2008 Jeep Wrangler on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

C8s, V8s and the 2022 Car, Truck and Utility of the Year | Autoblog podcast #712

This episode of the Autoblog Podcast features Editor-in-Chief Greg Migliore and Associate Editor Byron Hurd. They kick off with an overview of the 2022 North American Car, Truck and Utility of the Year award winners (spoiler: Ford did well). After that, they talk about GM's electric pickup strategy and whether a premium electric pickup from Cadillac makes sense. Then, they pivot to Mitsubishi and the future of the Ralliart nameplate. Will we ever get a fun, inexpensive enthusiast car from the Japanese automaker again? Then it's on to what Byron's had in the driveway for the past couple weeks, including a 2022 Chevy Corvette and a 2022 Jeep Wrangler Rubicon 392 Xtreme Recon. Plus, he talks about putting some new snow tires on his personal Jeep Wrangler for evaluation in Michigan winter.  Send us your questions for the Mailbag and Spend My Money at: Podcast@Autoblog.com. Autoblog Podcast #712 Get The Podcast Apple Podcasts – Subscribe to the Autoblog Podcast in iTunes Spotify – Subscribe to the Autoblog Podcast on Spotify RSS – Add the Autoblog Podcast feed to your RSS aggregator MP3 – Download the MP3 directly Rundown News: 2022 North American Car, Truck and Utility of the Year winners Should Cadillac build an electric pickup truck? The future of Mitsubishi and Ralliart What we're driving: 2022 Chevrolet Corvette 2022 Jeep Wrangler Rubicon 392 Xtreme Recon Snow tires! Feedback Email – Podcast@Autoblog.com Review the show on Apple Podcasts Autoblog is now live on your smart speakers and voice assistants with the audio Autoblog Daily Digest. Say “Hey Google, play the news from Autoblog” or "Alexa, open Autoblog" to get your favorite car website in audio form every day. A narrator will take you through the biggest stories or break down one of our comprehensive test drives. Related Video:

2014 Jeep Compass/Patriot sing their swan songs with a six-speed automatic

Unless the governor, Fiat CEO Sergio Marchionne, gives them a reprieve, the 2014 Jeep Compass and Patriot are expected to meet their makers sometime next year. Should they perish, it's a shame that it would happen just as they've shed the continuously variable transmission that was their major bugbear, and just as the Compass has gotten its best looks yet.
Both will roll with a proper six-speed automatic transmission, courtesy of PowerTech. Noise-resistant gears and tuning by Chrysler boffins should alleviate the unappealing sounds that were given off by the older CVT. Unless, that is, you choose to have either model equipped with Freedom Drive II; the serious off-road package, available on both baby Jeeps, will still come with the CVT. The base transmission on the entry-level Sport trim remains the five-speed manual.
Otherwise, it's minor changes for the Compass, set off by the new 18-inch wheel option, trim pieces around the car and a back-up camera. The Patriot gets seat-mounted airbags, but is carryover otherwise. With their expected demises perhaps a year away, not much has changed otherwise. Engine choices comprise the 2.0-liter four-cylinder with 158 horsepower and 141 pound-feet of torque or the 2.4-liter four-cylinder with 172 hp and 165 lb-ft.