2000 Jeep Cherokee Xj "lifted" No Reserve!!! on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Jeep Liberty under investigation for door fires

The Jeep Liberty has already had plenty of attention for possible fires thanks to the first-gen model's fuel tank, but now the midsize Jeep is under the microscope of the National Highway Traffic Safety Administration for another fire-related concern. NHTSA has opened an investigation for the 2012 Liberty after receiving two reports of electrical fires in the driver's door.
According to the investigation summary, around 80,000 vehicles could potentially be affected by this problem. In both reported fires, the drivers noticed smoke and then flames from the master power window switch, and they had to pull to a stop and exit through the passenger side of the SUV. According to Autoguide, there was one injury to a motorist who suffered burned fingers while trying to open the driver's door.
Interestingly, the Dodge Nitro is not yet involved in this investigation, even though it was still around for the 2012 model year; the Nitro ended production in 2011 about a year before the final Liberty rolled off the line for the 2013 model year. Scroll down for the official NHTSA investigation summary.

Vile Gossip: Ladies who launch

Jean Jennings has been writing about cars for more than 30 years, after stints as a taxicab driver and as a mechanic in the Chrysler Proving Grounds Impact Lab. She was a staff writer at Car and Driver magazine, the first executive editor and former president and editor-in-chief of Automobile Magazine, the founder of the blog Jean Knows Cars and former automotive correspondent for Good Morning America. She has lifetime awards from both the Motor Press Guild and the New England Motor Press Association. Look for more Vile Gossip columns in the future. The year was 2006. We were driving a Bugatti Veyron 16.4 across the Florida Panhandle from Jacksonville to Panama City, only because I couldn't convince Bugatti to let me be the first to drive its exotic powerhouse, the world's fastest car at that time, all the way across America. One gleaming example had arrived in time for the Amelia Island Concours d'Elegance, where the journos massed for their quick test drives out the front drive of the Ritz Carlton, down a short stretch of the A1A, and back to the Ritz. Not far enough for me. I wanted to take the Veyron in all of its 16-cylinder, 1,001-horsepower, $1.3-million-dollar glory on a coast-to-coast extravaganza of a road trip. Never hurts to ask. I asked. Once the Bugatti guys stopped hyperventilating, I explained that the coastal adventure would be contained wholly within the state of Florida, from the Atlantic coast to the Gulf of Mexico. My secret destination, however, was to be Vernon, Florida, home of the great Errol Morris' classic documentary about a town in the Panhandle with the highest per-capita population of citizens who'd blown off or whacked off a limb for insurance money. (Google "Nub City.") The Swiss head of Bugatti public relations thought it hilarious. He showed up in a van with a couple of German mechanics to follow us and a failed French Formula 1 driver to serve as my chaperone. I came with a photographer from Germany and one of the most infamous of bad-boy auto magazine tech editors, the irrepressible Don Sherman. Sherman had his own reason for going, and it had nothing to do with a Veyron to Vernon. Once we gave up looking for nubbies, he ordered me to veer south to the handgrip of the Panhandle, familiarly known as the Redneck Riviera. The Don was aiming to secretly execute the Veyron's first Launch Control blastoff in captivity.