2012 Used Turbo 1.6l I4 16v Automatic Awd Suv Moonroof Premium on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Mini 'Takes the States' is ready to rally again this summer

The Mini brand has gone to great lengths — literally — during the past two decades to embrace and entertain its loyal following by sponsoring cross-country caravans to celebrate its products and customers. This summer, the caravan reforms once again. Officially called “Mini Takes the States,” the rally in mid-July is scheduled to embark from Albuquerque, N.M., and finish eight days later in Seattle. Visiting five states and nine cities, several hundred drivers and their passengers are expected to join the caravan for part or all of the journey. MTTS, as it's become known as to Mini fans, first rolled out in 2006, with Mini USA using it as a way to celebrate the introduction of the first, hardcore GP edition of its high-performance John Cooper Works model. It has since become a biennial event, with each rally taking a different route around the U.S. It's not competitive. The idea is to connect Mini owners and let them share their enthusiasm about the brand and their experiences with it. Mini plans festivities along the route and usually a “Rally Finale” on the final evening. As far as expenses — hotels, most meals — participants are on their own, although breakfasts and some evening events with food are provided by Mini. The idea is to create positive publicity and “good feelings” for the brand, and to sell more Minis. Since Minis are, at the end of the day, automobiles, service may be required along the MTTS route. Technicians are on hand to perform repairs like engine computer diagnostics, light bulb replacements, tire changes, and other non-major work. Participants will initially head north from New Mexico through Colorado and Utah to Salt Lake City. Continuing through Big Sky country, MTTS 2024 will stop in Bozeman and Missoula, Mont., then head west to Spokane, Wash. From there, drivers will cruise southwest through the scenic mountains and valleys of Yakima, Wash., winding up in Seattle. “WeÂ’re excited to reconnect with our Mini owners nationwide to foster current relationships, forge new friendships and make lasting memories, this time in some of our incredible and majestic western states,” said Mike Peyton, vice president and "chief motorer" for Mini of the Americas, in a press release.

Mini John Cooper Works gets ready to rumble

Mini gave us our first taste of its next-generation John Cooper Works Hardtop in concept form at the 2014 Detroit Auto Show. And in fact, we already know that the production version will make its debut at the 2015 Detroit show in January. Fitting, then, that this most recent round of spy shots shows a JCW that's pretty much ready to roll - peel back that yellow swirly paper, and you've pretty much got the final deal.
It's easy to make out the final design for the revised front and rear fascias, and we can clearly see a more robust brake package nestled behind those alloy wheels. Speaking of, we must admit, the wheels here look rather pedestrian for a JCW model, but they could just be prototype rollers and not indicative of the final rolling stock. We expect the flashy red decals of the concept to be offered on the production model, as well, though they could be optional kit.
As reported earlier, power is expected to come from a 230-horsepower turbo-four - a modest increase over the 208 hp from the outgoing Mini JCW. Expect that to route through a six-speed manual transmission, sending turbocharged oomph to the front wheels.