Auto blog

BMW's Connected Drive feature vulnerable to hackers

BMW is working to fix a cyber-security flaw that has left 2.2 million vehicles worldwide vulnerable to hackers. Cars equipped with the automaker's Connected Drive remote-services system are affected, according to the German Automobile Association (ADAC), which first discovered the problem. Researchers found they could lock and unlock car doors by mimicking mobile communications and sending phony signals to a SIM card installed in affected vehicles. An attack could be launched "within minutes" of accessing the system without the perpetrators leaving a trace, according to their report, in part because once they had gained access to the network, the communications were not secure. In response to the security gap, BMW says it has been upgrading software via over-the-air updates over the past week, so no visits to dealerships are needed to remedy the security hole. In fact, owners of affected cars may not have even noticed the updates taking place. The problem affects BMW, Rolls-Royce and MINI vehicles equipped with Connected Drive since 2010. Flaws were first reported to BMW last year by ADAC, which is the country's equivalent of AAA. ADAC says it withheld a public announcement until the car company could address the problem. While BMW has pushed the software patch to most affected vehicles, the organization said it's possible some at cars in the United States had not yet been updated. BMW did not respond to a request for comment Monday. In a written statement, the automaker said it knows of no real-world breaches. 2015 Off To Dubious Start The hack could raise the eyebrows of industry leaders: Cars are now the equivalent of mobile computers and cyber-security experts have been warning that the auto industry has been slow to close its security holes. BMW's breach marks the second time in 2015 that researchers have found a popular automotive feature with little or no security precautions. Last month, experts said a popular device made by Progressive Insurance that allows motorists to track their driving habits contained no security whatsoever. Like the Connected Drive smart-phone app, many automotive components and infotainment features were conceived and produced at a time when industry executives never considered the possibility someone might want to hack into them. But increased connectivity brings increased risk. Going forward, BMW says its Connected Drive features will now operate by using encrypted communications via the HTTPS protocol.

Rolls-Royce is officially in the SUV business

This might be the most brand-appropriate announcement ever for a previously unthinkinable vehicle, complete with a press release titled like a royal edict. After saying a month ago that it would decide on building an mixed-terrain hauler by the end of the year, Rolls-Royce issued a press release entitled, "An Open Letter from the Chairman and Chief Executive of Rolls-Royce Motor Cars on the Subject of a New Rolls-Royce." Let's hold on a second while the sound of trumpets dies down. Nowhere among its 453 words will you find the acronym "SUV," nor the words "sport" or "utility." You will find talk of "an all-new Rolls-Royce," "a high-bodied car, with an all-new aluminum architecture," "a vehicle that can cross any terrain," and references to Lawrence of Arabia traversing mountain ranges and "the vastness of unexplored deserts" and the founders' "rigorous overland adventures," complete with sepia photos. And then there's this: "History sets our precedent and our future calls us to action." Let's hold on a second while the applause dies down. We don't know when we'll see it - Rolls-Royce says it plans to take its time getting it right, to create a vehicle that is "Effortless ... Everywhere." We would believe any date we read about, though; not even two years ago we were told a Rolls-Royce SUV hadn't even been discussed since such a vehicle couldn't fit into the brand ethos, not even a year ago the company's head designer had narrowed it down to "a shooting brake, not a crossover with a sloping roof. A proper SUV," with the Ghost platform for support and a speculated release date of 2017. If they brought a near-production-ready sample to the Frankfurt Motor Show this year, we wouldn't be surprised. We sincerely hope that, like the image, it comes with a man to shovel any obstacles out of the way. Gather round the dais and enjoy the press release below. It's a whole new world. Related Video: AN OPEN LETTER FROM THE CHAIRMAN AND THE CHIEF EXECUTIVE OF ROLLS-ROYCE MOTOR CARS ON THE SUBJECT OF A NEW ROLLS-ROYCE 18.02.2015 -- The launch of Phantom in 2003 marked the beginning of the renaissance of Rolls-Royce Motor Cars. Since then, we have set a new benchmark for what a super-luxury car should be – unique, hand-crafted, beautiful and rare. Often imitated, Phantom has never been equalled and continues to be hailed as 'The Best Car in the World' by our customers and media alike.

So, how do you actually pronounce that automaker's name?

You probably have that friend who always says Porsche wrong, or maybe it's someone who keeps reminding you it's actually two syllables. Whichever side of the pronunciation debate you fall on, you'll find someone to root for in the video above. And before you ask, this was all the video team's idea. So don't get mad at me for being the voice of reason. BMW Chevrolet Hyundai Nissan Rolls-Royce Videos Original Video nissan qashqai