2002 Chrysler Pt Cruiser Limited Wagon 4-door 2.4l on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Fiat Chrysler dumped 40,000 unordered vehicles on dealers

In a move that echoes recent history, Fiat Chrysler has been making more cars and trucks than dealers in the U.S. are willing to accept, with Bloomberg reporting that at one point the automaker had built up a glut of around 40,000 unordered vehicles. That’s led some dealers to accuse FCA of reviving the dreaded “sales bank” accounting practice of obscuring inventory to improve the balance sheet. The company reportedly began building up its inventory of unordered cars this summer despite an industrywide slowdown in sales and an eagerness by some dealers to thin their inventories because rising interest rates are making it more expensive to hold unsold cars. The inventory build-up also coincided with Fiat ChryslerÂ’s efforts to find a merger partner, first with Renault, which fell through, then last monthÂ’s announcement that it will merge with FranceÂ’s PSA Group. FCA denies any such scheme and tells Bloomberg the rising inventory is down to a new predictive analytics system designed to better square supply with demand from dealers that is helping the company save money and narrow the numbers of unsold vehicles. The company recently agreed to pay a $40 million civil penalty to the U.S. Securities and Exchange Commission to settle a complaint that it paid dealers to report fake sales figures over a span of five years. While no one is suggesting that FCA is in dire financial straits — the company saw higher than expected earnings in the third quarter and record profits in North America — the practice has strong historical precedent by Chrysler, which built up bloated inventories in the run-up to its two federal bailouts, in 1980 and 2009. It was also common at GM and Ford during the 2000s, when all three Detroit automakers struggled with excess manufacturing capacity and plummeting sales in the lead-up to the Great Recession. Back in 2012, CFO Magazine wrote about a report that explained automakersÂ’ rationale for the practice and how it works: Say fixed costs for a given factory are $100, and that the factory can make 50 cars. Consumers, however, demand only 10. Under absorption costing, if the company makes all 50 cars, its cost-per-car is $2. If it makes only up to demand, or 10 cars, the cost-per-car is $10. Although each car adds variable costs for steel and other parts, if those costs are low, the company still has an incentive to make more cars to keep the cost-per-car down.

Ford Expedition, F-150 Limited and Cadillac V Series | Autoblog Podcast #583

In this week's Autoblog Podcast, Editor-in-Chief Greg Migliore is joined by Consumer Editor Jeremy Korzeniewski and Assistant Editor Zac Palmer. First, they talk about the cars they've been driving, including the Ford Expedition, Ford F-150 Limited and the Mini Cooper JCW Knights Edition. Then they discuss the news, including Ian Callum stepping down from Jaguar, Cadillac's V cars and the latest in the saga between FCA and Renault. Autoblog Podcast #583 Get The Podcast iTunes – Subscribe to the Autoblog Podcast in iTunes RSS – Add the Autoblog Podcast feed to your RSS aggregator MP3 – Download the MP3 directly Rundown Cars we're driving: Ford Expedition Ford F-150 Limited Mini Cooper JCW Knights Edition Ian Callum resigns from Jaguar Cadillac V FCA backs down from Renault merger talks Feedback Email – Podcast@Autoblog.com Review the show on iTunes Related Video: