Auto blog

Feds fretting over remote hack of Jeep Cherokee

A cyber-security gap that allowed for the remote hacking of a Jeep Cherokee has federal officials concerned. An associate administrator with the National Highway Traffic Safety Administration said Thursday that news of the breach conducted by researchers Chris Valasek and Charlie Miller had "floated around the entire federal government." "The Homeland Security folks sent out broadcasts that, 'Here's an issue that needs to be addressed,'" said Nathaniel Beuse, an associate administrator with the National Highway Traffic Safety Administration. Valasek and Miller commandeered remote control of the Cherokee through a security flaw in the cellular connection to the car's Uconnect infotainment system. From his Pittsburgh home, Valasek manipulated critical safety inputs, such as transmission function, on Miller's Jeep as he drove along a highway near St. Louis, MO. The scope of the remote breach is believed to be the first of its kind. The prominent cyber-security researchers needed no prior access to the vehicle to perform the hack, and the scope of the remote breach is believed to be the first of its kind. A NHTSA spokesperson said the agency's cyber-security staff members are "putting their expertise to work assessing this threat and the response, and we will take action if we determine it's necessary to protect safety." A Homeland Security spokesperson referred questions about the hack to Chrysler. Fiat Chrysler Automobiles has already been the subject of a federal hearing this month, in which officials scrutinized whether the company had adequately fixed recalled vehicles and repeatedly failed to notify the government about defects. But cyber-security concerns are a new and different species for the regulatory agency. Only hours before the Jeep hack was announced by Wired magazine earlier this week, NHTSA administrator Dr. Mark Rosekind said hacking vulnerabilities were a threat to privacy, safety, and the public's trust with new connected and autonomous technologies that allow vehicles to communicate. NHTSA outlined its response to the cyber-security challenges facing the industry in a report issued Tuesday. In it, the agency summarized its best practices for thwarting attacks and said it will analyze possible real-time infiltration responses. But the agency's ability to handle hackers may only go so far.

AEV Jeep Wrangler Unlimited Rubicon

After their rented 2007 Hummer H3 failed them during the brutal Rallye Aicha des Gazelles in Morocco, Amy Lerner and her sister Tricia Reina were on a quest to find the most capable production off-roader for their next competition - they chose a 2012 Jeep Wrangler Unlimited Rubicon. Their next mission was to find a company with the competence to configure it to win. After poring over Internet forums and perusing countless magazines for an outfitter who could meet their demanding requirements, they sent their bright orange JK ("Crush" is the official color) to American Expedition Vehicles (AEV) for some modifications.
The Michigan-based team at AEV kept the Jeep's 3.6-liter V6 and automatic transmission stock, but replaced the hood with a tall AEV Heat Reduction Hood and added an AEV Snorkel Kit for water crossings (it serves double-duty as its raised height helps to keep the air intake out of the kicked-up dust on the trail). Front and rear off-road bumpers were bolted in place, and AEV skid plates were added to provide additional undercarriage protection. A pair of IPF-900 off-road lights improve visibility, while a 10.2-gallon AEV Fuel Caddy (located behind the exterior spare) added some range. The suspension was upgraded with a 3.5-inch lift kit with Bilstein remote reservoir shocks, and 35-inch Falken Wildpeak A/T tires (LT285/70R17) were mounted at all four corners on AEV's beadlock wheels.

NHTSA investigating power modules on Chrysler Group SUVs and minivans

The Center for Auto Safety is officially petitioning the National Highway Traffic Safety Administration to begin scrutinizing alleged problems with the totally integrated power module (TIPM) on about 24 Chrysler Group SUVs and minivans. The advocacy group claims that the part's failure can cause affected vehicles to stall or not start at all. NHTSA is still looking into the accusations and deciding whether a full investigation is actually warranted.
The CAS petition claims at least 70 TIPM failures, but according to NHTSA, six of the complaints are for models that don't have the modules. In 34 of the reported cases, the vehicles refused to start, and in 17 of them the engine stalled. There were also two allegations of smoke and one of a fire. However, none of these affected airbag deployment or resulted in a crash.
This petition isn't the first TIPM-related problem for Chrysler Group. A recent report in the New York Times alleged that it found 240 complaints potentially related to the issue on NHTSA's website alone. In September, the automaker also recalled 230,760 examples worldwide (188,723 in the US) of the 2011 Jeep Grand Cherokee and Dodge Durango replace the fuel pump relay circuit inside of the TIPM-7 with one external to the unit. The original part could allegedly cause the models to stall without warning. Even earlier, the company also recalled about 80,000 examples of the Jeep Wrangler and Dodge Nitro in 2007 to have the module reprogrammed.