1966 Austin Cooper S on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Consumer Reports no longer recommends Honda Civic

Consumer Reports annual Car Reliability Survey is out, and yes, there are some big surprises. First and foremost? The venerable publication no longer recommends the Honda Civic. In fact, aside from the walking-dead CR-Z and limited-release Clarity fuel-cell car, the Civic is the only Honda to miss out on CR's prestigious nod. At the opposite end there's a surprise as well – Toyota and Lexus remain the most reliable brands on the market, but Buick cracked the top three. That's up from seventh last year, and the first time for an American brand to stand on the Consumer Reports podium. Mazda's entire lineup earned Recommended checks as well. Consumer Reports dinged the Civic for its "infuriating" touch-screen radio, lack of driver lumbar adjustability, the limited selection of cars on dealer lots fitted with Honda's popular Sensing system, and the company's decision to offer LaneWatch instead of a full-tilt blind-spot monitoring system. Its score? A lowly 58. The Civic isn't the only surprise drop from CR's Recommended ranks. The Audi A3, Ford F-150, Subaru WRX/STI, and Volkswagen Jetta, GTI, and Passat all lost the Consumer Reports' checkmark. On the flipside, a number of popular vehicles graduated to the Recommended ranks, including the BMW X5, Chevrolet Camaro, Corvette, and Cruze, Hyundai Santa Fe, Porsche Macan, and Tesla Model S. Perhaps the biggest surprise is the hilariously recall-prone Ford Escape getting a Recommended check – considering the popularity of Ford's small crossover, this is likely a coup for the brand, as it puts the Escape on a level playing field with the Recommended Toyota RAV4, Honda CR-V, and Nissan Rogue. While Ford is probably happy to see CR promote the Escape, the list wasn't as kind for every brand. For example, of the entire Fiat Chrysler Automobiles catalog, the ancient Chrysler 300 was the only car to score a check – there wasn't a single Dodge, Fiat, Jeep, Maserati, or Ram on the list. That hurts. FCA isn't alone at the low end, either. GMC, Jaguar Land Rover, Mini, and Mitsubishi don't have a vehicle on CR's list between them, while brands like Mercedes-Benz, Volvo, Nissan, Lincoln, Infiniti, and Cadillac only have a few models each. You can check out Consumer Reports entire reliability roundup, even without a subscription, here.

Even Mini's manual transmission take rate is only 11%

Of all the automakers we've talked with so far, Mini seems to sell the largest percentage of its cars with a manual transmission. A representative from the company shared numbers with us that show 11% of its 2019 sales have featured a stick. That beats Subaru's 7%, Volkswagen's 5% and Honda's 2.6%. It likely helps that Mini is a more niche brand, and it offers a manual on nearly every version of its cars. Still, it's sad that 89% of Mini owners decided to get an automatic anyway. The manual take rate between different models varies quite a bit. The high-performance John Cooper Works models are most frequently sold with a manual transmission. The two-door hardtop and convertible versions have the highest percentages for the JCW at 41% and 32%. The JCW Clubman and Countryman follow at 22% and 19%. We're not surprised that the fast versions of Minis are sold with a manual more often than others, but we're surprised that even with two in 10 JCW Clubman and Countryman models selling with one, Mini would drop the option from the new 301-horsepower versions. Unsurprisingly, other trim levels aren't purchased with a stick as often. The least popular is the front-drive Cooper S Countryman at 0%, followed by the regular Cooper Countryman at 1%. Then there's the Cooper Clubman at 3%. Weirdly, the all-wheel-drive Countryman and Clubman models always have a higher percentage of manuals than the front-drive models, with differences ranging from 2% to 10%. The two-door Minis are typically the most likely to sell with a manual even for core models. In the convertible, the 6% of regular Coopers are manual while 30% of the Cooper S are. That nearly matches the JCW convertible. For the hardtop, the regular Cooper's manual take rate is 11% and the Cooper S model's is 17%. These numbers will probably drop in the short term, though. Mini announced that it's temporarily stopping imports of manual Minis due to some emissions calibration issues. After a few months, though, we expect the manual sales to bounce back.