Touring Edition Cloth Seats Carfax 1-owner Automatic Trans Alloy Wheels on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Consumer Reports no longer recommends Honda Civic

Consumer Reports annual Car Reliability Survey is out, and yes, there are some big surprises. First and foremost? The venerable publication no longer recommends the Honda Civic. In fact, aside from the walking-dead CR-Z and limited-release Clarity fuel-cell car, the Civic is the only Honda to miss out on CR's prestigious nod. At the opposite end there's a surprise as well – Toyota and Lexus remain the most reliable brands on the market, but Buick cracked the top three. That's up from seventh last year, and the first time for an American brand to stand on the Consumer Reports podium. Mazda's entire lineup earned Recommended checks as well. Consumer Reports dinged the Civic for its "infuriating" touch-screen radio, lack of driver lumbar adjustability, the limited selection of cars on dealer lots fitted with Honda's popular Sensing system, and the company's decision to offer LaneWatch instead of a full-tilt blind-spot monitoring system. Its score? A lowly 58. The Civic isn't the only surprise drop from CR's Recommended ranks. The Audi A3, Ford F-150, Subaru WRX/STI, and Volkswagen Jetta, GTI, and Passat all lost the Consumer Reports' checkmark. On the flipside, a number of popular vehicles graduated to the Recommended ranks, including the BMW X5, Chevrolet Camaro, Corvette, and Cruze, Hyundai Santa Fe, Porsche Macan, and Tesla Model S. Perhaps the biggest surprise is the hilariously recall-prone Ford Escape getting a Recommended check – considering the popularity of Ford's small crossover, this is likely a coup for the brand, as it puts the Escape on a level playing field with the Recommended Toyota RAV4, Honda CR-V, and Nissan Rogue. While Ford is probably happy to see CR promote the Escape, the list wasn't as kind for every brand. For example, of the entire Fiat Chrysler Automobiles catalog, the ancient Chrysler 300 was the only car to score a check – there wasn't a single Dodge, Fiat, Jeep, Maserati, or Ram on the list. That hurts. FCA isn't alone at the low end, either. GMC, Jaguar Land Rover, Mini, and Mitsubishi don't have a vehicle on CR's list between them, while brands like Mercedes-Benz, Volvo, Nissan, Lincoln, Infiniti, and Cadillac only have a few models each. You can check out Consumer Reports entire reliability roundup, even without a subscription, here.

Ten of the greatest Super Bowl car commercials of all time

With an average of over 100 million viewers each year, the Super Bowl always has advertisers bringing out the big guns. And for those among us who don't know the difference between a safety and a touchback, those commercials can be one of the most compelling aspects of the annual ritual. Car companies, in particular, have a long history of making the most of the huge Super Bowl audience by debuting some of the most memorable advertisements that have ever aired on television. So, in preparation for the new batch we'll be seeing this coming Sunday, here's a collection of our favorites from the past. 10. Audi – The Godfather When Audi created this homage to the quintessential gangster movie to promote its newest sports car, the company managed to make a commercial that was simultaneously funny, a little bit disturbing, and most importantly memorable. 9. Maserati – Strike This one might start out slow, but it delivers not only with the wicked sound of the third-generation Ghibli's engine, but with an interesting message about hubris in the auto industry as well. 8. Nissan 300ZX Twin-Turbo – Dream Directed by none other than Ridley Scott (Blade Runner, Alien), this dystopian spot has centers around a narrator who explains that in his dream the bad guys are unable to catch him despite their best efforts by way of street bikes, race cars, and supersonic jets. While the twin-turbocharged 300ZX car was certainly a performance powerhouse to be reckoned with in its day, the concept and execution of this one does come off a little bit campy now – but in a good way. Then again, it is a dream, after all. 7. General Motors – Robot This one is unique in that it's genuinely depressing on a profound level. Who would've thought that the simulated suicide of a lovable, anthropomorphic car-building robot who has fallen on hard times could be such a downer? 6. Nissan – With Dad Although the debut season of its new LMP1 racer didn't exactly turn out how the team hoped it would, there's no denying that Nissan's depiction of a strained father-and-son relationship that eventually leads to redemption (and the introduction of the 2016 Maxima) tugs at the heartstrings. 5. Volkswagen – Big Day A surprisingly poignant advert, this one might be low on dialogue but it certainly gets its message across. And just as the dramatic soundtrack begins to lull the viewer into a sense of security, our expectations are upended. 4.