Great Mini Cooper Clubman S on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Mini Paceman Adventure photos arrive by the trucklette-load

Yesterday, we brought you the news of the existence of this Mini Paceman Adventure tiny truck, and the story of how it came to be. Long story short: it was a lighthearted collaboration between apprentices and instructors at parent BMW plants in Germany. The mini-sized pickup bed and off-road kit may not make the Paceman All4 actually practical, but we'd argue that they do make the one-off fairly loveable.
Apparently the Mini photographers agree with that "loveable" part. We'd heard that there were some better, higher-resolution images of the Paceman Adventure on the way, but we didn't expect there to be hundreds of them. But as you can see, the shooters went out and thoroughly documented the pickup, shooting it in several locations, still and moving, and documenting some of its construction as well. Find your favorite in the massive gallery of images, above.

Why the 2020 Mini John Cooper Works GP doesn't have a manual

LOS ANGELES — The 2020 Mini John Cooper Works GP is an interesting machine. While it shares a lot in common with its predecessors, such as the big rear wing, no rear seat, four-spoke wheels and other aggressive design cues, it has a number of distinct differences. In particular, it has a massive amount of power relative to old models, and it doesn't have a manual transmission. This all left us with some questions that we brought to some Mini representatives. We'll start with the big one: "Where's our manual?" The representatives said a lot about how manual take rates are declining, and the smooth, quick-shifting automatic transmission fits a track-oriented car. But they also eventually admitted that they don't have a manual transmission available that would be strong enough to handle the turbo 2.0-liter engine's 301 horsepower and prodigious 332 pound-feet of torque. On the other hand, the engine, which is also used in the John Cooper Works Countryman, Clubman, and small BMWs, already has an automatic developed. And obviously, the company didn't feel it was worth it to develop a stronger gearbox for a run of just 3,000 cars. At the very least, having experienced Mini automatics in the past, they are good, and to make the experience a little more engaging, Mini has custom 3D-printed aluminum alloy shift paddles for the GP that do feel good. Another thing we were curious about was the disappearance of the Nurburgring lap time from the dashboard. Spy shots showed a time of 7:56.69 on a 3D-printed dash panel. The 3D-printed dashboard remains, but it will now have each model's production number instead. The display car uses 2020 as an example. The Mini representatives said that past customers cared more about which number of car they had, rather than a lap time. This is also in keeping with past GP models that all displayed their production numbers somewhere in the interior. The new GP's most striking features, though, are its carbon fiber fender flares. They serve a couple of purposes, such as accommodating the car's wider track and tires. According to one of the representatives, they also help direct airflow and reduce drag, but she didn't say by how much. Then there's the appearance, which is unusual at the least, looking almost like vertical wings, and it's inspired by the outrageous concept. Although they're made of carbon fiber, it's more of a molded style than the woven variety seen on many cars.