2013 Jeep Wrangler Unlimited - Custom One Of A Kind Wrangler Unlimited! on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

New Barracuda, Grand Cherokee Trackhawk coming soon

As we write this, Fiat Chrysler Automobiles is conducting a major dealership event in sunny Las Vegas. New vehicles are being announced, redesigned offerings are being teased, and promises are being made to the sprawling company's dealer body. And, as all these announcements are meant to be tip-top secret, they're leaking out left, right, and center. Naturally. FCA is telling its dealers all of the vehicles shown at the Vegas gala will be in showrooms within 12 to 24 months, and that the product offensive will include at least 30 new or significantly refreshed models. Some of those we've known about since FCA boss Sergio Marchionne unveiled his highly ambitious five-year plan in May 2014, while we're hearing about others for the very first time. We've reached out to our sources within FCA, and will update this post as we learn more. It should be noted that while we've tried to rely on concrete sources or corroborations from multiple sources, some of the news here comes from people claiming to have been in attendance and posting in forums like Allpar and Jalopnik's Opposite Lock. Unless corroborated by a mainstream source or confirmed by our own sources within FCA, we're listing each item that comes from a forum. Have those grains of salt at the ready. Chrysler Dodge Durango-sized SUV with stow-and-go was shown. A poster on Allpar Forums claims it had a Durango's interior. New Aspen? Town and Country PHEV confirmed (again). A plug-in minivan was originally announced as part of five-year plan. No news on 200 or 300. Dodge The redesigned Charger will use the Alfa Romeo Giulia's rear-drive platform and, according Automotive News, draw inspiration from 1999's Charger concept car. We're wagering the 24-month time frame specified to dealers will move the new sedan's arrival up from 2018 to mid-2017. Jalopnik's Opposite Lock claims two new Challenger models are coming. Challenger ADR (American Drag Racer) and T/A. ADR should appeal to bracket racers and is more powerful than the SRT Hellcat, while T/A is for track rats, just like Viper T/A. Automotive News claims the legendary Barracuda nameplate will be revived as a Dodge. The Barracuda will be smaller than Challenger, offered as both a coupe and a convertible. Allpar claims it will feature modern styling. A Dodge Durango SRT was announced with 6.4-liter Hemi V8 and rear-drive. Sources within FCA confirmed its arrival with Autoblog. Apparently, dealers were shown an example in B5 Blue.

Chrysler investing $20M in Toledo plant to support 9-speed auto production

In 2011, Chrysler announced a $72-million investment in its Toledo Machining Plant to modernize production of the eight- and nine-speed torque-converters for automatic transmissions made there. That upgrade work won't be finished until Q3 of this year, but Chrysler has already announced a further $19.6-million investment to increase production capacity for the nine-speeders.
The extra units will be necessary because the nine-speed transmission they'll be mated to is going into three popular models: it will debut on the 2014 Jeep Cherokee, then go into the Chrysler 200 and Dodge Dart. The company predicted that this year alone it would sell 200,000 units equipped with the nine-speed tranny, and it is spending some $374 million in addition to the investment in Toledo to upgrade production capacity for it.
The work attached to this new investment won't begin until Q3 of 2014, and it will be finished by the end of that year. There's a press release below with all the details.