2013 Chrysler 300c Varvatos Collection on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Why the Detroit Three should merge their engine operations

GM and FCA should consider a smaller merger that could still save them billions of dollars, and maybe lure Ford into the deal. Fiat-Chrysler CEO Sergio Marchionne would love to see his company merge with General Motors. But GM's board of directors essentially told him to go pound sand. So now what? The boardroom battle started when Mr. Marchionne published a study called Confessions of a Capital Junkie. In it, Sergio detailed the amount of capital the auto industry wastes every year with duplicate investments. And he documented how other industries provide superior returns. He's right, of course. Other industries earn much better returns on their invested capital. And there's a danger that one day the investors will turn their backs on the auto industry and look to other business sectors where they can make more money. But even with powerful arguments Marchionne couldn't convince GM to take over FCA. And while that fight may now be over, GM and FCA should consider a smaller merger that could still save them billions of dollars, and maybe lure Ford into the deal. No doubt this suggestion will send purists into convulsions, but so be it. The Detroit Three should seriously consider merging their powertrain operations, even though that's a sacrilege in an industry that still considers the engine the "heart" of the car. These automakers have built up considerable brand equity in some of their engines. But the vast majority of American car buyers could not tell you what kind of engine they have under the hood. More importantly, most car buyers really don't care what kind of engine or transmission they have as long as it's reliable, durable, and efficient. Combining that production would give the Detroit Three the kind of scale that no one else could match. There are exceptions, of course. Hardcore enthusiasts care deeply about the powertrains in their cars. So do most diesel, plug-in, and hybrid owners. But all of them account for maybe 15 percent of the car-buying public. So that means about 85 percent of car buyers don't care where their engine and transmission came from, just as they don't know or care who supplied the steel, who made the headlamps, or who delivered the seats on a just-in-time basis. It's immaterial to them. And that presents the automakers with an opportunity to achieve a staggering level of manufacturing scale. In the NAFTA market alone, GM, Ford, and FCA will build nearly nine million engines and nine million transmissions this year.

Marchionne offers belated apology for 'wop engine' comment

Automotive News reports Fiat-Chrysler CEO Sergio Marchionne has issued a written apology for his comments regarding his decision to stick with an Italian engine for the upcoming Alfa Romeo 4C. As you may recall, back in January, Marchionne was quoted as saying, "I cannot come up with a schlock product, I just won't. I won't put an American engine into that car. With all due respect to my American friends, it has to be a wop engine." The CEO penned an apology to the Italian American ONE VOICE Coalition for using the racial epithet, saying that he made the comment in jest. Marchionne also said he realizes his remarks were unacceptable.
ONE VOICE, an organization aimed at fighting discrimination and stereotyping of Italian Americans, thanked Marchionne, Chrysler and Fiat for the apology. Marchionne is an Italian-born Canadian citizen, and he's gotten in trouble for other comments in the past. In 2011, he called high interest rates Chrysler was paying to the Canadian government "shyster rates." He apologized a day later.