13 300c Srt Design Navigation Sunroof Leather Remote Start 1-owner Clean Carfax on 2040-cars

Auto blog

The problem with how automakers confront hacking threats

More than anyone, Chris Valasek and Charlie Miller are responsible for alerting Americans to the hacking perils awaiting them in their modern-day cars. In 2013, the pair of cyber-security researchers followed in the footsteps of academics at the University of Cal-San Diego and University of Washington, demonstrating it was possible to hack and control cars. Last summer, their research established which vehicles contained inherent security weaknesses. In recent weeks, their latest findings have underscored the far-reaching danger of automotive security breaches. From the comfort of his Pittsburgh home, Valasek exploited a flaw in the cellular connection of a Jeep Cherokee and commandeered control as Miller drove along a St. Louis highway. Remote access. No prior tampering with the vehicle. An industry's nightmare. As a result of their work, FCA US recalled 1.4 million cars, improving safety for millions of motorists. For now, Valasek and Miller are at the forefront of their profession. In a few months, they could be out of jobs. Rather than embrace the skills of software and security experts in confronting the unforeseen downside of connectivity in cars, automakers have been doing their best to stifle independent cyber-security research. Lost in the analysis of the Jeep Cherokee vulnerabilities is the possibility this could be the last study of its kind. In September or October, the U.S. Copyright Office will issue a key ruling that could prevent third-party researchers like Valasek and Miller from accessing the components they need to conduct experiments on vehicles. Researchers have asked for an exemption in the Digital Millennial Copyright Act that would preserve their right to analyze cars, but automakers have opposed that exemption, claiming the software that runs almost every conceivable vehicle function is proprietary. Further, their attorneys have argued the complexity of the software has evolved to a point where safety and security risks arise when third parties start monkeying with the code. Their message on cyber security is, as it has been for years, that they know their products better than anyone else and that it's dangerous for others to meddle with them. But in precise terms, the Jeep Cherokee problems show this is not the case. Valasek and Miller discovered the problem, a security hole in the Sprint cellular connection to the UConnect infotainment system, not industry insiders.

FCA US under-reported death and injury claims to NHTSA

The National Highway Traffic Safety Administration says FCA US significantly under-reported death and injury claims due to flaws in its early warning system. The government first discovered a potential problem with the automaker's reporting in late July, and FCA US has been investigating the issue since. NHTSA claims that the problem appears linked to the way the company gathers and reports safety information. The agency is still investigating how serious the flaws are and their causes. "This represents a significant failure to meet a manufacturer's safety responsibilities," NHTSA Administrator Mark Rosekind.Rosekind said in a statement. FCA US admits that it "identified deficiencies" in the reporting, but in a statement the company said that it notified NHTSA of the issue immediately. The company promised that it is taking this problem "extremely seriously" and pledged to remedy the situation. In late July, FCA US was hit with a potential $105-million fine by NHTSA for the way the automaker conducted some recalls. As part of that agreement, the company also consented to more rigorous oversight by safety regulators in the future and a buy-back of some affected vehicles. Other automakers have been punished for failing to submit EWR data. Honda incurred a $70 million fine in January from NHTSA for missing 1,729 incidents over 11 years. Ferrari had to pay $3.5 million in 2014 for not sending them in for three years. Statement from NHTSA Administrator, Mark Rosekind, on Fiat Chrysler Automobiles' under-reported discrepancy in FCA's Early Warning Report data September 29, 2015 "In late July, NHTSA notified Fiat Chrysler Automobiles of an apparent discrepancy in FCA's Early Warning Report data. FCA has informed NHTSA that in investigating that discrepancy, it has found significant under-reported notices and claims of deaths, injuries and other information required as part of the Early Warning Reporting system. Preliminary information suggests that this under-reporting is the result of a number of problems with FCA's systems for gathering and reporting EWR data. This represents a significant failure to meet a manufacturer's safety responsibilities. NHTSA will take appropriate action after gathering additional information on the scope and causes of this failure." – Mark Rosekind, NHTSA Administrator. Statement: TREAD Reporting September 29, 2015 , Auburn Hills, Mich.

Feds fretting over remote hack of Jeep Cherokee

A cyber-security gap that allowed for the remote hacking of a Jeep Cherokee has federal officials concerned. An associate administrator with the National Highway Traffic Safety Administration said Thursday that news of the breach conducted by researchers Chris Valasek and Charlie Miller had "floated around the entire federal government." "The Homeland Security folks sent out broadcasts that, 'Here's an issue that needs to be addressed,'" said Nathaniel Beuse, an associate administrator with the National Highway Traffic Safety Administration. Valasek and Miller commandeered remote control of the Cherokee through a security flaw in the cellular connection to the car's Uconnect infotainment system. From his Pittsburgh home, Valasek manipulated critical safety inputs, such as transmission function, on Miller's Jeep as he drove along a highway near St. Louis, MO. The scope of the remote breach is believed to be the first of its kind. The prominent cyber-security researchers needed no prior access to the vehicle to perform the hack, and the scope of the remote breach is believed to be the first of its kind. A NHTSA spokesperson said the agency's cyber-security staff members are "putting their expertise to work assessing this threat and the response, and we will take action if we determine it's necessary to protect safety." A Homeland Security spokesperson referred questions about the hack to Chrysler. Fiat Chrysler Automobiles has already been the subject of a federal hearing this month, in which officials scrutinized whether the company had adequately fixed recalled vehicles and repeatedly failed to notify the government about defects. But cyber-security concerns are a new and different species for the regulatory agency. Only hours before the Jeep hack was announced by Wired magazine earlier this week, NHTSA administrator Dr. Mark Rosekind said hacking vulnerabilities were a threat to privacy, safety, and the public's trust with new connected and autonomous technologies that allow vehicles to communicate. NHTSA outlined its response to the cyber-security challenges facing the industry in a report issued Tuesday. In it, the agency summarized its best practices for thwarting attacks and said it will analyze possible real-time infiltration responses. But the agency's ability to handle hackers may only go so far.