1981 Jeep Scrambler Cj-8 Rockcrawler Rock Crawler on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

FCA to appeal reduced judgment in Georgia Jeep case

FCA is appealing the $40 million verdict against it in a case in Georgia where a four-year-old boy died in a fire in a Jeep Grand Cherokee, according to The Detroit News. The jury originally awarded the child's family $150 million, but the judge decided to significantly to reduce the amount based on other precedents. The automaker has been considering further legal options since the decision was announced in July. The boy's death happened in 2012 when he was riding in a Grand Cherokee. The vehicle was rear-ended, and the fuel tank burst, causing a fire. This is the same issue that led to a recall of millions of the SUVs and a recent agreement with the US government from FCA to pay to get them fixed. In the original ruling, the jury said that the automaker was 99 percent responsible for the fatality and didn't adequately warn owners. It asked the company to pay $120 million for wrongful death and $30 million for his pain and suffering. FCA countered that the Jeeps met the safety standards of the time they were made. FCA requested that the jury's award be reduced in May calling the amount "grossly excessive." If the family didn't agree to a lower amount, the company also threatened to seek a new trial. Among the arguments was that $30 million was too much for the child's one minute of suffering. The parents did accept the judge's adjusted figure, though.

2015 Jeep Renegade leaks out ahead of Geneva debut

Meet the Renegade - Jeep's new baby crossover that's set to debut at the Geneva Motor Show this week. The folks at Jalopnik got their hands on a small batch of photos of the new little cutie, showing what appears to be a Trailhawk (read: trail-rated) version, as well as a more civilian-spec Renegade, complete with a new removable roof system, reportedly called My Sky.
Details are slim, though in addition to the exterior images, one photo of the interior has also been leaked, showing what appears to be a small, yet functional (and nicely appointed) cabin. Early reports suggested that the new small Jeep would be based on the Fiat 500L platform, though Jalopnik rightly points out that the Renegade looks an awful lot like the Panda 4x4. Regardless, there's still likely some 500L bones under there, and we'll know more once the official details are revealed in the very near future.
Head over to Jalopnik for more shots of the cute little Renegade, and stay tuned for more information as it becomes available.