2006 Jeep Wrangler Unlimited 4x4 4.0l Inline-6 Auto Cd A/c Clean Carfax Mint on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Fires, deaths continue after Jeep fuel tank recall

As Kayla White slowed her SUV behind two other cars to exit a suburban Detroit freeway on Veterans Day, it was rammed from behind by a Cadillac STS. Her red 2003 Jeep Liberty bounced off a Nissan in front of it, rolled onto its side and exploded in flames. Other drivers ran to help but were forced back by the heat. Firefighters arrived in just three minutes but were too late. White, a 23-year-old restaurant hostess who was eight months pregnant, died of burns and smoke inhalation. White is one of more than 70 people killed in fires involving older Jeeps with plastic fuel tanks mounted behind the rear axle. Fiat Chrysler, which makes Jeeps, recalled 1.56 million of them in June 2013 under pressure from US safety regulators. But only 12 percent of the SUVs have been repaired in the 18 months since the recall, a much slower pace than usual. And White's Jeep was not among those fixed. Last week, prosecutors charged the Cadillac driver with committing a moving violation that caused a death. But safety advocates and the lawyer for White's family say the blame belongs as much, if not more, on Chrysler and an auto-industry safety system that moves too slowly to prevent tragedy. The rear-mounted tanks have little structure to protect them if struck from behind, making them susceptible to punctures and fires. Moving the gas tank in front of the axle would be expensive and difficult. So Chrysler's remedy involved installing trailer hitches on the rear of the Jeeps as an extra layer of protection. Government testing showed the hitches protected the tanks in crashes up to 40 mph when stationary Jeeps were hit from behind. But at higher speeds, they wouldn't help. White tried to get the repair done a few weeks before her death but was told by a Jeep dealer that parts weren't available, according to Gerald Thurswell, her family's lawyer. He wouldn't identify the dealership, and his contention could not be independently verified by The Associated Press. Thurswell contends the gas tank ruptured, spilling fuel that touched off the fire. A Chrysler spokesman expressed sympathy to White's family but said the company had no written proof that she asked a dealer about the recall. Two crash reconstruction experts interviewed by the AP say gas wouldn't have spilled from White's Jeep if the tank had been mounted in front of the rear axle. Both say a hitch might have prevented the tank from being damaged, but because both vehicles were in motion, neither expert could say for sure.

Top horsepower-per-dollar cars in 2017

Bang for the buck. That quasi-scientific statistic is bandied about by motor heads everywhere from classrooms to barrooms, though the truth of the matter is that it's exceedingly complex to measure. A fair performance-per-dollar index would include something like cross-referencing MSRP (Manufacturers Suggested Retail Price) with point-to-point times on a track or driving route, which is obviously hard to do comprehensively. But, for the sheer joy of talking about cars and playing with a big spreadsheet, there's always the horsepower-per-dollar index, which is more straightforward, albeit hilariously flawed. There are vagaries even with this simple formula, of course: MSRP for vehicles can change at a moment's notice, to say nothing of the bottom-line shifting that happens with local deals or showroom negotiation. For this list we're running with the straight MSRP wherever possible, and as recently reported as we can get it. All the vehicles on this list are 2017 models, and all trims are reported where the lowest price and differing power levels intersect. Some choices were made for personal preference and some for sanity, avoiding things like all 48 trim levels of the Ford Transit, all with the same horsepower). If this list were a simple top ten, or even a top fifty, you'd be bored to tears with all the red, white and blue that is represented. Following perfectly with conventional wisdom, American cars really do lead the world where hp/$ is concerned. So, for the sake of variety (and the sheer joy of seeing a minivan 'win' one round of this thing) I've sorted out some top five and bottom five lists for broad power categories. Let's dive in. Less Than 100 Horsepower Okay, okay, this is hardly a category we'll grant you. But we've often tried to click off all the sub-100-hp cars on sale in the US, and making this list gave us an excuse. It also illustrates that none of these smallish vehicles bring cheap horsepower to the table - for that you'll need a motorcycle. The segment-leading Chevy Spark (above) asks just over $139 for each hp, and that Smart Fortwo Electric Drive has hp on sale for about the same price as its very distant family cousin, the Mercedes-Benz SL65 AMG (insert your favorite Smart joke here... we know you want to).