2008 Jeep Patriot Limited Sport Utility 4-door 2.4l on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

FCA issuing software update for 1.4M vehicles to prevent hacking

In the wake of a Jeep Cherokee being hacked remotely while on the road through its Uconnect infotainment system, FCA US is now issuing a software update for 1.4 million vehicles in the United States. Affected customers will receive a USB stick in the mail with the improved version; owners can check this website to see if their cars are affected. A large variety of models with FCA's 8.4-inch touchscreen infotainment system are affected. They include the 2015 Chrysler 200, 2015 Chrysler 300, 2015 Dodge Charger, and 2015 Dodge Challenger; 2013-2015 Dodge Viper; 2013-2015 Ram 1500, 2500, and 3500; 2013-2015 Ram 3500, 4500, and 5500 chassis cab; 2014-2015 Jeep Grand Cherokee and Cherokee; and 2014-2015 Dodge Durango. According to FCA in its announcement, the new software "insulates connected vehicles from remote manipulation." As of July 23, the company also "fully tested and implemented within the cellular network" additional security to prevent access to many of a vehicle's systems. FCA US says that it's conducting this campaign out of an abundance of caution and disputes the notion that there's a defect with these vehicles. Beyond the demonstration of the hack in the Cherokee, the automaker says that it's unaware of any other reports of these attacks actually happening. Related Video: Statement: Software Update July 24, 2015 , Auburn Hills, Mich. - FCA US LLC is conducting a voluntary safety recall to update software in approximately 1,400,000 U.S. vehicles equipped with certain radios. The recall aligns with an ongoing software distribution that insulates connected vehicles from remote manipulation, which, if unauthorized, constitutes criminal action. Further, FCA US has applied network-level security measures to prevent the type of remote manipulation demonstrated in a recent media report. These measures – which required no customer or dealer actions – block remote access to certain vehicle systems and were fully tested and implemented within the cellular network on July 23, 2015. The Company is unaware of any injuries related to software exploitation, nor is it aware of any related complaints, warranty claims or accidents – independent of the media demonstration.

Compact SUV Comparison: Specs, pics and reviews of every brand's crossover

Honda CR-V vs Toyota RAV4. Chevy Equinox vs Ford Escape. Mazda CX-5 vs Subaru Forester. Whichever combinations of compact crossover SUV you're considering, there's probably a comparison test or chart out there to read. Heck, you can even create a three-car comparison yourself here at Autoblog. However, if you want a bunch of that information all in one convenient place, well, here it is. Our mega comparison of specs, features and photos of compact SUV entries from every mainstream manufacturer that sells them. That includes the 2018 Chevrolet Equinox, 2018 Ford Escape, 2018 GMC Terrain, 2018 Honda CR-V, 2018 Hyundai Tucson, 2019 Jeep Cherokee (it's already on sale with notable changes from 2018), 2018 Jeep Compass, 2018 Kia Sportage, 2018 Mazda CX-5, 2018 Mitsubishi Eclipse Cross (none of Mitsu's SUVs are perfect fits for this segment, so we deemed the MEC the most competitive fit), 2018 Nissan Rogue, 2018 Subaru Forester, 2018 Toyota RAV4 and 2018 Volkswagen Tiguan. We can update this comparison as more information about 2019 models is released, most notably the Forester and RAV4. Now, there are certainly some models that are smaller (Nissan Rogue Sport) or larger (Kia Sorento) that could also be considered, but we figured it was wise to stick with those in this sweet spot of comparable size and price. We also included links to Autoblog reviews, buying guides and smaller comparisons. Engines and Transmissions With rare exception, this segment features four-cylinder power. Sometimes it's turbocharged, often its not, but standard engine outputs are generally in the same ballpark. Therefore, we'd recommend focusing on torque output, as it's what will make a difference around town or when passing, and weighing that versus fuel economy (the Chevy Equinox, GMC Terrain, Honda CR-V and Mazda CX-5 make particularly strong cases in this regard). Many drivers aren't too fond of continuously variable transmissions (CVT), either, so that's another thing to consider and note during a test drive. As you can see, several models are available with performance upgrades. Besides the Jeep Cherokee's available V6, all are more powerful turbocharged four-cylinder engines. The exception to this would be the Honda CR-V and Ford Escape, as their 1.5-liter turbo engines don't prioritize performance. Instead, they serve as overall upgrades to the base naturally aspirated engines standard on only their base trim levels (CR-V LX and Escape S).