2006 Jeep Wrangler X Sport Utility 2-door 4.0l on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

2014 Jeep Patriot and Compass ditch CVT for six-speed auto

It was reported in Automotive News a few months ago, but a new report on Allpar.com adds some details to news that the 2014 Jeep Compass and Patriot will get a six-speed automatic to replace the CVTs they currently use. According to a tip provided to Allpar, the 2014 models will begin production in March and be on sale sometime in the summer. The Jatco-sourced CVT in use until now - Jatco is owned by Nissan and Mitsubishi - has been often criticized, and many won't be sad to see it go.
The incoming six-speed automatic is said to be an all-wheel-drive cog-swapper that's the work of Hyundai and Magna and has been paired with the DynaMax AWD system used in the Hyundai ix35 and Kia Sportage. It won't be the only Chrysler product using a transmission with ties to Hyundai: the six-speed automatic in the Dodge Dart comes from Powertech, which is a wholly-owned subsidiary of Hyundai. With the Patriot and Compass said to be driving down the trail for the last time this year, it will be a short run for the new tranny and the rumored addition of a backup camera and power rear liftgate on the Compass.

FCA delays Grand Wagoneer and next-generation heavy-duty Ram trucks

The upcoming Jeep Grand Wagoneer has had a tumultuous gestation thus far. At one point it was essentially confirmed, but later it was rumored to have been cancelled. In that context, the latest report from Automotive News is something of a mixed blessing. According to the publication, the Grand Wagoneer has simply been delayed, as has the next-generation Ram heavy duty truck line. This does not seem to affect the fully redesigned Ram 1500, which was previously reported to have been pushed back slightly to 2019. Automotive News says the information came from unnamed sources at the company. Nothing was said about how long the vehicles would be delayed. The publication also conjectures that FCA is delaying the models to save some money to help cover the company's $7 billion of debt , since re-tooling both the heavy-duty truck plant and eventual Grand Wagoneer plant will be expensive. View 6 Photos We reached out to Chrysler for more information on the subject, but the company wouldn't comment on the report. Even so, we wouldn't be too surprised if FCA is indeed delaying these products. The company has delayed a number of vehicles in recent years. In fact nearly every major FCA truck and SUV, including the Grand Wagoneer and Ram line, were delayed about a year and a half ago. We certainly hope the company doesn't delay the Grand Wagoneer for too long, since it's possible it will have a price tag of over $130,000. The profit margins on an SUV with that kind of MSRP would go a long way to helping to pay down the company's debt. Related Video: