, that brand saw the single largest jump in sales satisfaction of any brand on the survey, popping up 52 index points over 2011.
Among mass-market brands, Mini ranked highest with a score of 712, followed closely by Buick with 706 and GMC farther down the line with 683. You can check out the full press release below for more information.