1965 Chrysler Newport Convertible on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Suppliers love Toyota and Honda: Why that matters to you

You might think that a survey of automotive suppliers and their relationship with OEMs is the automotive equivalent of nerd prom. In some ways that's what the North American Automotive OEM-Supplier Working Relations Index (WRI) is. The study, the 17th annual conducted by Planning Perspectives Inc., is based on input from 652 salespeople from 108 Tier One suppliers, or, PPI points out, 40 of the top 50 automotive suppliers in North America. Suppliers to General Motors, Ford, FCA, Toyota, Honda, and Nissan. But the results have consequences in terms of tens of millions of dollars for OEMs - and in the quality, technology, and cost of the next vehicle you buy. There are a couple of ways to look at the results of the WRI. One is, "So what else is new?" And the other is, "Damn! How did that happen?" The study looks at five relationship areas — OEM Supplier Relationship; OEM Communication; OEM Help; OEM Hindrance; Supplier Profit Opportunity — within six purchasing areas — Body-in-White; Chassis; Electrical/Electronics; Exterior; Interior; Powertrain. In the overall rankings, Toyota is on top for the 15 th time in 17 years, with a score of 328. Honda, the only company to best Toyota (in 2009 and 2010), comes in second, at 319. Those two companies, explains John Henke, president of PPI, have collaborative working arrangements with colleagues and suppliers alike built into the very fabric of their cultures. This, however, is not a situation where one can readily conclude it is about "Japanese companies," because the third company with headquarters on the island of Honshu, Nissan, came in dead last. This is the "How did that happen?" portion. The Nissan score of 203 puts it 125 points behind Toyota. There hasn't been a number that low since the then-Chrysler Corp. scored 187 in 2010, when the company was clawing its way out of the recession. Clearly, the suppliers don't feel particularly engaged by the buyers at Nissan. Henke explains that whether a company does well or not on the WRI is rather simple. All people do things based on what they're measured on. "If you're measured on taking 10% out of your annual buy, you immediately know how to do it. But if you're also measured on improving relations, suddenly there is a new dynamic as to what you can do to achieve both.

Hellcrate 6.2-liter V8 delivers plug-and-play Hellcat hype to SEMA

SEMA just provided another entry for the folder marked "What A Time To Be Alive," with Mopar's announcement of the "Hellcrate" 6.2-liter supercharged Crate HEMI engine. Enthusiasts have been desperate to upgrade their vintage rides with the woozy thrills provided by Dodge's Hellcat motor, so Mopar answered. The Hellcrate engine assembly ships in plug-and-play configuration, in specially designed packaging with "Hellcrate" logos. The assembly sells separately from the Hellcrate engine kit, the kit adding a powertrain control module, power distribution center, engine wiring harness, chassis harness, accelerator pedal, ground jumper, oxygen sensors, charge air temperature sensors, and fuel pump control module. The PCM comes programmed with the production-car engine's 707 horsepower and 650 pound-feet of torque. An optional front-end accessory drive kit contributes peripherals like alternator, power steering pump, belts, and pulleys. Don't bother trying to lash up a sleeper 1997 Chrysler Sebring, though; Mopar tuned the Hellcrate for pre-1976 vehicles and manual transmissions. The engine assembly retails for an MSRP of $19,530, and the kit wants a further $2,195. Mopar didn't announce pricing for the accessory drive kit. The engine and kit come with a three-year, unlimited-mileage warranty when bought together. The Mopar Hemi Crate website will be happy to take your orders as of now. For help envisioning the possibilities, stop by Fiat Chrysler's 15,345-square-foot SEMA booth to check out the Limelight Green, Hellcrate-powered 1970 Plymouth Superbird clone worked up by Mark Worman of Velocity's " Graveyard Carz." While you're there you might as well peep Worman's encore, a 1968 Plymouth GTX stuffed with Mopar's 392 Crate HEMI in place of the original 440 big block, and the 1937 Dodge pickup that swallowed a Mopar 345 Crate HEMI. Mopar's come a long way from its original product: antifreeze products. Tomorrow it'll be Jeep's turn to ring the SEMA bells, once the noise dies down from the Mopar-jacked Wrangler Switchback, CJ66 and Jeep Shortcut. You can watch the brand's presentation online at 7:26 p.m. ET/4:26 p.m. PT. Until then, we're going to work the angles on a Hellcrate-powered Plymouth Volare. The sedan, naturally. Because we're practical. Related Video: This content is hosted by a third party. To view it, please update your privacy preferences. Manage Settings.