2009 Chrysler Town & Country Lx on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Fiat's Marchionne ponders Chrysler going public again

Fiat boss Sergio Marchionne says there's a real possibility that its majority-owned Chrysler Group may eventually return to the ranks of publicly traded companies. According to Bloomberg, the Fiat and Chrysler CEO gives that a "50 percent chance" of happening, but he doesn't appear to favor that scenario: "My preference is to be one single company... we belong together."
Marchionne has seemingly been operating under the assumption that Fiat will eventually own all of Chrysler, working to buy up the shares it doesn't own and looking to buy out the retiree trust fund that it shares Chrysler ownership with. Certainly, Chrysler going independent again would be increasingly difficult, as the companies continue to blend products, technologies, facilities and staffing, a trend started immediately after the Italian automaker became custodian of the brand following Chrysler's bankruptcy in 2009.
Marchionne's remarks to the media came at Chrysler's Kokomo, Indiana plant, where he was on hand to announce a major investment at four facilities in the state to build eight- and nine-speed automatic transmissions.

Chrysler 300 SRT dead in US, updated elsewhere

The Chrysler 300 SRT is officially dead here in the US, but the sedan's big V8 continues to rumble in a handful of other markets around the world. In fact, the model just received a refresh abroad to fit the standard version's recently updated styling. According to Car and Driver, customers in countries like Australia, Japan, South Africa, South Korea, and a few other places can stop by their local Chrysler dealer soon to pick up some of this imported muscle. For the refresh, the 300 SRT's 6.4-liter V8 remains under the hood producing 470 horsepower, and it's now hooked up to an eight-speed automatic gearbox. The styling also gets some updates like LED lights in the lower air dam, a reshaped mesh grille with the SRT logo, and a simplified design for the taillights. If it seems odd to go to the work of updating the 300 SRT's styling, while killing off the model in the US, the reason has to do with FCA's brand strategy here. Dodge is supposed to be the automaker's performance marque in America, and according to Car and Driver, Jeep gets to keep SRT branding on the Grand Cherokee because of the brawny SUV's popularity. That might not last much longer, because reports suggest a Hellcat-powered Trackhawk is on the way. Related Video: