1963 Chrysler New Yorker on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

FCA employees likely to reject UAW contract

For a brief, blissful glimmer of time, it seemed like we might have a period of labor harmony here in the Motor City. The United Auto Workers and Fiat Chrysler Automobiles, the UAW's lead bargaining company, came to a pending agreement that seemed promising enough that union president Dennis Williams, shown above with FCA boss Sergio Marchionne, thought it'd be ratified by the membership. Well, he was wrong. It's widely expected that FCA's rank-and-file workforce will vote against the deal, which gave workers a raise, would establish a VEBA-style healthcare pool, and deliver a $3,000 bonus for signing the agreement, while retaining the much-hated two-tier wage system. According to The Detroit News, it'd be the first time in over three decades the union's general population didn't follow its leadership's recommendation. Two of FCA's big US facilities, Toledo Assembly and Sterling Heights Assembly, overwhelmingly voted no, with The News saying they "mathematically sealed the deal's fate." According to The News, UAW Local 1700 President Charles Bell said roughly 90 percent of SHAP's 3,000-plus union workforce voted "no" on the deal. Should the pending agreement fail as it's expected to, there are three potential avenues for the union. First, as The News details, both sides could return to the bargaining table. Second, FCA workers could hit the picket line. Finally, union leadership may opt to focus its firepower on General Motors or Ford. It's a good thing we aren't the gambling sort, because those all seem very much within the realm of possibility. Not surprisingly, rank-and-file UAW members have taken issue with the survival of the two-tier wage structure, while others simply think that union employees deserve a wage hike. There was also, we're betting, some serious concerns over the reshuffling of production that would come with a new FCA/UAW deal. As previously reported, no fewer than four UAW facilities would have their vehicle lines shuffled around, including both SHAP and Toledo. Expect more news as soon as the UAW formally announces the results of its FCA voting. News Source: The Detroit NewsImage Credit: Paul Sancya / AP Plants/Manufacturing UAW/Unions Chrysler Fiat FCA toledo sterling heights

Government Ending Jeep Investigation

The government is closing its investigation into older-model Jeeps with fuel tanks that could rupture and cause fires. The National Highway Traffic Safety Administration said Friday it has "no reservations" with Chrysler Group's plans to recall the vehicles. The agency is expected to release a report on its investigation in a few weeks. The decision ends an unusually public struggle between Chrysler and NHTSA. The agency asked Chrysler to recall 2.7 million Jeeps last June, contending that their gas tanks - which are positioned behind the rear axle - were at risk of rupturing and catching fire in rear-end crashes. Involved were Grand Cherokee SUVs from the 1993 to 2004 model years and Liberty SUVs from 2002 to 2007. Chrysler initially refused to recall the vehicles. The company said the rate of fuel leaks and fires after crashes was similar to comparable vehicles that were sold during the time in question. It was the first time in two years that an automaker had refused NHTSA's request for a recall. Chrysler later agreed to recall 1.56 million of the Jeeps and install trailer hitches on them to help protect the gas tanks. The company sent notices to the remaining customers saying their vehicles were fine if they have factory-installed or Chrysler-made trailer hitches. NHTSA said late Friday that it has been in close contact with Chrysler and will monitor the recall as it continues. Chrysler has told customers that it will start installing the hitches soon. "Consumers should have their vehicles serviced promptly once they receive final notification from Chrysler,"NHTSA said in a statement. In its own statement Friday, Chrysler said, "We share NHTSA's commitment to safety." NHTSA's outgoing chief, David Strickland, told The Associated Press in an interview last month that Chrysler had convinced NHTSA that the Jeeps were no more dangerous than similar vehicles sold at that time. "Those vehicles performed at a rate similar to their peers. That is the keystone analysis as to whether something poses an unreasonable risk to safety," Strickland said. Friday was Strickland's last day at NHTSA. He is joining Venable, a law firm. NHTSA began investigating the Jeeps at the request of the Center for Auto Safety, a Washington-based advocacy group. "It is tragic that NHTSA approved Chrysler's sham trailer hitch recall for Jeeps that explode in rear impacts," the Center for Auto Safety's director, Clarence Ditlow, said Friday.