2015 Chrysler 200 Limited on 2040-cars

Auto blog

How to update and secure a vulnerable Chrysler Uconnect system

If you own one of the 1.4 million vehicles affected by the recent Chrysler software recall, you may want to watch this video. In it, we explain how to get the latest infotainment software loaded onto the 8.4-inch Uconnect system. The recall was a response to the findings of researchers who were able to hack into and remotely control a 2014 Jeep Cherokee through its cellular connection. Although Fiat Chrysler has worked with Sprint to plug most of the holes on the carrier side, there are still some vulnerabilities that only this latest software version can patch. Owners have three options to get the update: download it now, wait for a USB stick in the mail, or take the vehicle to an FCA dealer. Chrysler will be sending USB sticks loaded with the software update to customers. Anyone with an internet connection and a USB stick of their own with at least 4 GB capacity can speed things up by downloading the patch from the Uconnect website. We cover that process from start to finish in the video, with the final portion still applicable to those using the FCA-supplied USB stick. If after watching this you still don't want to tackle the patch yourself, you can take your vehicle to the dealer to have it done. Also note that this process is the same for all Uconnect updates, not just the one patching the exploits. Our demonstrator vehicle is a 2015 Ram 1500 pickup. The procedure should be very similar on other products with the 8.4-inch Uconnect system, with only the location of the USB port varying. Once you have the USB stick with the software on it – either after having downloaded it yourself or receiving it in the mail from Chrysler – the installation process is relatively simple. It takes about 15 minutes to perform the update; we edited out the wait in the video. To check whether or not your car's 8.4-inch Uconnect system is running the latest software, go to System Information on the touch screen's Settings page and look at Software Version. The update related to the recall is version 15.17.5. Related Video: Recalls Chrysler Dodge Jeep RAM Safety Technology Infotainment Videos Original Video hacking

Chrysler, Nissan looking into claim that their cars are industry's most hackable

A pair of cyber security experts have awarded the ignominious title of most hackable vehicles on American roads to the 2014 Jeep Cherokee, 2014 Infiniti Q50 and 2015 Cadillac Escalade.
Charlie Miller and Chris Valasek are set to release a report at the Black Hat hacking conference in Las Vegas, Automotive News reports. The two men found the Jeep, Caddy and Q50 were easiest to hack based not on actual tests with the vehicles, but a detailed analysis of systems like Bluetooth and wireless internet access - basically, anything that'd allow a hacker to remotely gain access to the vehicle's systems.
Considering this lack of hands-on testing, the pair acknowledge that "most hackable" could be a relative term - they point out that the vehicles may actually be quite secure.

Bosch fined $57.8 million by DOJ for price fixing and bid rigging

The US Department of Justice has been investigating bid rigging and price fixing among automotive parts suppliers for years, and so far the agency has leveled nearly $2.5 billion in fines against 34 companies. The latest business to be caught in this ongoing crackdown is Germany's Robert Bosch GmbH (Bosch), the world's largest independent auto component maker, and it agrees to pay a $57.8 million criminal fine to the Feds. According to the DOJ, Bosch has agreed to plead guilty to pricing fixing and bid rigging for spark plugs and oxygen sensors supplied to the former DaimlerChrysler, Ford and General Motors. The rigging is said to have occurred between January 2000 and July 2011. Bosch also allegedly played foul with starter motors sold to Volkswagen from January 2009 until at least June 2010. Bosch and other companies allegedly conspired on the pricing for bids to submit to automakers, and sold the parts at noncompetitive prices. The DOJ filed a one-count felony charge in US District Court for these actions. The company's plea is still subject to court approval, though. Bosch is only the third European company to be charged in this investigation, according to the DOJ. So far, many of the fined businesses have been from Japan, including Takata, NGK and others. Some execs have claimed price-fixing has been the standard operating procedure in the auto parts industry for a long time. Robert Bosch GmbH Agrees to Plead Guilty to Price Fixing and Bid Rigging on Automobile Parts Installed in U.S. Cars Robert Bosch GmbH, the world's largest independent parts supplier to the automotive industry, based in Gerlingen, Germany, has agreed to plead guilty and to pay a $57.8 million criminal fine for its role in a conspiracy to fix prices and rig bids for spark plugs, oxygen sensors and starter motors sold to automobile and internal combustion engine manufacturers in the United States and elsewhere, the Department of Justice announced today. According to the one-count felony charge filed today in the U.S. District Court of the Eastern District of Michigan, Bosch conspired to allocate the supply of, rig bids for, and to fix, stabilize and maintain the prices of, spark plugs and oxygen sensors sold to automobile and internal combustion engine manufacturers such as DaimlerChrysler AG, Ford Motor Company, General Motors Company and Andreas Stihl AG & Co., among others, in the United States and elsewhere.