Clean Jeep. Includes Winch, Spare Tire, Bimini Top, Soft Top And Soft Doors. Cj5 on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

May 2016: FCA wins, Ford and GM stumble on weak car volumes

The May 2016 sales numbers are in, and it looks as though FCA is getting some vindication for boldly cancelling two slow-selling car models. Meanwhile, Ford saw overall sales dip and GM's May volume took a big dive versus the same month in 2015. While Marchionne's decision to axe the Chrysler 200 and Dodge Dart has drawn criticism as being short-sighted, it's working for FCA so far. Although the Dart and 200 aren't out of production yet and no capacity has been shifted to crossover or trucks, May's numbers show that the emphasis on Jeep and Ram models makes sense right now. FCA's US sales rose 1 percent last month compared to May 2015, putting the year-to-date total at 955,186 vehicles, an increase of 6 percent compared to the same period last year. Standouts included the Jeep Renegade, Compass, and Patriot, and the Fiat 500X. Ram pickup sales were down 3 percent. And your fun fact is that Alfa Romeo sales were up precisely 10 percent, for a total of 44 4Cs sold versus 40 in the same month last year. At FoMoCo, the Ford brand took a hit to the tune of 6.4 percent from May 2015 to 2016, registering 226,190 sales last month. Lincoln showed improvement on its modest numbers, going from 9,174 to 9,807, a 6.9 percent increase. Overall, Ford was down 5.9 percent for the month to 235,997; despite the slump, year-to-date total Ford sales are up 4.2 percent to 1,112,939. Strong sellers included Escape, Expedition, F-Series, and Transit - big stuff. Most small and/or efficient models (Fiesta, Focus, Fusion, C-Max) saw sales slides. Fusion sales were also down, likely due to effects of model changeover to the freshened 2017 model. Ford has promised four new crossovers and SUVs by 2020 and if things keep trending this way the company will be able to sell them, but things could change in the next four years. GM saw the worst of it for domestic brands. Retail and fleet sales were down for each of the four divisions, with the May 2016 total dropping 18 percent to 240,450 vehicles. GM's year-to-date sales are down 5.0 percent in 2016 to 1,183,705. Both the Sierra and Silverado were down significantly, and the majority of Chevy, Buick, GMC, and Cadillac nameplates saw sales decreases, with both small cars and larger utilities included. Not even big stuff could help GM this month, it seems. We'll have more on the rest of the industry's May sales as those figures trickle in.

Key-swapping thieves steal Jeep Grand Cherokee SRT from FL dealer

Just a few weeks back, we reported on the theft of an Audi RS5 by a pair of creative thieves who managed to swipe the car's keys when the salesperson stepped away from their desk. Now, a Florida dealership is missing a Jeep Grand Cherokee SRT8 after some crooks switched the Jeep's keys with an identical, non-functioning set.
According to the report from local NBC affiliate WPTV, the men went in and spoke to a dealer about the Jeep. They walked outside, took a look at it, started it up and in the process managed to switch out the fobs. After doing their time with the salesperson, the thieves walked back out to the car, got in and drove away.
"I mean obviously, the way it was done, I think that they were professionals and they knew what they were doing," said Arrigo Jeep General Manager Joe Tufo. "The fact that they did it in broad daylight and switched the key fob and it was like it was nothing. That's what makes it unique," he added.