on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

2014 BMW 328d xDrive Sport Wagon

There's a running joke among auto writers that the perfect car would be a diesel-powered, rear-drive wagon with manual transmission and no power accessories whatsoever. It would only be available in brown and would somehow be as fun to drive as a Mazda MX-5 Miata. Makes total sense, right?
Realistically, no manufacturer is ever going to completely fulfill our wishes, no matter how much we beg, plead, kick and scream about our dream car that most of us would actually never buy. The best we can do is hope for a vehicle that mixes some aspects of this ideal journalist's car. And in today's world, that vehicle just might be the BMW 328d xDrive Sport Wagon.
No, it's not available with a manual gearbox, and power can only be sent through an xDrive all-wheel-drive system. It's also not available in brown (although both Mojave Metallic and Sparkling Bronze Metallic are acceptable stand-ins), but it ticks the two main boxes of being a diesel-powered wagon, one of only a couple such models in the United States.

Bristol returning under BMW power

BMW has had its hand in reviving once-great British automakers, and now its playing its part in the rebirth of another. That marque is Bristol Cars, the automotive offshoot of the Bristol Aeroplane Company. Bristol hand-made luxury sports cars between 1945 and 2011 when it went belly-up, and ever since there's been an effort to bring it back. That effort is now picking up steam, and is set to launch later this year – marking the 70th anniversary of the marque's founding. It's tentatively known as Project Pinnacle, and while future versions are slated to pack plug-in hybrid power developed in collaboration with Bristol's sister company Frazer-Nash (which is now focused on battery technology), the first new Bristol in a dozen years is slated to pack BMW power. Details accompanying the announcement below are few and far between, but one way or another, it won't be the first time BMW will have played a part in breathing new life into a British automaker. The Bavarian company of course revived Mini, and made Rolls-Royce what it is today, but was also was briefly the custodian of Rover, Land Rover and Bentley, and has been linked to a potential (if unrealized) effort to bring back Triumph. Its role in Bristol's rebirth under Project Pinnacle may be less involved than all of those, but at very least we'll know that the new British GT will have a proper engine under the hood. BRISTOL CARS CONFIRMS POWERTRAIN FOR 70th ANNIVERSARY PROJECT PINNACLE • First new Bristol car in more than a decade to feature BMW powerplant • High performance powertrain earmarks resumption of the history between Bristol, Frazer-Nash and BMW dating back to 1930s London, England, June 2015 – Iconic British carmaker, Bristol Cars, makes the second in a series of announcements today about its first new car in more than a decade, codenamed Project Pinnacle. Project Pinnacle, which is set for launch later this year, will be a 70th anniversary celebration model, referencing Bristol Cars' rich heritage and executed as a modern take on the best of British craftsmanship, engineered to excite and satisfy as a high performance Bristol car. Bristol Cars is deeply proud to announce that the machinery underpinning this high performance new vehicle will be a BMW powerplant. The result will a sublime British sportscar with characteristics cultured uniquely for the first new Bristol since 2004.