2013 Cooper New 1.6l I4 16v Automatic Fwd Suv Premium on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

NHTSA slaps BMW with $40M fine for slow Mini recall

BMW is on the hook for a $40-million fine after the National Highway Traffic Safety Administration slapped the automaker over not recalling Minis that failed to meet minimum side-impact crash standards. The civil penalty from NHTSA concerns 2014 and 2015 Mini Cooper hatchback models that "failed a crash test designed to determine whether the vehicle met crash-protection minimums," the government agency said in a press release issued this week. An October 2014 test revealed the first problem, and the Mini was subsequently retested in July, only to fail again and finally prompt a recall of more than 30,000 cars. But according to NHTSA's investigation that was opened in October, BMW waited too long to issue a recall after it knew the cars did not meet standards and bring them into compliance with more energy-absorbing materials installed by Mini dealers. This is the second time NHTSA slapped BMW with a major penalty, following a $3-million fine back in 2012 failing to report recalls of its cars and motorcycles. "For the second time in three years, BMW has been penalized for failing to meet that obligation," NHTSA Administrator Mark Rosekind said in the release. "The company must take this opportunity to reform its procedures and its culture to put safety where it belongs: at the top of its priority list." In a separate release issued this week, BMW Group said it, "is committed to further improving its recall processes to better serve its customers," and that the company, "respects the role of NHTSA and looks forward to working with them to develop solutions for the future." National Highway Traffic Safety Administration fines BMW $40 million for failing to meet safety requirements Fine is auto company's second since 2012 WASHINGTON – The U.S. Department of Transportation's National Highway Traffic Safety Administration has imposed a $40 million civil penalty and a series of performance requirements to automaker BMW North America for a series of violations of the Motor Vehicle Safety Act and NHTSA regulations. Under terms of a Consent Order issued to BMW, the company acknowledges that it violated requirements to issue a timely recall of vehicles that did not comply with minimum crash protection standards, to notify owners of recalls in a timely fashion, and to provide accurate information about its recalls to NHTSA. NHTSA imposed a $3 million civil penalty to BMW in 2012 for similar violations.

BMW shuffles chairs in its design department

BMW Group has made some changes to its design team since August 1, and has shuffled top personnel to different positions at BMW Design, Mini Design and Rolls-Royce.
The BMW Design team led by Karim Habib (middle, right) gains a new head of Exterior Design in Domagoj Dukec (right), who has worked for the exterior design team since 2010 and shaped the Concept Active Tourer.
Oliver Heilmer (left), who has worked for BMW's interior design unit since 2000 and designed the 5 Series interior, replaces Marc Girard as head of Interior Design BMW Automobiles. Marc Girard goes to manage BMW's subsidiary design group, BMW DesignworksUSA.