2006 Jeep Wrangler on 2040-cars

Auto blog

Feds fretting over remote hack of Jeep Cherokee

A cyber-security gap that allowed for the remote hacking of a Jeep Cherokee has federal officials concerned. An associate administrator with the National Highway Traffic Safety Administration said Thursday that news of the breach conducted by researchers Chris Valasek and Charlie Miller had "floated around the entire federal government." "The Homeland Security folks sent out broadcasts that, 'Here's an issue that needs to be addressed,'" said Nathaniel Beuse, an associate administrator with the National Highway Traffic Safety Administration. Valasek and Miller commandeered remote control of the Cherokee through a security flaw in the cellular connection to the car's Uconnect infotainment system. From his Pittsburgh home, Valasek manipulated critical safety inputs, such as transmission function, on Miller's Jeep as he drove along a highway near St. Louis, MO. The scope of the remote breach is believed to be the first of its kind. The prominent cyber-security researchers needed no prior access to the vehicle to perform the hack, and the scope of the remote breach is believed to be the first of its kind. A NHTSA spokesperson said the agency's cyber-security staff members are "putting their expertise to work assessing this threat and the response, and we will take action if we determine it's necessary to protect safety." A Homeland Security spokesperson referred questions about the hack to Chrysler. Fiat Chrysler Automobiles has already been the subject of a federal hearing this month, in which officials scrutinized whether the company had adequately fixed recalled vehicles and repeatedly failed to notify the government about defects. But cyber-security concerns are a new and different species for the regulatory agency. Only hours before the Jeep hack was announced by Wired magazine earlier this week, NHTSA administrator Dr. Mark Rosekind said hacking vulnerabilities were a threat to privacy, safety, and the public's trust with new connected and autonomous technologies that allow vehicles to communicate. NHTSA outlined its response to the cyber-security challenges facing the industry in a report issued Tuesday. In it, the agency summarized its best practices for thwarting attacks and said it will analyze possible real-time infiltration responses. But the agency's ability to handle hackers may only go so far.

Autoblog Podcast #380

Episode #380 of the Autoblog podcast is here, and this week, Dan Roth, Chris Paukert and Seyth Miersma talk about the Fiat-Chrysler five-year plan, the seeming demise of the Nissan Cube, and proposed legislation to require speed limiters with a 68-mph maximum on America's tractor trailers. We start with what's in the garage and finish up with some of your questions, and for those of you who hung with us live on our UStream channel, thanks for taking the time. Check out the new rundown below with times for topics, and you can follow along down below with our Q&A. Thanks for listening! Autoblog Podcast #380: Topics: Fiat-Chrysler five-year plan Nissan Cube on the way out? Big rig speed limiters coming? In the Autoblog Garage: 2015 Mercedes-Benz S63 AMG 2014 Chevrolet Sonic RS Sedan 2014 Honda Odyssey Touring Elite Hosts: Dan Roth, Chris Paukert, Seyth Miersma Runtime: 01:44:17 Rundown: Intro and Garage - 00:00 Fiat Chrysler Plan - 29:40 Nissan Cube - 01:07:33 Semi Speed Limiters - 01:17:33 Q&A - 01:27:35 Get the podcast: [UStream] Listen live on Mondays at 10 PM Eastern at UStream [iTunes] Subscribe to the Autoblog Podcast in iTunes [RSS] Add the Autoblog Podcast feed to your RSS aggregator [MP3] Download the MP3 directly Feedback: Email: Podcast at Autoblog dot com Review the show in iTunes Auto News Earnings/Financials Plants/Manufacturing Podcasts Rumormill Chevrolet Chrysler Dodge Fiat Jeep Nissan nissan cube speed limiters

Supplier says Jeep Cherokee hack only affects FCA cars

Harman doesn't think that drivers need to worry about any further hacks of its products. The company supplies FCA's Uconnect infotainment system where a software vulnerability is responsible for a 1.4-million vehicle recall. "This experimental hack is unique to Chrysler," Harman CEO Dinesh Paliwal said to Automotive News. "This does not exist, to our assessment, in any other vehicle." The reason that the company wouldn't be involved is that automakers aren't simply plugging in the existing infotainment systems into new vehicles. According to Paliwal, Harman supplies the unit, but FCA and other automakers are able to make additional modifications for their vehicles. The National Highway Traffic Safety Administration has also recently taken up the question of broader software vulnerabilities in Harman's products. On July 29, the agency began investigating the company to check for similarities between Uconnect and the infotainment systems supplied to other automakers. The Jeep hack became national news when two researchers were remotely able to take control of a Cherokee. The vulnerability in the cellular connection even gave control over the brakes. "Once people get in the car and get into the CAN bus, then you can start to mimic and mess up many, many things in the car," Paliwal said to Automotive News. Politicians immediately responded with legislation to create federal standards in hopes of protecting drivers better. NHTSA also opened an investigation to make sure the automaker's software update actually solved the problem. Related Video: