on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Rolls-Royce debuts Phantom Drophead Coupe Waterspeed Collection

For the next act in its Bespoke Collection, Rolls-Royce has found one of its own to celebrate with the Phantom Drophead Coupé Waterspeed Collection, noting the achievements of British land and water record-holder Sir Malcolm Campbell. Like a few other racers of his era in the 1920s and 1930s, Campbell used his Bluebird Motor Company and Bluebird Garage to fund his interest in motorsports. He would break the waterspeed record in 1937 in his Bluebird K3 powered by a Rolls-Royce R engine, traveling 126.33 miles per hour on Italy's Lake Maggiore.
We've seen sketches of what Rolls-Royce intended with the Waterspeed Collection, and the real thing is just as handsome, and the new model includes a number of firsts for the marque. The Maggiore Blue exterior paint is also used for highlights on the engine, the polished wheels, two-tone steering wheel and the dashboard. The tonneau cover normally finished in teak is instead done in hand-finished brushed steel, a closer contrast to the Windchill Grey interior. The Abachi wood veneers have also been bookmatched so that their grain evokes the wake of a speeding boat.
The droptop will be shown first at the Bluebird Garage Cafe in London on the site of the original garage, after which it will get its first wider showing at the Concorso D'Eleganza at Villa D'Este later this month. The press release below has a lot more detail on the finer detailing of the Drophead Coupe Waterspeed, and the images above are worth at least 8,000 words.

Rolls-Royce Cullinan, Mercedes-AMG E 53 and BMW 2 Series | Autoblog Podcast #734

In this episode of the Autoblog Podcast, Editor-in-Chief Greg Migliore and Senior Editor, Consumer, Jeremy Korzeniewski kick things off with a discussion of the Rolls-Royce Cullinan and the future of the brand. The Mercedes-AMG E-Class is next up, followed by the BMW 2 Series Coupe.  Next, Senior West Coast Editor James Riswick reports from the ground at the first drive of the latest Honda HR-V. Our hosts revisit the week's news, including automakers requesting a lift of the EV federal tax credit cap, Chevy giving us a peek at its electric Blazer, and Ford recalling millions of vehicles, including about half of all the Mustang Mach-E EVs it has sold. Finally, our guys dig through the mailbag to help a reader decide whether to purchase a Ford Focus ST or another hot hatch. Send us your questions for the Mailbag and Spend My Money at: Podcast@Autoblog.com. Autoblog Podcast #734 Get The Podcast Apple Podcasts – Subscribe to the Autoblog Podcast in iTunes Spotify – Subscribe to the Autoblog Podcast on Spotify RSS – Add the Autoblog Podcast feed to your RSS aggregator MP3 – Download the MP3 directly Rundown Cars we're driving Rolls-Royce Cullinan Mercedes-AMG E 53 BMW 2 Series Coupe Dispatch from the 2023 Honda HR-V first drive event GM, Ford, Toyota, Stellantis CEOs want EV tax credit cap lifted 2024 Chevy Blazer EV partly revealed, details coming in July Ford recalls Mustang Mach-E, includes stop-sale order Ford recalls 3 million other vehicles Spend my money Feedback Email – Podcast@Autoblog.com Review the show on Apple Podcasts Autoblog is now live on your smart speakers and voice assistants with the audio Autoblog Daily Digest. Say “Hey Google, play the news from Autoblog” or "Alexa, open Autoblog" to get your favorite car website in audio form every day. A narrator will take you through the biggest stories or break down one of our comprehensive test drives. Related video: