2014 Jeep Grand Cherokee Limited on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Weekly Recap: GM scales back as Russian auto market teeters

General Motors' extensive plans to scale back its Russian operations are the latest sign the automotive market in the former superpower is collapsing – and there are few signs of recovery. GM said Wednesday it will stop selling mainstream Chevrolets and shutter the entire Opel brand in Russia. The moves leave GM with a luxury-focused presence consisting of Cadillac and Chevrolet's Corvette, Camaro and Tahoe. The cutbacks will be completed by the end of the year. The automaker will also idle its factory in St. Petersburg and end a contract-assembly agreement with Russian manufacturer GAZ. "We had to take decisive action in Russia to protect our business," Opel Group CEO Karl-Thomas Neumann said in a statement. "We confirm our outlook to return the European business to profitability in 2016 and stick to our long-term goals." GM is the latest automaker to scale back in Russia as the economic conditions, volatile currency and uncertainty over the conflict in the Ukraine all have sandbagged new car sales. Last month, vehicle sales collapsed 38 percent in Russia to 128,298 units, according to the Association of European Business, which records sales. Joerg Schreiber, chairman of the AEB automobile manufacturers committee, didn't even feign optimism in a statement announcing the figures. "The market is entering a very difficult phase now, and February is only the beginning," he said. "Industry sentiment is the next few months will be extremely difficult and the market bottom has yet to be found." The dovetails with industry experts, who predict the Russian auto sector will remain in the doldrums. IHS said earlier this year it expects Russia's sales to slip to just 1.8 million units in 2015, which is a 40-percent drop from 2012. Other News & Notes Chief leads Jeep's Easter Safari stable Jeep is bringing seven attention-getting concepts to Moab for its annual Easter Safari off-roading celebration in Utah, but the Chief is perhaps the standout of the group. It salutes the 1970s Cherokee with a throwback appearance and surfer styling cues. The Chief has a custom modified razor grille made famous by the Wagoneer, and it rolls on 17-inch slotted mag wheels. The surf theme comes in with ocean blue paint, floral cloth and leather seats and a tiki-style shifter handle. Based on the Jeep Wrangler, the Chief has removable sides, a 3.6-liter V6 engine and a six-speed manual gearbox.

Happy 50th birthday, Jeep Wagoneer

The Wagoneer got the SUV on the radar of buyers looking for something capable, comfortable and rugged.
The Jeep Wagoneer was introduced 50 years ago, and it's that vehicle we have to thank for the herds of excellent crossovers and SUVs that make up our current automotive landscape. On a personal level, I have always loved the full-size Jeeps and their crisp Brooks Stevens styling, which aged well over their long tenure on the market. The SJs, as they're known among enthusiasts, were the Wagoneer and its two-door counterpart, the original Cherokee. The Wagoneers had become true luxury vehicles by the end of their run, which stretched form late 1962 as a '63 model all the way to 1991, when they were offered exclusively under the Grand Wagoneer nameplate.