2008 Jeep Grand Cherokee Laredo Sport Utility 4-door 3.7l on 2040-cars

Auto blog

Chrysler, Nissan looking into claim that their cars are industry's most hackable

A pair of cyber security experts have awarded the ignominious title of most hackable vehicles on American roads to the 2014 Jeep Cherokee, 2014 Infiniti Q50 and 2015 Cadillac Escalade.
Charlie Miller and Chris Valasek are set to release a report at the Black Hat hacking conference in Las Vegas, Automotive News reports. The two men found the Jeep, Caddy and Q50 were easiest to hack based not on actual tests with the vehicles, but a detailed analysis of systems like Bluetooth and wireless internet access - basically, anything that'd allow a hacker to remotely gain access to the vehicle's systems.
Considering this lack of hands-on testing, the pair acknowledge that "most hackable" could be a relative term - they point out that the vehicles may actually be quite secure.

Autoblog Podcast #387

Episode #387 of the Autoblog podcast is here, and this week, Dan Roth, Steven Ewing and Michael Zak talk about more General Motors recalls, upgrades and a diesel for the 2015 Ford Focus ST, and the BMW M235i scoring ahead of the Porsche 911 and Chevrolet Corvette Stingray in Consumer Reports testing. We start with what's in the garage and finish up with some of your questions, and for those of you who hung with us live on our UStream channel, thanks for taking the time. Check out the new rundown below with times for topics, and you can follow along down below with our Q&A. Thanks for listening! Autoblog Podcast #387: The video meant to be presented here is no longer available. Sorry for the inconvenience. Topics: GM recalls 8.4M more cars in North America Ford Focus ST upgrades and diesel CR says M235i is better than 911 In the Autoblog Garage: 2014 Jeep Grand Cherokee EcoDiesel 2014 Honda Accord Coupe V6 6MT Long-Term 2015 Subaru WRX 2014 Subaru XV Crosstrek Hybrid Hosts: Dan Roth, Steven Ewing, Michael Zak Runtime: 01:35:26 Rundown: Intro & Garage - 00:00 GM Recalls - 26:26 2015 Ford Focus ST - 41:56 BMW M235i - 50:24 Q&A - 59:16 Get the podcast: [UStream] Listen live on Mondays at 10 PM Eastern at UStream [iTunes] Subscribe to the Autoblog Podcast in iTunes [RSS] Add the Autoblog Podcast feed to your RSS aggregator [MP3] Download the MP3 directly Feedback: Email: Podcast at Autoblog dot com Review the show in iTunes Government/Legal Podcasts BMW Ford GM Honda Jeep Subaru Safety Diesel Vehicles Performance bmw m235i

Feds fretting over remote hack of Jeep Cherokee

A cyber-security gap that allowed for the remote hacking of a Jeep Cherokee has federal officials concerned. An associate administrator with the National Highway Traffic Safety Administration said Thursday that news of the breach conducted by researchers Chris Valasek and Charlie Miller had "floated around the entire federal government." "The Homeland Security folks sent out broadcasts that, 'Here's an issue that needs to be addressed,'" said Nathaniel Beuse, an associate administrator with the National Highway Traffic Safety Administration. Valasek and Miller commandeered remote control of the Cherokee through a security flaw in the cellular connection to the car's Uconnect infotainment system. From his Pittsburgh home, Valasek manipulated critical safety inputs, such as transmission function, on Miller's Jeep as he drove along a highway near St. Louis, MO. The scope of the remote breach is believed to be the first of its kind. The prominent cyber-security researchers needed no prior access to the vehicle to perform the hack, and the scope of the remote breach is believed to be the first of its kind. A NHTSA spokesperson said the agency's cyber-security staff members are "putting their expertise to work assessing this threat and the response, and we will take action if we determine it's necessary to protect safety." A Homeland Security spokesperson referred questions about the hack to Chrysler. Fiat Chrysler Automobiles has already been the subject of a federal hearing this month, in which officials scrutinized whether the company had adequately fixed recalled vehicles and repeatedly failed to notify the government about defects. But cyber-security concerns are a new and different species for the regulatory agency. Only hours before the Jeep hack was announced by Wired magazine earlier this week, NHTSA administrator Dr. Mark Rosekind said hacking vulnerabilities were a threat to privacy, safety, and the public's trust with new connected and autonomous technologies that allow vehicles to communicate. NHTSA outlined its response to the cyber-security challenges facing the industry in a report issued Tuesday. In it, the agency summarized its best practices for thwarting attacks and said it will analyze possible real-time infiltration responses. But the agency's ability to handle hackers may only go so far.