2014 Chrysler Town & Country Touring on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Chevy Bolt wins 2017 Green Car of the Year

We knew that a plug-in vehicle was going to win the 2017 Green Car of the Year award this year, given that all five finalists have a way to charge up. And when Ron Cogan, the editor and publisher of Green Car Journal, announced the winner – the 2017 Chevy Bolt EV – he said that the car itself represents one of those times in the auto industry when everything is about to change. Similar to the invention of the starter motor, things are about to get different. For now, though, the fact that the Bolt EV won an award sounds like the same old thing all over again. Just this week, it was named Motor Trends Car of the Year and to the Car And Driver Top 10 list. The other four finalists for Green Car of the Year included the Toyota Prius Prime, the Chrysler Pacifica, the Kia Optima (including hybrid and plug-in hybrid models) and the BMW 330e iPerformance. Last year, the winner was the 2016 Chevy Volt. Did Green Car Journal make the right selection this year? See the award ceremony below.

China-market Jeep Grand Commander coming to U.S. as a Chrysler?

There's nothing like winding down the year with news to spin heads, eh? Allpar cites "sources" as suggesting the Chinese-market Jeep Grand Commander will come to the U.S. as a Chrysler. This Speculation with a capital "S" has several rationales. The late Sergio Marchionne said Chrysler will focus on utility and not sell cars, making it fit for a new three-row crossover. The road-focused Grand Commander couldn't live up to U.S. perceptions of Jeep values, which is why the lateral brand move. A new model would give the Pentastar a second nameplate alongside the Pacifica, since the 300 sedan dies come 2020. And a big Chrysler school runner would allow the near-immortal Dodge Journey to end its life with something approaching dignity. The Grand Commander, a stretched version of our Cherokee with three rows, uses a 2.0-liter turbocharged four-cylinder with 231 horsepower and 258 pound-feet of torque. The 192-inch long SUV is ten inches longer than the Cherokee, and 2.2 inches longer than the Grand Cherokee. Carmakers bring a host of not-for-U.S. metal over here, so this doesn't signal production intent, but sharp eyes caught the Grand Commander on Michigan streets in March. The white high-rider carried its Chinese badging, and was bereft of camo other than tape over the door handles. Allpar says a domestic version wouldn't be built in China, but either in the Belvidere, Ill. plant that builds the Cherokee, or in facilities in Windsor, Canada or Toluca, Mexico. Should these events come to pass, Chrysler would soon have four models: Pacifica, a production version of Portal concept, a crossover based on the Pacifica, and the rebranded Jeep. Ready for more? Allpar also says there are "rumors of a Chrysler-badged crossover version of [the Dodge] Charger." FCA leaving Chrysler and Dodge out of the FCA five-year roadmap earlier this year leaves a vacuum ripe for, shall we say, Chinese whispers. We're not saying all of this won't happen, but put these prognostications in one place and it starts to read like a wrinkle in time, it's all so fabulous. Remember, the last we heard about the Dodge Journey, it was going to become an Alfa Romeo-based performance crossover headed to dealerships next year. The best we can suggest for now is to stay tuned. Related Video: