on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

The Chrysler Pacifica has clever 'Stow 'n Place' roof rack crossbars

While we focused yesterday on all the places you can store stuff (and especially bottles) inside the Toyota Sienna interior, today I thought I'd point out how another minivan makes it easier to store stuff up on the roof. The 2021 Chrysler Pacifica includes a clever integrated roof rack system dubbed "Stow 'N Place" that basically lets you store the cross bars on the van itself rather than somewhere in the garage. But wait, can't you always just leave crossbars on your car? Sure, if you want to live with extra wind noise and a fuel economy reduction. You see, the Pacifica stores them flush within a rail unit running length-wise with the roof. Basically, they're hidden away until you need them. The Subaru Outback has something similar to this, which we've previously reviewed. With its integrated crossbars, you just flip open a latch, fling the bar to the opposite side of the car and plug it in. Then repeat. It couldn't be simpler. Although the Chrysler system is more complicated, it does have a key advantage. Let's see how they work.  Chrysler tries to use chrome trim in order to create the visual illusion of raised roof rails from afar, but up close ... ... they clearly aren't. It's just a G.O.B.-grade illusion created by the chrome trim arching over black plastic trim.  You have to unscrew each end of the bars by turning these little pieces.  The bars are then completely detached from the van. You then have to articulate each of the bars so that they go from their straight, flush-mounted position to the necessary raised position. That's quite easy to do. Be careful, though as these suckers are sturdy metal. You don't want to drop one onto those fancy glass roof panels.  Subaru avoids all this and allows you to simply swing the bar across by utilizing a bulky rail housing that raises them up to the necessary height, but provides a visual that probably gives some car designers nightmares.   There are letters at each mounting point that align to those on a bar end. So, make sure to go A with A, D with D, etc.  However, you have two options for placing the C/D bar, meaning you're not stuck with a one-size-must-fit-all gap as with the Subaru. This is without question the advantage to Chrysler's approach here. So voila! What once didn't have crossbars now has them. It might not take seconds as with the Outback, but they're sure-as-hell quicker and easier to install than aftermarket crossbars.

Pickup prices rising at 2x industry average

We've said it before, but bears repeating: Pickup trucks are the financial engines of America's automakers. Good thing, then, that the segment is in rude health - in fact, Automotive News is suggesting that pickup truck sales are arguably healthier than they were pre-recession, even though the segment's volume is still significantly down from where it was before the bottom fell out of the US economy. That's because per-unit profits on full-size trucks are skyrocketing, outpacing the industry's average price increases by more than double since 2005. According to data from Edmunds, the average transaction price of a full-size pickup is now $39,915 - a heady increase over the $31,059 average price in 2005 - a gain of over 8 percent after inflation is factored in.
Just how important are trucks to automakers' bottom lines? Automotive News quotes a Morgan Stanley analyst as saying the Ford F-Series is responsible for 90 percent of the company's 2012 profits, and General Motors isn't far behind, with the Chevrolet Silverado and GMC Sierra twins chipping in about two-thirds of the automaker's earnings.
Automotive News points out that Detroit's automakers now have the money to invest in modernizing their full-size truck offerings, in part because they don't have the same overhead and legacy costs that pushed General Motors and Chrysler into bankruptcy. Certainly, the pickup segment has seen a lot of innovations as of late, including turbocharged V6s, coil-spring rear suspensions and active aero. Those improvements in important areas like fuel economy and ride comfort have given existing pickup buyers new reasons to upgrade. In addition, automakers are piling on the tech and luxury goodies, creating more and more high-content, high-profit models like the Ford F-150 King Ranch, Ram 1500 Laramie Longhorn and Chevrolet Silverado High Country (shown).