Twin Glass Roofs, Manual, Rally Stripes! on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Mini may have overexpanded, some models may not be replaced

Surprise, surprise. According to Edmunds, Mini may be looking to reduce the number of vehicles in its range, which has recently expanded to include a total of seven offerings (not to mention the copious varieties of configurations found within each line). When Mini relaunched in the early 2000s, it did so with one model, the Cooper Hardtop, and has since added the Convertible, Clubman, Countryman, Coupe, Roadster and Paceman. It looks like those ambitions of expanding the range to include up to 10 models may have been a bit optimistic.
"When we start to replace models, I think you will see that we won't replace every model exactly," Jim McDowell, Vice President of Mini USA, told Edmunds in an interview. The brand's core models right now are the Hardtop and Countryman, and of the roughly 66,200 vehicles that Mini sold in the United States last year, these two vehicles accounted for some 75 percent of total sales.
McDowell declined to mention any specific models that may not be replaced in the lineup's next generation, though our best guess is that ultra-niche vehicles like the Coupe (pictured) or Clubman. As for replacing some of the current models with new products, the only clear gap we can see in the brand's lineup is a smaller car like the Rocketman concept, though we've been told several times that a mini-Mini isn't going to happen. Be sure to let us know what Mini models you'd like to see kept or axed in Comments below.

First Mini John Cooper Works prototype spied

The highlight of Mini's 2014 Detroit Auto Show stand was the arrival of the John Cooper Works Concept, a sportier version of the three-door hatch that presages the next JCW model on the new platform. Now, we have our first images of the production car undergoing winter testing way up north in Sweden.
Really, the Mini camouflage can't hide what this car is. Between the JCW-branded brake calipers and extra intakes in the front fascia, it's fairly easy to see that this is the sportier version of the car our own Jeremy Korzeniewski wrote about last week. We're expecting the JCW variant to pack a fair bit more firepower than the three-cylinder Cooper he tested, of course. Rumors have circulated that the hottest Mini model could jump to 230 horsepower, up from the current, non-GP car's 208.
There are a number of style features missing here, and while it's entirely possible we'll see things like the JCW Concept's diffuser and side gills arrive when this car is shown in production form (or even further along in testing), their absence in these spy photos is telling. We certainly think this car will become the production JCW Hardtop, but there may be another explanation. The lack of certain aesthetic features means this could be a test of the JCW Engine Kit, which in past Minis slotted in between the standard Mini Cooper S and the factory Works car. We'll admit, it's a long-shot, but there is precedent for it - the JCW Tuning Kit arrived a year before the factory model in the last-generation car. The same reasoning could be used to explain the presence of the JCW-branded brakes, which have been another well-known Mini accessory over the years.