1998 Jeep Cherokee Sport on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Jeep Grand Cherokee, Dodge Durango to lose color options temporarily

In the market for a Jeep Grand Cherokee or Dodge Durango? Well, if you fancy a more expressive color for your new SUV, you'd better get your order in, or plan on waiting until well into 2015.
The SUVs will be limited to just four monochromatic shades - black, white, silver and gray - until at least February, thanks to an upgrade to the paint shop at the two vehicles' Jefferson North factory. For the Grand Cherokee, that means it's losing more than half its color palette while the Durango is dropping two-thirds of its color catalog.
The loss of colors is inconvenient, but the upgrade will have a slightly bigger effect on the overall supply of SUVs, as Chrysler will need to end its relentless build pace at the factory for a three-week shutdown starting on December 22. The good news for fans of the SUVs is that once the work is completed, we should see a gradual expansion of the color palettes for both the Durango and Grand Cherokee, beyond even what's offered now.

Government Ending Jeep Investigation

The government is closing its investigation into older-model Jeeps with fuel tanks that could rupture and cause fires. The National Highway Traffic Safety Administration said Friday it has "no reservations" with Chrysler Group's plans to recall the vehicles. The agency is expected to release a report on its investigation in a few weeks. The decision ends an unusually public struggle between Chrysler and NHTSA. The agency asked Chrysler to recall 2.7 million Jeeps last June, contending that their gas tanks - which are positioned behind the rear axle - were at risk of rupturing and catching fire in rear-end crashes. Involved were Grand Cherokee SUVs from the 1993 to 2004 model years and Liberty SUVs from 2002 to 2007. Chrysler initially refused to recall the vehicles. The company said the rate of fuel leaks and fires after crashes was similar to comparable vehicles that were sold during the time in question. It was the first time in two years that an automaker had refused NHTSA's request for a recall. Chrysler later agreed to recall 1.56 million of the Jeeps and install trailer hitches on them to help protect the gas tanks. The company sent notices to the remaining customers saying their vehicles were fine if they have factory-installed or Chrysler-made trailer hitches. NHTSA said late Friday that it has been in close contact with Chrysler and will monitor the recall as it continues. Chrysler has told customers that it will start installing the hitches soon. "Consumers should have their vehicles serviced promptly once they receive final notification from Chrysler,"NHTSA said in a statement. In its own statement Friday, Chrysler said, "We share NHTSA's commitment to safety." NHTSA's outgoing chief, David Strickland, told The Associated Press in an interview last month that Chrysler had convinced NHTSA that the Jeeps were no more dangerous than similar vehicles sold at that time. "Those vehicles performed at a rate similar to their peers. That is the keystone analysis as to whether something poses an unreasonable risk to safety," Strickland said. Friday was Strickland's last day at NHTSA. He is joining Venable, a law firm. NHTSA began investigating the Jeeps at the request of the Center for Auto Safety, a Washington-based advocacy group. "It is tragic that NHTSA approved Chrysler's sham trailer hitch recall for Jeeps that explode in rear impacts," the Center for Auto Safety's director, Clarence Ditlow, said Friday.