1995 Jeep Grand Cherokee Limited on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

New Barracuda, Grand Cherokee Trackhawk coming soon

As we write this, Fiat Chrysler Automobiles is conducting a major dealership event in sunny Las Vegas. New vehicles are being announced, redesigned offerings are being teased, and promises are being made to the sprawling company's dealer body. And, as all these announcements are meant to be tip-top secret, they're leaking out left, right, and center. Naturally. FCA is telling its dealers all of the vehicles shown at the Vegas gala will be in showrooms within 12 to 24 months, and that the product offensive will include at least 30 new or significantly refreshed models. Some of those we've known about since FCA boss Sergio Marchionne unveiled his highly ambitious five-year plan in May 2014, while we're hearing about others for the very first time. We've reached out to our sources within FCA, and will update this post as we learn more. It should be noted that while we've tried to rely on concrete sources or corroborations from multiple sources, some of the news here comes from people claiming to have been in attendance and posting in forums like Allpar and Jalopnik's Opposite Lock. Unless corroborated by a mainstream source or confirmed by our own sources within FCA, we're listing each item that comes from a forum. Have those grains of salt at the ready. Chrysler Dodge Durango-sized SUV with stow-and-go was shown. A poster on Allpar Forums claims it had a Durango's interior. New Aspen? Town and Country PHEV confirmed (again). A plug-in minivan was originally announced as part of five-year plan. No news on 200 or 300. Dodge The redesigned Charger will use the Alfa Romeo Giulia's rear-drive platform and, according Automotive News, draw inspiration from 1999's Charger concept car. We're wagering the 24-month time frame specified to dealers will move the new sedan's arrival up from 2018 to mid-2017. Jalopnik's Opposite Lock claims two new Challenger models are coming. Challenger ADR (American Drag Racer) and T/A. ADR should appeal to bracket racers and is more powerful than the SRT Hellcat, while T/A is for track rats, just like Viper T/A. Automotive News claims the legendary Barracuda nameplate will be revived as a Dodge. The Barracuda will be smaller than Challenger, offered as both a coupe and a convertible. Allpar claims it will feature modern styling. A Dodge Durango SRT was announced with 6.4-liter Hemi V8 and rear-drive. Sources within FCA confirmed its arrival with Autoblog. Apparently, dealers were shown an example in B5 Blue.

Jeep leads list of 25 most patriotic brands

It's not unusual to feel extra patriotic this time of year, what with the Fourth of July being today and all. As if to celebrate, New York-based research firm Brand Keys conducted a study among 4,500 consumers about what brands they find to be the most patriotic. According to the Detroit Free Press, Jeep took top honors in this study, besting other American stalwart brands including Coca-Cola, Levi's and Hershey's.
Interestingly, the only other automotive brand to make the list was Ford, in the 16th spot (motorcycle fans take note - Harley-Davidson claimed the No. 13 slot). This means consumers found Jeep to be more patriotic than any of the brands in the General Motors portfolio, including Chevrolet, which has long used American themes in its advertising over the decades.
According to Brand Keys, Jeep came in "with a score of 98 out of 100 on a scale representing consumers' emotional engagement expectations," the Detroit Free Press reports. Be sure to read the report to scan the entire Top 25 list for yourself.