2008 Chrysler Town & Country Touring on 2040-cars

Auto blog

The problem with how automakers confront hacking threats

More than anyone, Chris Valasek and Charlie Miller are responsible for alerting Americans to the hacking perils awaiting them in their modern-day cars. In 2013, the pair of cyber-security researchers followed in the footsteps of academics at the University of Cal-San Diego and University of Washington, demonstrating it was possible to hack and control cars. Last summer, their research established which vehicles contained inherent security weaknesses. In recent weeks, their latest findings have underscored the far-reaching danger of automotive security breaches. From the comfort of his Pittsburgh home, Valasek exploited a flaw in the cellular connection of a Jeep Cherokee and commandeered control as Miller drove along a St. Louis highway. Remote access. No prior tampering with the vehicle. An industry's nightmare. As a result of their work, FCA US recalled 1.4 million cars, improving safety for millions of motorists. For now, Valasek and Miller are at the forefront of their profession. In a few months, they could be out of jobs. Rather than embrace the skills of software and security experts in confronting the unforeseen downside of connectivity in cars, automakers have been doing their best to stifle independent cyber-security research. Lost in the analysis of the Jeep Cherokee vulnerabilities is the possibility this could be the last study of its kind. In September or October, the U.S. Copyright Office will issue a key ruling that could prevent third-party researchers like Valasek and Miller from accessing the components they need to conduct experiments on vehicles. Researchers have asked for an exemption in the Digital Millennial Copyright Act that would preserve their right to analyze cars, but automakers have opposed that exemption, claiming the software that runs almost every conceivable vehicle function is proprietary. Further, their attorneys have argued the complexity of the software has evolved to a point where safety and security risks arise when third parties start monkeying with the code. Their message on cyber security is, as it has been for years, that they know their products better than anyone else and that it's dangerous for others to meddle with them. But in precise terms, the Jeep Cherokee problems show this is not the case. Valasek and Miller discovered the problem, a security hole in the Sprint cellular connection to the UConnect infotainment system, not industry insiders.

NHTSA investigating Harman Kardon for software vulnerabilities

The National Highway Traffic Safety Administration is investigating infotainment units from Harman Kardon, which produces FCA's Uconnect, to determine if Harman Kardon systems used by other companies are also vulnerable to hackings. Researchers discovered a hole in the cellular connection to the Uconnect infotainment in a Jeep Cherokee. They were able to exploit it to gain access to the vehicle's brakes, radio, and other systems. In the wake of the hack, FCA pledged to send out 1.4 million USB drives to update the software. Politicians also attacked the automaker for not reporting the problem sooner, and NHTSA opened an investigation to find whether the fix worked. INVESTIGATION Subject : Software security vulnerability Date Investigation Opened: JUL 29, 2015 Date Investigation Closed: Open NHTSA Action Number: EQ15005 Component(s): EQUIPMENT All Products Associated with this Investigation Equipment Brand Name Part No. or Model No.Production Dates HARMAN KARDON R3R4 - Details Manufacturer: HARMAN INTERNATIONAL SUMMARY: On July 23, 2015, Fiat Chrysler Automobiles (FCA) submitted a safety recall report to NHTSA concerning a software security defect condition in approximately 1.4 million model year (MY) 2013 through 2015 vehicles equipped with Uconnect 8.4A (RA3) and 8.4AN (RA4) radios manufactured by Harman Kardon (Recall 15V-461). According to FCA, software security vulnerabilities in the recalled vehicles could allow unauthorized third-party access to, and manipulation of, networked vehicle control systems. Unauthorized access or manipulation of the vehicle control systems could reduce the driver?s control of the vehicle increasing the risk of a crash with an attendant increased risk of injury to the driver, other vehicle occupants, and other vehicles and their occupants within proximity to the affected vehicle. This EQ is being opened to obtain information from the supplier of Chrysler Uconnect units to determine the nature and extent of similarities in other infotainment products provided to other vehicle manufacturers. If sufficient similarities exist, the investigation will examine if there is cause for concern that security issues exist in other Harman Kardon products. Related Video:

Fiat Chrysler posts record Q3 profit thanks to U.S. trucks and Jeep

MILAN — A rebound in car production in Fiat Chrysler on Wednesday reported record third-quarter earnings as production returned to nearly pre-pandemic levels. The Italian-American automaker, which is finalizing its full merger with French rival PSA Peugeot, reported a net profit in the three months ending Sept. 30 of $1.4 billion (1.2 billion euros). That compares with a loss of 179 million euros a year earlier. The carmaker reported adjusted earnings before tax and interest in North America of 2.5 billion euros. That offset deepening losses in Europe, Asia and at its Maserati luxury marquee. Latin America, the only other region to post a profit, saw it narrow by two-thirds to 46 million euros. “Our record results were driven by our teamÂ’s tremendous performance in North America,” CEO Mike Manley said in a statement. Overall, the carmaker said global earnings before tax and interest were a record 2.3 billion euros despite a 6% fall in revenues to 26 billion euros. Global shipments were down 3%, due largely to plant retooling in North American to produce the new Jeep Grand Wagoneer in the luxury SUV segment and the discontinuation of the Dodge Grand Caravan classic minivan. Fiat Chrysler announced earlier Wednesday that its merger with PSA Peugeot is on track to be finalized by the end of the first quarter of 2021, as planned. To meet regulatory concerns, the French carmaker is selling a small stake in a components maker to get below 40% ownership. The new automaker, to be called Stellantis, will be the fourth biggest producer in the world. Earnings/Financials Chrysler Dodge Fiat Jeep RAM Citroen Peugeot