on 2040-cars

Auto blog

Submit your questions for Autoblog Podcast #313 LIVE!

We record Autoblog Podcast #313 tonight, and you can drop us your questions and comments regarding the rest of the week's news via our Q&A module below. Subscribe to the Autoblog Podcast in iTunes if you haven't already done so, and if you want to take it all in live, tune in to our UStream (audio only) channel at 10:00 PM Eastern tonight.
Discussion Topics for Autoblog Podcast Episode #313
2014 Chevrolet Silverado and GMC Sierra introduced

Chevy Corvette is latest car breached by hackers

UPDATE: This story has been updated with comment from General Motors. In the latest car-hacking exploit in a summer full of them, researchers from the University of California-San Diego say they've found a way to manipulate braking in a 2013 Chevrolet Corvette. The vulnerabilities may not be limited to that model. Cyber-security researchers breached the car's security systems via a device they had plugged into the Corvette's OBD-II port, and through that connection, they sent messages that could turn windshield wipers on and off and tamper with the brakes as the car drove at low speeds. It's the latest in a series of car hacks that involve access to critical systems obtained via the OBD-II port, where drivers can plug in devices that provide anything from diagnostic information for mechanics to driving information for insurance companies. Last November, cyber-security engineers from Argus Cyber Security remotely controlled vehicle functions in a car that had a OBD-II dongle called a Zubie installed. In January, researchers from Digital Bond Labs found security holes in an information-tracking dongle popular with more than 2 million Progressive Insurance customers. Those came before prominent hacks unveiled in recent weeks, in which researchers remotely commandeered control of a Jeep Cherokee and, separately, showcased problems with GM's OnStar infotainment system. Regarding the dongles that plug into the OBD-II ports, Stefan Savage, a Cal-San Diego professor involved in the research, tells WIRED that, "we acquired some of these things, reverse-engineered them, and along the way, found that they had a whole bunch of security deficiencies." Savage and others unveiled the latest study at the Usenix security conference Tuesday. In a video of their exploit entitled "Fast and Vulnerable," they show how they sent SMS messages from a smartphone to the dongle plugged into the car's OBD-II port. From there, their messages accessed the CAN bus, a network on the car that connects individual electronic control units, which control dozens of vehicle functions. As they send the commands to brake the car, the driver of the Corvette notes "the pedal doesn't react to any pressure." General Motors issued a written response Wednesday, warning drivers to be careful with third-party devices they plug into their OBD-II ports.

Ford, Toyota clean up in Best Car For The Money Awards

The U.S. News Best Cars for the Money Awards picks winners by looking at the average transaction price, five-year total cost of ownership, the regard a car has from the automotive press, reliability figures from J.D. Power and Associates and safety data from the National Highway Traffic Safety Administration and the Insurance Institute for Highway Safety. The result, according to the magazine, is "the best combination of critical acclaim and long-term value."
Ford nabbed six of the 21 categories that received awards this year, the Focus, Fusion, Fusion Hybrid, Taurus, Escape and Edge getting trophies. Toyota and its Lexus and Scion sub-brands took another five, the Tacoma and Tundra owning the two categories given to pickup trucks. The other ten awards were split between Honda with three, Buick with two, and one each for Subaru, BMW, Hyundai, Chevrolet and Mazda.
Follow the link to see all the winners and read about why they were chosen.