13 Compass Latitude 4 Cylinder 4x4 Heated Seats Bluetooth Video 1 Owner 3k Miles on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Updated 2014 Jeep Grand Cherokee ace same controversial moose test it failed in 2012 [w/video]

Some background: one of the more scandalous international incidents of he-said/he-said from 2012 was when Swedish magazine Teknikens Varld put the Jeep Grand Cherokee through its "moose (or elk) test" and reported that the SUV nearly rolled over. That lead to a whole lot of accusations and rebuttals: more than one website and Chrysler's own blog reported that the Jeep was overloaded; Chrysler said Teknikens printed the magazine then let Chrysler respond, Teknikens answered all of the charges in a lengthy post and said Chrysler was given a chance to comment before it went to print; when Chrysler sent investigators to oversee the test and the Jeep didn't go up on two wheels as it did in the first test, furthermore all four wheels stayed on the ground when Auto Motor und Sport tested a Grand Cherokee in the same way.
Teknikens then re-ran the test with a new vehicle and said it's been doing this test since the 1970s, uses the loading information that Chrysler provides to the Swedish motor authority and the previous Grand Cherokee passed with no problem. In the second test, the Jeep failed again, then it gave Chrysler engineers access to the car's electronics and ran the test again. In that second round the Grand Cherokee didn't repeat the lurid two-wheel action, but in eleven runs it blew out front left tire seven times. Chrysler still objects to the results of all of those tests and maintains that vehicle was safe.
The 2014 Grand Cherokee was given its shot at the gauntlet in the latest round of moose tests, and Teknikens Varld reports that it passed without any problem at all, its stability control working perfectly, controlling motion at low speeds and all the way up to 44.1 miles per hour. You can watch the video of the new test and read the press release from the magazine on the updated Grand Cherokee below.

8 cars we're most looking forward to driving in 2015

Now that 2014 is officially in the books, it's time to look ahead. And following our list of the cars we liked best last year, we're now setting our sights at the hot new metal that's coming our way in 2015. Some of these, we've already seen. And some are still set to debut during the 2015 auto show season. But these are the machines that keep us going – the things on the horizon that we're particularly stoked to drive, and drive hard. Jeep Renegade Not the Chevrolet Corvette Z06. Not the Ford Mustang GT350. Not the new John Cooper Works Mini. Nope, I'm looking forward to the adorable, trail-rated Jeep Renegade. And that's because I really, really, really like our long-term Jeep Cherokee Trailhawk. I do not, however, care too much for the Cherokee's looks, and I really don't like its $38,059 price tag. The Renegade Trailhawk, meanwhile, promises much of the same rough-and-tumble character as its big brother, but at what we expect will be a more reasonable price (I'm personally wagering on the baby Jeep's off-road model starting at no more than $23,000). With a 2.4-liter four-cylinder and a nine-speed automatic, it should also be a bit easier to fill than the V6-powered Cherokee. Also, I can't help but love the way the Renegade looks. It's like someone took a Wrangler, squished it by 50 percent and then handed it off to George Clinton for a healthy dose of funk. The interior, with its bright, expressive trims and color schemes should also be a really nice place to spend some time. I'll be attending the Renegade's launch later this month, so I'll have a much shorter wait than my colleagues. Here's hoping the baby Jeep lives up to my expectations. – Brandon Turkus Associate Editor Mazda MX-5 Miata Here's an uncomfortable truth: I'd rather spend a day driving a properly sorted Mazda MX-5 Miata of any generation on a winding road than I would nearly any other vehicle, regardless of power, price or prestige. It's not just that I prize top-down driving and enjoy the Miata's small size because it gives me more road to play with. I just find there's more motoring joy to be had with high-fidelity handling and an uncorrupted car-to-driver communication loop than I do with face-distorting power or grip – let alone valet-stand gravitas. But perhaps most of all, I love Miatas because they can deliver that level of feedback and driver reward at modest speeds that won't put the locals on edge or endanger lives – you can use more of the car more of the time.