2009 Mini Cooper S on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Production Mini Rocketman still in the cards, but not without a partner

There's not really any way around it - the new Mini Hardtop isn't all that mini. Considering its supposed to be the smallest model in the brand's lineup, this is hardly desirable. It's good news, then, that rumors are cropping up of a smaller Mini, based on the well-received Rocketman Concept that debuted in 2011 at the Geneva Motor Show.
The report, which comes from our friends at AutoGuide, claims that a production Rocketman is still on the radar of Mini's product chief, Pat McKenna, despite being officially on hold. As Mckenna explained it to AG, "the only way it would happen would be if it was a partnership with another company."
See, the problem is that Mini's current UKL platform, which underpins the new Hardtop along with the future Mini range, is too large for the tiny Rocketman. And since developing new platforms isn't as easy as popping down to the shops for a gallon of milk (nor as cheap), it makes the need for an ally to split the costs a necessity. Success, so far, has been limited.

KBB 2013 Brand Image Awards has some obvious and oddball winners

The sixth edition of the Kelley Blue Book Brand Image Awards have crowned a wide range of winners - in a couple of cases the recipient of the laurels might say more about KBB users than they do about the actual winner. Compiled from the responses of more than 12,000 shoppers on KBB.com over the past year, there are 13 categories broken into non-luxury, luxury and truck segments "representing the combined wisdom of the American car-buying public."
The award categories have been revamped this year, with some dropping off, some new ones appearing and at least one other given a new term. What isn't surprising is that Honda won Most Trusted Brand for the second year running, Best Value Brand for the third year in a row and took Best Overall Brand, which wasn't on last year's list of awards.
On our own shores, in the non-luxury categories Chrysler got Most Refined Brand and Buick took Best Value Luxury Brand. Neither one of those marques won anything in last year's Brand Image Awards, while Cadillac, which won Best Interior Design Brand and Best Comfort Brand last year - those awards disappeared this year - went home without a single accolade.