Cj5 Classic Arizona Cj Vintage 4x4 Desert Trail Restored 4wd Offroad Suv Tow on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

New Barracuda, Grand Cherokee Trackhawk coming soon

As we write this, Fiat Chrysler Automobiles is conducting a major dealership event in sunny Las Vegas. New vehicles are being announced, redesigned offerings are being teased, and promises are being made to the sprawling company's dealer body. And, as all these announcements are meant to be tip-top secret, they're leaking out left, right, and center. Naturally. FCA is telling its dealers all of the vehicles shown at the Vegas gala will be in showrooms within 12 to 24 months, and that the product offensive will include at least 30 new or significantly refreshed models. Some of those we've known about since FCA boss Sergio Marchionne unveiled his highly ambitious five-year plan in May 2014, while we're hearing about others for the very first time. We've reached out to our sources within FCA, and will update this post as we learn more. It should be noted that while we've tried to rely on concrete sources or corroborations from multiple sources, some of the news here comes from people claiming to have been in attendance and posting in forums like Allpar and Jalopnik's Opposite Lock. Unless corroborated by a mainstream source or confirmed by our own sources within FCA, we're listing each item that comes from a forum. Have those grains of salt at the ready. Chrysler Dodge Durango-sized SUV with stow-and-go was shown. A poster on Allpar Forums claims it had a Durango's interior. New Aspen? Town and Country PHEV confirmed (again). A plug-in minivan was originally announced as part of five-year plan. No news on 200 or 300. Dodge The redesigned Charger will use the Alfa Romeo Giulia's rear-drive platform and, according Automotive News, draw inspiration from 1999's Charger concept car. We're wagering the 24-month time frame specified to dealers will move the new sedan's arrival up from 2018 to mid-2017. Jalopnik's Opposite Lock claims two new Challenger models are coming. Challenger ADR (American Drag Racer) and T/A. ADR should appeal to bracket racers and is more powerful than the SRT Hellcat, while T/A is for track rats, just like Viper T/A. Automotive News claims the legendary Barracuda nameplate will be revived as a Dodge. The Barracuda will be smaller than Challenger, offered as both a coupe and a convertible. Allpar claims it will feature modern styling. A Dodge Durango SRT was announced with 6.4-liter Hemi V8 and rear-drive. Sources within FCA confirmed its arrival with Autoblog. Apparently, dealers were shown an example in B5 Blue.

2014 Jeep Cherokee: June 2014

I got a text message from Editor-In-Chief Sharon Carty one afternoon proclaiming that her new favorite SUV is our long-term 2014 Jeep Cherokee. And she's not alone. I'm not sure if anyone else on staff would go so far as to use the "favorite" descriptor, but after just over a month of honeymooning with our new long-termer, it's safe to say that the Jeep is quickly finding its way into the good graces of a number of Autoblog staffers.
There's good reason for all that praise, too. Thus far, the Jeep has proven itself to be incredibly competent and comfortable for daily life - it's functional, quiet, and packed with a host of amenities that make it easy to live with. It's been wholly trouble-free (with less than 4,000 miles on the clock as of this writing, it ought to be), but even nitpicks have been few and far between.