Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

The 2019 Jeep Grand Wagoneer looks like a Grand Cherokee on steroids

It's a special day for Jeep fans. Thanks to the same dealer meeting leak that gave us a look at the 2018 Jeep Wrangler JL, here is our first glimpse of the new Grand Wagoneer. When it arrives for 2019, this three-row crossover SUV will be the top model in Jeep's range. We knew the Grand Wagoneer would be expensive – Jeep CEO Mike Manley said not to rule out prices upwards of $130,000 for this Range Rover fighter – but now we know it looks like it wants to pick an actual fight with its competitors. What's visible of the front and rear styling is very reminiscent of the current Grand Cherokee, but it's muscled up a bit and gets a set of sinister seven-element headlights. The seven-light theme is carried to the rear as well, and we have a feeling the number is a not-so-subtle reference to the seven-slot grille that all Jeeps wear. That said, here the grille is a short, wide-mouth affair that is a bit of a departure from those of other models. And there's a lot of brightwork in these renderings, not just on the grille but for similar pieces that connect the exhaust tips in the rear and tow-hook surrounds up front. Either by design or engineering, the Grand Wagoneer also looks wider than the two-row Grand Cherokee. The Grand Wagoneer will be about the size of the Dodge Durango three-row crossover and will be based on the platform used by the next-generation Grand Cherokee. The GC and Durango currently share a platform based on one used by Mercedes for its large SUVs, and it is not yet known whether the new Jeeps will use an evolution of that platform or something new. Hemi V8 and diesel and gas V6 engines are the likely powertrain options, and we wouldn't be surprised to see a Hellcat-powered version of this mean-looking luxury SUV at some point. Or at least we can hope. Related Video: Featured Gallery 2019 Jeep Grand Wagoneer Dealer Leak Spy Shots Image Credit: KGP Photography Design/Style Spy Photos Jeep Crossover SUV

Mopar stuffs the Jeep Performance Parts catalog with 200 accessories

We don't get to savor the all-new 2018 Jeep Wrangler until sometime in November. Today at SEMA, however, we get to sample some of the more than 200 Jeep Performance Parts that Mopar designed for America's off-road mascot. Among the totally new offerings are a roof rack and a stowable tailgate table. The roof rack can accommodate the standard carriers, such as those for skis, snowboards, and bicycles. The tailgate table flips down from the rear hatch, creating a workspace complete with a beverage holder. Urbanites can get down with the mesh and solid bikini tops, a cargo tray that extends to the back seat and doubles the surface area, logoed door sills, and new fuel doors. Redesigned tire covers flash new graphics and incorporate an aperture for the backup camera. When distant GPS points require low-range four-wheeling, redeveloped goodies include 17-inch beadlock aluminum wheels, a two-inch lift kit that permits 37-inch tires when paired with high-top fender flares, thicker, wider rock rails coated with Ram bedliner material, and hard-secured grab handles. Five-inch LEDs throwing 4,080 lumens and seven-inch LEDs throwing 8,000 lumens work with a new mount kit to attach to windshield, winch guard, or frame rails. An auxiliary switch bank with a dedicated power distribution center means convenient access to controls for auxiliaries like those lights and the Mopar Warn winch. A screen protector keeps dust and debris from damaging the Uconnect screen. When the inevitable boo-boo happens, grab for help from the improved emergency first-aid kit and roadside assistance kit. Mopar says the entire range of Jeep Performance Products will be available at dealerships as soon as the Wrangler goes on sale. Related Video: Featured Gallery Jeep Performance Parts: SEMA 2017 View 17 Photos Related Gallery 2018 Jeep Wrangler Mopar accessories View 14 Photos Image Credit: Live photos copyright 2017 Drew Phillips / Autoblog.com Auto News Aftermarket SEMA Show Jeep SUV Off-Road Vehicles SEMA 2017