2014 Jeep Grand Cherokee Limited on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Stellantis mega-merger gets approval from FCA, PSA shareholders

MILAN — Shareholders of Fiat Chrysler and PSA Peugeot decisively voted Monday to merge the U.S.-Italian and French carmakers to create worldÂ’s 4th-largest auto company. Addressing separate meetings, both PSA Peugeot CEO Carlos Tavares and Fiat Chrysler Chairman John Elkann spoke of the “historic” importance of the vote, which combines legacy car companies that helped write the industrial histories of the United States, France and Italy. Before the merger is finalized, shares in the new company, to be called Stellantis, must the launched. It will be traded in Milan, New York and Paris. The marriage of PSA Peugeot and Fiat Chrysler Automobiles is built on the promise of cost-savings in the capital-hungry industry, but what remains to be seen is if it will be able to preserve jobs and heritage brands in a global market still suffering from the pandemic. The deal will create the worldÂ’s fourth-largest carmaker, with the capacity to produce 8.7 million cars a year, behind Volkswagen, Toyota and Renault-Nissan, and create 5 billion euros in annual synergies.  “We are fully aware of the fact that together we will be stronger than individually,'' PSA CEO Carlos Tavares told a virtual gathering of eligible shareholders. “The two companies are in good health. These two companies have strong positions in their markets.” The new company will put together under one roof French mass-market carmakers Peugeot and Citroen, top-selling Jeep and Italian luxury and sports brands Maserati and Alfa Romeo - pooling companies that have helped define the industry in the United States, France and Italy. While the tie-up is billed as a merger of equals, the power advantage goes to PSA, with Tavares running Stellantis and holding the tie-breaking vote on the 11-seat board. Tavares is set to take full control of the company early this year, possibly by the end of January. Fiat Chrysler chairman John Elkann, heir to the Fiat-founding Agnelli family and Fiat ChryslerÂ’s biggest shareholder, will be the Stellantis chairman. Fiat Chrysler CEO Mike Manley will head North American operations, which is key to Tavares' long-time goal of getting a U.S. foothold for the French carmaker he has run since 2014, and the clear money-maker for Fiat Chrysler. Such a deal was long wanted by Fiat ChryslerÂ’s long-time CEO Sergio Marchionne, who had predicted the necessity of consolidation in the industry. He was unable to find a deal before his sudden death in July 2018.

NHTSA closes investigation into Jeep Liberty fires

The investigation that the National Highway Traffic Safety Administration opened into the Jeep Liberty in October 2013 has been closed. NHTSA received two (!) complaints about fires starting in the driver's door, thought to be caused by the master power window switch. The initial estimate was that 80,000 Libertys could be roped into a possible recall, but according to a report in the Detroit News the agency examined records for 425,000 Chrysler products that used the same window switch, including the Dodge Nitro and Chrysler Town & Country minivan.
After canvassing 265 warranty claims related to the master switches, NHTSA concluded that the rate of fires compared to the "large population of vehicles" was rather low, and that there was no trend pattern behind the few issues it did find. Perhaps with that, and the closure of the trailer hitch investigation, the Liberty can finally rest in peace.