1999 Jeep Grand Cherokee on 2040-cars

Auto blog

Supplier says Jeep Cherokee hack only affects FCA cars

Harman doesn't think that drivers need to worry about any further hacks of its products. The company supplies FCA's Uconnect infotainment system where a software vulnerability is responsible for a 1.4-million vehicle recall. "This experimental hack is unique to Chrysler," Harman CEO Dinesh Paliwal said to Automotive News. "This does not exist, to our assessment, in any other vehicle." The reason that the company wouldn't be involved is that automakers aren't simply plugging in the existing infotainment systems into new vehicles. According to Paliwal, Harman supplies the unit, but FCA and other automakers are able to make additional modifications for their vehicles. The National Highway Traffic Safety Administration has also recently taken up the question of broader software vulnerabilities in Harman's products. On July 29, the agency began investigating the company to check for similarities between Uconnect and the infotainment systems supplied to other automakers. The Jeep hack became national news when two researchers were remotely able to take control of a Cherokee. The vulnerability in the cellular connection even gave control over the brakes. "Once people get in the car and get into the CAN bus, then you can start to mimic and mess up many, many things in the car," Paliwal said to Automotive News. Politicians immediately responded with legislation to create federal standards in hopes of protecting drivers better. NHTSA also opened an investigation to make sure the automaker's software update actually solved the problem. Related Video:

What's really going on with the 2014 Jeep Cherokee's transmission issues?

On September 23, Automotive News reported that Chrysler had idled the second shift workers it hired just five weeks prior at its Toledo Assembly Complex to build the 2014 Jeep Cherokee. At the time, Chrysler said it had "built the critical number of vehicles we need to stock dealerships once containment is released" and did not want "to put additional strain on our logistics partners ... upon release." That reasoning was not only unusual, it didn't seem to make sense.
It appears the center of the nine-speed issue is software, not hardware.
That same day, the Detroit News ran a piece claiming workers at the Toledo factory said the halt was due to issues with the Cherokee's transmission. It put the number of already-built Cherokees needing fixes at 1,000 and said that some of the workers not laid off had been instructed "to take the Jeep on long test-drives." That made more sense. Three days later, on September 26, Automotive News reported that the 500 workers laid off had been reinstated, with engineers "speeding repairs on the SUV's powertrain software." The AN piece didn't put a number on how many units are being fixed, but it did say that 12,000 have been built and are awaiting delivery to dealers. The best it could say about when dealers will get them, however, is that "progress on a fix is being made. It's unclear when shipments to dealers will start."

Jeep hackers return to take over your steering wheel

Last year, security researchers Charlie Miller and Chris Valasek made headlines by remotely hacking a Jeep, killing the transmission and applying the brakes while Wired reporter Andy Greenberg was behind the wheel and driving in traffic. The hack led to a 1.4 million-vehicle recall for Fiat Chrysler and new jobs at Uber's Advanced Technology Center for Miller and Valasek. Despite the cushy new gigs, the two of them apparently aren't done hacking Jeep Cherokees for sport. In their latest exploit, the pair can gain even more control over a vehicle, but it would also be extremely difficult to pull off in a real-world setting. Here's the harrowing part first: Miller and Valasek can do more than just apply the brakes at low speed or cut the transmission this time around. Now they can turn on the parking brake, mess with the cruise control and hijack the auto-parking system to jerk the steering wheel a dangerous 180 degrees while the car is in motion. It looks about as frightening as it sounds: This content is hosted by a third party. To view it, please update your privacy preferences. Manage Settings. Although it's not hard to see how that would make for a very terrifying drive, there's a big grain of salt that comes along with it: Miller and Valasek actually used the same model 2014 Jeep Cherokee as the original demonstration, but without the software patch applied. Or, as Wired put it, "imagine an alternate reality," where a fix had never been made. Unlike before, the latest hack requires a physical connection plugging their laptop into the Jeep's OBD-II diagnostic port under the dash. The team also had to update the Jeep with their own firmware to disable some of the car's built-in safety checks before they could get much control. In other words: In order to get hacked, Jeep owners would first need to roll back their car's firmware to an older version, invite someone to remove security features and then also let them ride shotgun with a computer. Or, as Engadget's resident security expert Violet Blue wrote on Twitter, it's sort of a non-threat. This content is hosted by a third party. To view it, please update your privacy preferences. Manage Settings. That said, The Verge points out that it may still be possible to exploit OBD-connected wireless dongles like the Metromile Tag, Automatic Link or other similar devices currently marketed by insurance companies.