2009 Jeep Commander Rwd 4dr Sport on 2040-cars

Auto blog

Wrangler Pickup, Triumph Fined, Cherokee Production Moves | Autoblog Minute

"Autoblog senior editor Greg Migliore reports on highlights from the week in automotive news. " UAW/Unions Jeep Autoblog Minute Videos Original Video FCA recap

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Sunday Drive: Spying an automotive future of performance

I spy, with my little eye ... the future of the automotive world here in the United States. That pretty much sums up this week's Sunday Drive, in which we pull out the most popular stories on Autoblog of the previous week and try to draw some sort of conclusion as to what binds them all together. This week, it's spy shots, starting with one of the biggest and baddest muscle cars the world has ever seen: the Dodge Challenger Hellcat. The Hellish coupe gets a new hood for 2019 with dual scoops, but that's about the only meaningful change for the new model year. No matter. As long as it's packing 700-plus horsepower under those two hood scoops, all will be right with the world. Moving on, we take keep the performance angle but move it from the street to the dirt with a new version of the Chevy Colorado ZR2 that we think is probably called the Bison. We think it'll keep the high-tech suspension bits of the regular ZR2, but add expedition gear that may include a snorkel and a winch. Which, if true, is pretty dang cool. Keeping the truck theme is the 2019 GMC Sierra. There's nothing particularly noteworthy about the trim level in which the truck was spied, and that's what makes this specific example interesting. Base-model trucks almost never get much attention, but they sell in droves to workers who need an honest-to-goodness truck for work or play and don't care about bells, whistles, or massive chrome badges. And finally we have the 2018 Jeep Wrangler, which is on fire on the sales floor right now. But those are all V6-powered Wranglers flying off the showroom floor. Soon, a turbocharged four-cylinder engine option will become available, and now we know that it will return up to 23 miles per gallon in the city and 25 on the highway. That makes it the most fuel efficient Wrangler that Jeep has ever sold. As always, stay tuned to Autoblog this week for all the automotive news that's fit to publish. 2019 Dodge Challenger Hellcat with twin-scoop hood spied with no camouflage Chevy Colorado ZR2 Bison caught testing 2019 GMC Sierra 1500 spied in base trim level 2018 Jeep Wrangler four-cylinder fuel economy revealed Spy Photos Chevrolet Dodge GMC Jeep Truck Coupe SUV Off-Road Vehicles Performance dodge challenger srt hellcat sunday drive