2003 Jeep Liberty Limited Sport Utility 4-door 3.7l on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Marchionne: Midsize pickup still not in the cards; Ram 1500, Jeep Wrangler could use aluminum

During the Fiat-Chrysler briefings on Tuesday, Reid Bigland, head of Ram Trucks, outlined the new product plans for his brand, including confirmation that an all-new light-duty Ram 1500 will launch in 2017. From there, discussions spun off in two directions, with the main questions being: will Ram build a midsize pickup? And, following Ford's move to extensively use aluminum in its new 2015 F-150, will Chrysler be using this weight-saving material for the next round of its fullsize truck, as well?
"I think there is room for a Ram 1000," Fiat-Chrysler CEO Sergio Marchionne (pictured above) told members of the media, saying this is a conversation the automaker has been having internally for several years now. "We've tried this ... we've actually taken it to clinics," Marchionne stated, adding that the "response has been lukewarm."
"I have better use of aluminum in this house than a pickup truck." - Sergio Marchionne

Chrysler recalling hundreds of thousands of Jeep Grand Cherokee and Commander SUVs

The public might associated ignition switch recalls with General Motors - and with good cause - but that's not the only automaker calling its vehicles back in to fix that sort of issue.
Last month we reported that the National Highway Traffic Safety Administration was investigating an array of Chrysler Group vehicles for electrical-related safety issues. The administration and Chrysler subsequently issued a recall for 700,000 Dodge Journey crossovers, Dodge Grand Caravan minivans and Chrysler Town & Country minivans. But while the Jeeps that were also under investigation were not covered in that recall, they are being addressed in a separate one now.
Although Chrysler reports that it is only aware of a single accident stemming from this issue, it is "committing now to conduct a recall out of an abundance of caution." The recall affects the 2006-2007 Jeep Commander and 2005-2007 Jeep Grand Cherokee, of which it reports there are 792,300 on the road: 649,900 in the United States, 28,800 in Canada, 12,800 in Mexico and a further 100,800 outside of North America.