2003 Jeep Grand Cherokee Laredo on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Fires, deaths continue after Jeep fuel tank recall

As Kayla White slowed her SUV behind two other cars to exit a suburban Detroit freeway on Veterans Day, it was rammed from behind by a Cadillac STS. Her red 2003 Jeep Liberty bounced off a Nissan in front of it, rolled onto its side and exploded in flames. Other drivers ran to help but were forced back by the heat. Firefighters arrived in just three minutes but were too late. White, a 23-year-old restaurant hostess who was eight months pregnant, died of burns and smoke inhalation. White is one of more than 70 people killed in fires involving older Jeeps with plastic fuel tanks mounted behind the rear axle. Fiat Chrysler, which makes Jeeps, recalled 1.56 million of them in June 2013 under pressure from US safety regulators. But only 12 percent of the SUVs have been repaired in the 18 months since the recall, a much slower pace than usual. And White's Jeep was not among those fixed. Last week, prosecutors charged the Cadillac driver with committing a moving violation that caused a death. But safety advocates and the lawyer for White's family say the blame belongs as much, if not more, on Chrysler and an auto-industry safety system that moves too slowly to prevent tragedy. The rear-mounted tanks have little structure to protect them if struck from behind, making them susceptible to punctures and fires. Moving the gas tank in front of the axle would be expensive and difficult. So Chrysler's remedy involved installing trailer hitches on the rear of the Jeeps as an extra layer of protection. Government testing showed the hitches protected the tanks in crashes up to 40 mph when stationary Jeeps were hit from behind. But at higher speeds, they wouldn't help. White tried to get the repair done a few weeks before her death but was told by a Jeep dealer that parts weren't available, according to Gerald Thurswell, her family's lawyer. He wouldn't identify the dealership, and his contention could not be independently verified by The Associated Press. Thurswell contends the gas tank ruptured, spilling fuel that touched off the fire. A Chrysler spokesman expressed sympathy to White's family but said the company had no written proof that she asked a dealer about the recall. Two crash reconstruction experts interviewed by the AP say gas wouldn't have spilled from White's Jeep if the tank had been mounted in front of the rear axle. Both say a hitch might have prevented the tank from being damaged, but because both vehicles were in motion, neither expert could say for sure.

Sunday Drive: Variety is the spice of life

If there's any one new vehicle the entire world is anxiously waiting for, it's the Jeep Wrangler. Yes, of course the iconic off-roader has a loyal following here in America, but you could plop a Wrangler pretty much anywhere on the globe and everybody will know what it is. Put simply, the redesigned 2018 Jeep Wrangler JL has big, muddy shoes to fill, and the readers of Autoblog are just as interested in the Wrangler's rebirth as anyone else. Moving along, we were fortunate enough last week to spend a bit of time in nearly every version of the venerable Volkswagen Golf all in one day. There isn't a Golf we don't like, but there's one, easily identifiable by its three-digit name, that stands above all the rest: GTI. We think it's the best Golf you can buy, even if there's an R-badged variant that slots above the GTI in VW hierarchy. Rounding out our recap are three vehicles that could hardly be more different. The 2019 GMC Sierra, which was seen wearing pretty light camouflage, is a truck. The Lamborghini Terzo Millennio – which isn't going to go on sale, ever, at any price – is a conceptual supercar. And the Honda CB1000R is a retro-themed naked standard motorcycle. Variety really is the spice of life. 2018 Jeep Wrangler spy shot mega gallery Driving nearly every VW Golf: Base, GTI, R, Alltrack — here's what we learned 2019 GMC Sierra spied sporting just a thin wrapping The Lamborghini Terzo Millennio is a brutally fantastic EV supercar concept Honda unveils 2 new motorcycles, including retro-flavored CB1000R Image Credit: Brian Williams GMC Honda Jeep Lamborghini Volkswagen Technology Truck Convertible Crossover Hatchback SUV Performance sunday drive vw golf gti lamborghini terzo millennio