2007 Jeep Commander Sport on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

These three automotive Lego kits deserve your suppoort

Lego has been quite good to car enthusiasts over the past few years. We've seen traditional kits for the classic VW Microbus, Mini Cooper, and the Caterham 620R, as well as an elaborate Technic kit for the 911 GT3 RS. But why stop there? The Lego Ideas page, which allows users to submit ideas with the chance to see their kits reach production, has many more cool car kits we'd love to see. Check them out below, and be sure to log on to vote for them. If a submission hits 10,000 votes, it is considered for production. That's how we got that Caterham kit, so it's worth your time to show your support. Peugeot 205 Turbo 16 This is a submission aimed at becoming one of Lego's Speed Champions kits. These are very small mini-figure scale car models, and the series has included the Ford GT, Audi R18 Le Mans racer, and more. This kit features a tiny version of the Peugeot 205 Turbo 16, a Group B rally racer that gave Peugeot World Rally Championship titles two years in a row. The kit has a well-executed version of the car and its massive rear spoiler on the hatch. It also comes with a big dirt crest for it to fly over, along with amazed spectators on the sidelines. Porsche 911 Turbo 930 We love the GT3 RS Lego kit, but we think it's a little lonely as the only Porsche kit available. Such an impressive Porsche deserves an impressive companion, like this 911 Turbo. It's the 930 version, which is arguably the most famous classic 911 with its turbocharged power, whale-tail wing, and scary driving dynamics thanks to considerable turbo lag and rear-engine handling characteristics. This model is quite large at 1:10 scale, and comes with a detailed interior and exterior. The best part is the remote-control components underneath that allow the car to be driven. Jeep Wrangler JK Moving off the beaten path again, we have this highly detailed Wrangler kit. Actually, we have two kits, as the creator designed both two-door and four-door versions. They both feature removable hard tops, detailed interiors, and big tires. They also come with an assortment of off-road accessories such as auxiliary lights, an off-road jack, winch, gas can, roof rack, and off-road bumper. You can also find various fluid reservoirs and engine details under the opening hood. Related Video: Image Credit: AbFab1974 / Lego Ideas, brickmasterno1 / Lego Ideas, RREYES77 / Lego Ideas Auto News Toys/Games Jeep Porsche Peugeot Lego

Chrysler recalls 350k vehicles over ignition switches

Chrysler has announced a recall covering 349,442 vehicles due to ignition switches that can either become stuck or move without warning. All of the affected vehicles are from the 2008 model year, and were built before May 12, 2008.
The automaker has learned that ignition keys on some vehicles "may not fully return to the 'ON' position after rotation to the 'START' position during engine-startup," the company said in a statement. Additionally, "an ignition key may not fully return to the 'ON' position after rotation to the 'START' position and may inadvertently move through the 'ON' position to 'ACCESSORY' or 'OFF.'"
Chrysler says it is unaware of any related injuries, and notes that while reduced braking, engine or steering power is possible in such instances, the airbags are not affected. The later stands in contrast to General Motors' recent rash of high-profile recalls, and it's an important distinction that Chrysler (understandably) felt necessary to call out in bold print in its press release.