1977 Leyland on 2040-cars

Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Mini Vision Next 100 Concept: It's the autonomy, stupid

The concepts that Mini and Rolls-Royce showed off today – the Vision Next 100 Concept and 103EX, respectively – are all about autonomy. The Rolls-Royce doesn't even have a place for a "driver." And even though both are very much blue sky concepts, corporate parent BMW thinks it will make fully-autonomous cars within the next five years. That's according to Peter Schwarzenbauer, Member of the Board of Management of BMW AG, MINI, BMW Motorrad, Rolls-Royce, and Aftersales BMW Group, who also told us that both cars, at least in concept, are fully electric. The Rolls-Royce has dual-drive, 250kw motors mounted fore-and aft, on front and rear axles. While the Rolls is clearly a luxury concept for the monied few, the Mini is very much focused on a shared economy. Holger Hampf, Head of User Experience, BMW Group, said the chief design challenge of a car-sharing world is producing a car that could in theory mean different things to different borrowers. You get exclusivity because each car would morph according to the borrower's desires. BMW/Mini already have a car-sharing program in London called DriveNow, and a pilot program in Seattle called ReachNow, focused on the idea of shared exclusivity. ReachNow, which allows Mini/BMW owners to lend their cars out in an AirBnB-type scheme or to borrow "fleet-style cars," are immutable – however the car that was ordered is what the borrower or the owner will get. That's great if you're the owner, but it's also challenging for both anyone who'd buy that car used or for anyone borrowing the car. And if the future of most cars is a shared model (Ford is now offering multi-person leases among up to six buyers in a pilot program in Austin, Texas), customization is impossible. The result is what Schwarzenbauer derogatorily calls "normed." He says carmakers have to relearn to brand for a world where ownership is devalued but customization is key. To that end the MINI VISION NEXT 100 is "skinned." We've seen this before with the BMW NEXT concept that was revealed at the NY Auto Show this past spring, and the idea is to use the exterior of the car as a canvass that changes according to setting. Indeed Mini envisions that in a multi-driver household, the vehicle's customization could easily include changing colors according to driver preference – automatically. Dr.

Mini USA will temporarily stop importing manual transmissions

Emissions certification woes strike again, this time at Mini. The U.S. arm of Blighty's iconic car company has had to temporarily put a stop to importing any models with manual transmissions beginning with July production, which is when BMW typically begins rolling the new model year down assembly lines. According to MotoringFile, calibration testing for the six-speed manual is taking longer than expected. The outlet guesses the interruption will conclude by September, because it has "seen these type of delays in the past and they've lasted from 1-4 months." It has queried the brand's head of communication, who said, "As much as we at MINI USA would like to have a definitive timeline, it would be too early to say." The spokesman did, however, say that Mini remains committed to the manual gearbox. That comes in contrast to Toyota's recent breakdown of manual take-rates across a range of vehicle types, Hyundai jettisoning the manual on the 2020 Elantra, and stalwart enthusiast rides like the Ford Mustang Shelby GT500 and Chevrolet Corvette leaving the stick-shift fold. Nevertheless, Mini's efforts feel, at best, like raging against the dying of the light, especially because the end of the MF report states, "the other big news is that Mini USA is also eliminating the manual option from some models all-together." MF isn't yet certain about which models are affected, though. Buyers stepping up during the row-your-own intermission will get a crack at the long awaited seven-speed dual-clutch transmission or a revised eight-speed automatic. The DCT will slide into the Cooper and Coooper S models, the traditional automatic makes a home in the 301-horsepower John Cooper Works Clubman and Countryman.