on 2040-cars

Auto blog

Harsh words from senators over Chrysler's delay in reporting hack

The federal agency charged with protecting American motorists wants to know more about how hackers remotely commandeered and controlled a Jeep Cherokee. Hours after Fiat Chrysler Automobiles recalled 1.4 million cars affected by a flaw in their cellular connections, officials with the National Highway Traffic Safety Administration said Friday they'll further probe the defect by conducting a formal recall query investigation. "Opening this investigation will allow NHTSA to better assess the effectiveness of the remedy proposed," the agency said in a written statement. The remedy works, said Chris Valasek, one of the researchers who first discovered the security flaw. After testing for the vulnerability again Friday, he wrote on Twitter: "Looks like I can't get to @0xcharlie's Jeep from my house via my phone. Good job FCA/Sprint!" From his Pittsburgh home, Valasek had previously accessed and controlled co-worker Charlie Miller's Jeep along a St. Louis highway. Researchers have demonstrated remote hacks before, but the scope and severity of the Jeep vulnerability was unprecedented. The recall for a cyber threat was the first of its kind. Although a software patch and changes made by cellular provider Sprint appeared to fix the problem, news of the exploit and Chrysler's response brought a fresh round of consternation on Capitol Hill, where federal lawmakers had already expressed concerns about automotive cyber security. The Jeep hack elevated their concerns to a new level. "Cyber threats in cars are real and urgent, no figment of the imagination, as this huge recall demonstrates," said Sen. Richard Blumenthal (D-CT). "Incredibly, Chrysler delayed disclosing this chilling cyber-security danger egregiously and inexcusably, and strong sanctions are appropriate to send a message that other auto manufacturers will heed." Chrysler had known about the security gap since October, and Sen. Ed Markey (D-MA) wondered why it took the company so long to let customers know they were at risk. "Despite knowing about this security gap for nearly nine months, Chrysler is only now recalling 1.4 million vehicles to fix this vulnerability," he said. That's a potential pitfall for Chrysler, and something NHTSA will likely address in its investigation. Automakers are supposed to report safety-related defects to the agency within five days of discovery. But according to a chronology of events Chrysler submitted in its recall paperwork, it didn't inform NHTSA until July 15.

Question of the Day: Ever consider driving a minivan?

Since I'm supposed to know something about cars, it happens all the time: friends and relatives ask me advice about what kind of vehicle they should get. Very often, the only type of vehicle that can check every item on their wish list (e.g., hauls lots of people and stuff, gets good fuel economy, has great crash-test ratings, can take four Great Danes camping, and so on) is a modern minivan... and, of course, nobody wants to hear this. I'm not a minivan person, they will wail, and so they end up with a cramped, fuel-swilling SUV or a not-so-space-efficient minivan-in-disguise CUV. So, is it worth becoming one of those minivan people in order to get the incredible usefulness of these masterpieces of vehicle engineering, or do you hold your head high and drive something that doesn't quite meet your needs? Related Video: Auto News Design/Style Chrysler Honda Toyota Minivan/Van question of the day questions

Stellantis is official: FCA and PSA merger finally sealed

MILAN — Fiat Chrysler and PSA sealed their long-awaited merger on Saturday to create Stellantis, the world's fourth-largest auto group with deep enough pockets to fund the shift to electric driving and take on bigger rivals Toyota and Volkswagen. It took over a year for the Italian-American and French automakers to finalize the $52 billion deal, during which the global economy was upended by the COVID-19 pandemic. They first announced plans to merge in October 2019, to create a group with annual sales of around 8.1 million vehicles. "The merger between Peugeot S.A. and Fiat Chrysler Automobiles N.V. that will lead the path to the creation of Stellantis N.V. became effective today," the two automakers said in a statement. Shares in Stellantis, which will be headed by current PSA Chief Executive Carlos Tavares, will start trading in Milan and Paris on Monday, and in New York on Tuesday. Now analysts and investors are turning their focus to how Tavares plans to address the huge challenges facing the group – from excess production capacity to a woeful performance in China. Tavares will hold his first press conference as Stellantis CEO on Tuesday, after ringing NYSE's bell with Chairman John Elkann. FCA and PSA have said Stellantis can cut annual costs by over 5 billion euros ($6.1 billion) without plant closures, and investors will be keen for more details on how it will do this. Marco Santino, a partner at consultants Oliver Wyman, said he expected Tavares to disclose the outlines of his action plan soon, but without divulging too many details at first. "He has proven to be the kind of person who prefers action to words, so I don't think he will make loud statements or try to over-sell targets," he said. Like all global automakers, Stellantis needs to invest billions in the years ahead to transform its vehicle range for the electric era. But other pressing tasks loom, including reviving the group's lagging fortunes in China, rationalizing its huge global empire and addressing massive overcapacity. "It will be a step by step process, also to allow the market to better appreciate every single move. I don't think we will have all the details before one year," Santino said.