2014 Jeep Cherokee Latitude on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Fiat Chrysler and the UAW reach tentative labor deal

DETROIT — Fiat Chrysler Automobiles and the United Auto Workers (UAW) union on Saturday announced a tentative agreement for a four-year labor contract, a boost for the automaker as it works to merge with France's Groupe PSA. Italian-American Fiat Chrysler and PSA, the maker of Peugeot and Citroen, last month announced a planned $50 billion merger to create the world's fourth-largest automaker. The tentative agreement with Fiat Chrysler, which is subject to ratification by the union members, follows contracts that the UAW already concluded with Ford Motor Co and General Motors Co. The deal with GM followed a 40-day strike in the United States that virtually shuttered GM's North American operations and cost the automaker $3 billion. The UAW on Saturday said the contract with Fiat Chrysler included a commitment from FCA to invest $9 billion, creating 7,900 new jobs over the course of the four-year contract. Of the $9 billion, $4.5 billion was announced earlier this year, to be invested in five plants and creating 6,500 jobs. Detailed terms of the tentative agreement were not released, but they are expected to echo those under the new contracts with GM and Ford, as the UAW typically uses the first deal as a pattern for the others. "FCA has been a great American success story thanks to the hard work of our members," UAW acting President Rory Gamble said in a statement. "We have achieved substantial gains and job security provisions for the fastest growing auto company in the United States." Ratification is not a sure thing. Rank-and-file UAW members at FCA in 2015 rejected the first version of a contract. In addition, a lawsuit related to a federal corruption probe could also raise doubts among union members about the terms agreed. The federal corruption led GM to file a racketeering lawsuit against FCA, alleging that its rival bribed union officials over many years to corrupt the bargaining process and gain advantages, costing GM billions of dollars. FCA has brushed off the lawsuit as groundless. Under the UAW's deal with GM, the automaker agreed to invest $9 billion in the United States, including $7.7 billion directly in its plants, and to create or retain 9,000 UAW jobs. Ford's contract included commitments to invest more than $6 billion in its U.S. plants and to create or retain more than 8,500 UAW jobs. The deals with GM and Ford also created a pathway to full-time employment for temporary workers and left healthcare insurance coverage unchanged.

Feds accuse Fiat Chrysler, UAW of conspiring to break labor laws

DETROIT — Top officials of Fiat Chrysler Automobiles and the United Auto Workers union conspired to violate U.S. labor laws, federal prosecutors alleged in a court document, saying a former executive at the automaker knew bribes paid to union leaders were designed to "grease the skids" in labor negotiations. U.S. Justice Department officials for the first time called the company and the union "co-conspirators" in a document related to a guilty plea agreed by former Fiat Chrysler director of employee relations Michael Brown. The document was filed with the U.S. District Court in Detroit on May 25. Its contents were reported by the Detroit News on Wednesday. Brown pleaded guilty to one count of concealing a felony. The plea agreement stated that he knew Fiat Chrysler executives authorized $1.5 million in improper payments and travel, liquor, cigars and other goods for UAW officials who served on the union's negotiating committee. Prosecutors say FCA executives paid UAW representatives to influence union business. including collective bargaining on contracts ratified in 2011 and 2015. The government contends money was run through the UAW-Chrysler National Training Center, via false charitable donations and training center credit cards. Fiat Chrysler Chief Executive Officer Sergio Marchionne has said in the past that the misconduct "had nothing whatsoever to do with the collective bargaining process" and the "egregious acts were neither known to nor sanctioned" by the company. Fiat Chrysler had no further comment Monday. Outgoing UAW President Dennis Williams told union leaders at a conference in Detroit on Monday "our leadership team had no knowledge of the misconduct — which involved former union members and former auto executives — until it was brought to our attention by the government." Brown pleaded guilty on May 25, according to court documents, and will be sentenced on Sept. 20. Five other people have pleaded guilty in the government's ongoing investigation into the UAW and Fiat Chrysler, including the wife of a late UAW official, two other former UAW employees, former Fiat Chrysler vice president Alphons Iacobelli and another former Fiat Chrysler employee. Reporting By David Shepardson and Nick CareyRelated Video: Government/Legal UAW/Unions Chrysler Dodge Fiat Jeep RAM FCA