on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Detroit 3 small cars lay an egg in latest Consumer Reports reliability study

Consumer Reports has released its Annual Auto Reliability Survey and the results are, in a word, interesting. While we already covered the score-damaging effects of infotainment systems, there's another big angle to the data that's getting some attention - the utterly dismal scores of the Detroit Three's small car offerings.
The turbocharged Dodge Dart and Chevrolet Cruze, as well as the Ford Fiesta were their respective brands' lowest-scoring models, a stat that's made worse by the fact that the American automakers finished 25th, 21st and 23rd, respectively.
That's not acceptable for The Detroit Free Press' auto critic, Mark Phelan, who has penned a scathing critique of the D3's small car reliability scores, arguing that GM, Ford and Chrysler are "out of excuses."

FCA revises Renault merger offer in a bid to persuade French government

PARIS – Fiat Chrysler is discussing a Renault special dividend and stronger job guarantees in a bid to persuade the French government to back its proposed merger between the carmakers, sources close to the discussions said. The improved offer, if formalized and accepted, would also see the combined company's operations headquartered in France and the French state granted a seat on its board, two people with knowledge of the matter told Reuters on Sunday. FCA spokeswoman Shawn Morgan declined to comment. The French government, Renault's biggest shareholder with a 15 percent stake, also declined to comment. A Renault spokesman did not return calls and messages seeking comment. Italian-American FCA is engaged in intensive discussions with Renault and the French government over the $35 billion merger proposal it pitched last Monday to create the world's third-biggest carmaker. The concessions being discussed are not definitive and depend on other aspects of an emerging compromise deal, both sources cautioned. They nonetheless increase the chances that the merger plan will be approved by Renault's board, on which the French state has two seats. The board meets again on Tuesday. Some analysts and French industry leaders had voiced doubts about the 5 billion euros ($5.6 billion) in claimed cost and investment savings, and whether the proposal represents a fair deal for Renault shareholders. A Renault dividend would improve the valuation in their favor, balancing a 2.5 billion euro proposed dividend to FCA shareholders. The sources did not elaborate on the potential size of a Renault payout. The merger plan presented on Monday would see the two carmakers acquired by a listed Dutch holding company whose ownership would be split equally between current FCA and Renault shareholders, after special dividend payments. FCA had proposed locating the combined group's operational head office in a neutral city, most likely London, but has now indicated readiness to base it in the greater Paris area, meeting a key French government demand, both sources said. The French government is also likely to be granted a seat on the board to reflect its 7.5 percent stake in the merged company, the people said. Nissan, whose matching 15 percent stake in its French alliance partner will also be diluted to 7.5 percent of the new group, receives a board seat under the plan unveiled on May 27.