2014 Jeep Wrangler Unlimited Sahara on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

7 months later, Jeep 'trailer hitch' recall still stalled

For the past few years, Chrysler and its CEO, Sergio Marchionne, have gone head-to-head with the National Highway Traffic Safety Administration and its boss, David Strickland, over the government safety agency's request for Chrysler to recall almost three-million Jeep vehicles due to what NHTSA says is a safety issue that has caused at least 51 deaths. After a three-year investigation and Chrysler's initial refusal to issue a recall because it deemed the vehicles safe and built to the day's federal requirements, last summer, the two parties compromised on a "voluntary campaign" to inspect 1.56 million vehicles, those being the 1992 to 1998 Grand Cherokee and 2002 to 2007 Liberty.
Those vehicles were designed with their gas tanks between the rear axle and the bumper, and NHTSA says that in rear-end collisions, damage to the fuel tank has caused fires responsible for those 51 deaths. The compromise reached last summer was that Chrysler would inspect 1.56 million vehicles and, "if necessary, provide an upgrade to the rear structure of the vehicle." Practically speaking, that meant Chrysler would replace aftermarket trailer hitches, but would take no action if a vehicle had a factory-installed hitch or an aftermarket hitch from Mopar.
A report in The Detroit News says the "voluntary campaign" is just now getting under way, with Chrysler saying last week that the design of the replacement part had been finalized and it was tooling up "to deliver the required volume." Seven months later, still in question is whether NHTSA will crash-test the fix engineered by Chrysler, noteworthy because not only did the vehicles in question pass every safety standard necessary to be cleared for sale at the time, there are still questions (to those of us on the outside) as to how the Jeeps at issue fare among their peers in such incidents. Either way, Chrysler and NHTSA apparently still disagree on the efficacy of the remedy itself: the carmaker says it might help in low-speed crashes but not high-speed collisions, a position the NHTSA is at odds with. All of this means the campaign doesn't yet have an end in sight.

China-FCA merger could be a win-win for everyone but politicians

NEW YORK — Fiat Chrysler boss Sergio Marchionne has said the car industry needs to come together, cut costs and stop incinerating capital. So far, his words have mostly fallen on deaf ears among competitors in Europe and North America. But it appears Marchionne has finally found a receptive audience — in China. FCA shares soared Monday after trade publication Automotive News reported the $18 billion Italian-American conglomerate controlled by the Agnelli family rebuffed a takeover from an unidentified carmaker from the Chinese mainland. As ugly as the politics of such a combination may appear at first blush, a transaction could stack up industrially, and perhaps even financially. A Sino-U.S.-European merger would create the first truly global auto group. That could push consolidation to the next level elsewhere. Moreover, China is the world's top market for the SUVs that Jeep effectively invented, so it might benefit FCA financially. A combo would certainly help upgrade the domestic manufacturer; Chinese carmakers have gotten better at making cars, but struggle to build global brands, and they need to develop export markets. Though frivolous overseas shopping excursions by Chinese enterprises are being reined in by Beijing, acquisitions that support the modernization and transformation of strategic industries still receive support, and the government considers the automotive industry to be strategic. A purchase of FCA by Guangzhou Automobile, Great Wall or Dongfeng Motors would probably get the same stamp of approval ChemChina was given for its $43 billion takeover of Syngenta. What's standing in the way? Apart from price (Automotive News said FCA's board deemed the offer insufficient) there's the not-insignificant matter of politics. Even as FCA shares soared, President Donald Trump interrupted his vacation to instruct the U.S. Trade Representative to look into whether to investigate China's trade policies on intellectual property. Seeing storied Detroit brands like Jeep, Chrysler, Ram and Dodge handed off to a Chinese company would provoke howls among Trump's economic-nationalist supporters. It might not play well in Italy, either, to see Alfa Romeo and Maserati answering to Wuhan instead of Turin — though Automotive News said they might be spun off separately. Yet, as Morgan Stanley observes, "cars don't ship across oceans easily," and political considerations increasingly demand local manufacture of valuable products.