Chrysler Town & Country Minivan on 2040-cars

Auto blog

The problem with how automakers confront hacking threats

More than anyone, Chris Valasek and Charlie Miller are responsible for alerting Americans to the hacking perils awaiting them in their modern-day cars. In 2013, the pair of cyber-security researchers followed in the footsteps of academics at the University of Cal-San Diego and University of Washington, demonstrating it was possible to hack and control cars. Last summer, their research established which vehicles contained inherent security weaknesses. In recent weeks, their latest findings have underscored the far-reaching danger of automotive security breaches. From the comfort of his Pittsburgh home, Valasek exploited a flaw in the cellular connection of a Jeep Cherokee and commandeered control as Miller drove along a St. Louis highway. Remote access. No prior tampering with the vehicle. An industry's nightmare. As a result of their work, FCA US recalled 1.4 million cars, improving safety for millions of motorists. For now, Valasek and Miller are at the forefront of their profession. In a few months, they could be out of jobs. Rather than embrace the skills of software and security experts in confronting the unforeseen downside of connectivity in cars, automakers have been doing their best to stifle independent cyber-security research. Lost in the analysis of the Jeep Cherokee vulnerabilities is the possibility this could be the last study of its kind. In September or October, the U.S. Copyright Office will issue a key ruling that could prevent third-party researchers like Valasek and Miller from accessing the components they need to conduct experiments on vehicles. Researchers have asked for an exemption in the Digital Millennial Copyright Act that would preserve their right to analyze cars, but automakers have opposed that exemption, claiming the software that runs almost every conceivable vehicle function is proprietary. Further, their attorneys have argued the complexity of the software has evolved to a point where safety and security risks arise when third parties start monkeying with the code. Their message on cyber security is, as it has been for years, that they know their products better than anyone else and that it's dangerous for others to meddle with them. But in precise terms, the Jeep Cherokee problems show this is not the case. Valasek and Miller discovered the problem, a security hole in the Sprint cellular connection to the UConnect infotainment system, not industry insiders.

Stellantis is official: FCA and PSA merger finally sealed

MILAN — Fiat Chrysler and PSA sealed their long-awaited merger on Saturday to create Stellantis, the world's fourth-largest auto group with deep enough pockets to fund the shift to electric driving and take on bigger rivals Toyota and Volkswagen. It took over a year for the Italian-American and French automakers to finalize the $52 billion deal, during which the global economy was upended by the COVID-19 pandemic. They first announced plans to merge in October 2019, to create a group with annual sales of around 8.1 million vehicles. "The merger between Peugeot S.A. and Fiat Chrysler Automobiles N.V. that will lead the path to the creation of Stellantis N.V. became effective today," the two automakers said in a statement. Shares in Stellantis, which will be headed by current PSA Chief Executive Carlos Tavares, will start trading in Milan and Paris on Monday, and in New York on Tuesday. Now analysts and investors are turning their focus to how Tavares plans to address the huge challenges facing the group – from excess production capacity to a woeful performance in China. Tavares will hold his first press conference as Stellantis CEO on Tuesday, after ringing NYSE's bell with Chairman John Elkann. FCA and PSA have said Stellantis can cut annual costs by over 5 billion euros ($6.1 billion) without plant closures, and investors will be keen for more details on how it will do this. Marco Santino, a partner at consultants Oliver Wyman, said he expected Tavares to disclose the outlines of his action plan soon, but without divulging too many details at first. "He has proven to be the kind of person who prefers action to words, so I don't think he will make loud statements or try to over-sell targets," he said. Like all global automakers, Stellantis needs to invest billions in the years ahead to transform its vehicle range for the electric era. But other pressing tasks loom, including reviving the group's lagging fortunes in China, rationalizing its huge global empire and addressing massive overcapacity. "It will be a step by step process, also to allow the market to better appreciate every single move. I don't think we will have all the details before one year," Santino said.

Takata adds millions to recall expansion in US [UPDATE]

UPDATE: Ford spokesperson Kelli Felker has advised Autoblog that of the 1,509,535 total vehicles worldwide that the company is recalling, 966,504 of them are new additions for this expanded safety campaign. Last week, the National Highway Traffic Safety Administration announced that the Takata airbag inflator recalls would expand to an estimated 33.8 million vehicles in the US. However at the time, automakers weren't sure specifically which of their models might be affected under this enlarged campaign. Now, the numbers for BMW, FCA, Ford, and Mitsubishi are being released by the agency. Additionally, Honda is outlining the broadening of its own campaign. BMW's recall amounts to 420,661 vehicles in the US, an increase from 140,696 previously. All of the following models need their front, driver's side airbag replaced: 2002-2005 BMW 325i/325xi/330i/330xi Sedan 2002-2005 BMW 325xi/325i Sportswagon 2002-2006 BMW 330Ci/325Ci/M3 Convertible 2002-2006 BMW 325i/330i/M3 Coupe 2002-2003 BMW M5/540i/525i/530i Sedan 2002-2003 BMW 540i/525i Sportswagon 2003-2004 BMW X5 3.0i/4.4i BMW has received no reports of any injures or deaths from this problem in its vehicles. FCA has 5,224,845 vehicles globally in need of inflator replacements, according to its statement. However, the company is only aware of one injury related to the issue, which occurred in a 2006 Dodge Charger in southern Florida. There are 4,747,202 vehicles worldwide from the company that are affected on the front, driver's side. Among these, 4,066,732 are in the US, 374,508 are in Canada, and the rest are in other countries. The models are: 2005-2009 Dodge Ram 2500 Pickup 2004-2008 Dodge Ram 1500 Pickup 2006-2009 Dodge Ram 3500 Pickup 2007-2009 Dodge Ram 3500 Cab Chassis 2008-2010 Dodge Ram 4500/5500 Cab Chassis 2008-2009 Sterling 4500/5500 Cab Chassis 2004-2008 Dodge Durango 2007-2008 Chrysler Aspen 2005-2010 Chrysler 300/300C/SRT8 2005-2010 Dodge Charger/Magnum 2005-2011 Dodge Dakota 2006-2010 Mitsubishi Raider Also, there are 438,156 vehicles in the US, according to the NHTSA documents, that need their front passenger's side inflators replaced in the expansion of an earlier regional recall: 2003 Dodge Ram 1500 2003 Dodge Ram 2500 2003 Dodge Ram 3500 The total number of vehicles from Ford now covered under these campaigns stands at 1,509,535 worldwide. Of this total, there are 1,380,604 in the United States, 93,207 in Canada and 16,953 in Mexico.