2023 Jeep Wrangler 4-door High Altitude 4x4 on 2040-cars

Auto blog

FCA will pay you to hack its systems

FCA is willing to pay you to hack its cars, as long as you tell the company how you did it. In an effort to enhance cybersecurity and prevent future incidents like the Jeep Cherokee hack last year, FCA announced it's working with Bugcrowd to find vulnerabilities in its vehicle software. Bugcrowd labels itself as a crowdsourced application security testing company. Users, or independent security researchers as Bugcrowd calls them, can find exploits or vulnerabilities in FCA systems. They then submit the information to Bugcrowd, who in turn supplies the info to FCA. The goal is to update systems and close any possible security breaches. FCA is offering bounties from $150 to $1,500 to any Mr. Robot types, with payment based on the size and severity of the flaw. FCA wants hackers to focus specifically on the UConnect website and the company's iOS and Android apps. No bounties will be given for anything outside the scope of those three things. Bugcrowd says it will not take any legal action against anyone who submits an exploit. While we think it's good that the company is taking steps to address these problems, it's not a groundbreaking maneuver. Other companies employ similar systems. Earlier this year, both Tesla and Uber announced that they're willing to offer up to $10,000 to hackers who find vulnerabilities in their system. For years, Microsoft has been paying hackers to find exploits. It also seems that FCA took its time to announce this plan, considering the Jeep hack happened nearly a year ago. If the partnership works, we can expect other automakers to make similar deals. Related Video: This content is hosted by a third party. To view it, please update your privacy preferences. Manage Settings. News Source: FCA, Bugcrowd Jeep Safety Technology Infotainment Smartphone FCA

Blake Anderson drives an over-the-top patriotic Jeep

Comedian Blake Anderson is seeing growing success as one of the stars and co-creators of the Comedy Central show Workaholics. Not surprisingly, when you get your own TV show, there's a deep desire to celebrate with a big purchase, a car perhaps. Anderson did just that, but as opposed to plunking his money down on a Porsche or Mercedes-Benz, he took a much more patriotic route. Anderson described his ride as "an American Jeep" in an interview with Conan O'Brien, and he didn't mean that it was from the AMC years of the off-road brand's ownership. Instead, this one is as patriotic as they come thanks to a beautifully regal bald eagle covering the hood with the nation's flag as the background running up at least to the windshield. Hear Anderson's entire story of buying this red, white and blue off-roader in the video above.

Jeep hackers return to take over your steering wheel

Last year, security researchers Charlie Miller and Chris Valasek made headlines by remotely hacking a Jeep, killing the transmission and applying the brakes while Wired reporter Andy Greenberg was behind the wheel and driving in traffic. The hack led to a 1.4 million-vehicle recall for Fiat Chrysler and new jobs at Uber's Advanced Technology Center for Miller and Valasek. Despite the cushy new gigs, the two of them apparently aren't done hacking Jeep Cherokees for sport. In their latest exploit, the pair can gain even more control over a vehicle, but it would also be extremely difficult to pull off in a real-world setting. Here's the harrowing part first: Miller and Valasek can do more than just apply the brakes at low speed or cut the transmission this time around. Now they can turn on the parking brake, mess with the cruise control and hijack the auto-parking system to jerk the steering wheel a dangerous 180 degrees while the car is in motion. It looks about as frightening as it sounds: This content is hosted by a third party. To view it, please update your privacy preferences. Manage Settings. Although it's not hard to see how that would make for a very terrifying drive, there's a big grain of salt that comes along with it: Miller and Valasek actually used the same model 2014 Jeep Cherokee as the original demonstration, but without the software patch applied. Or, as Wired put it, "imagine an alternate reality," where a fix had never been made. Unlike before, the latest hack requires a physical connection plugging their laptop into the Jeep's OBD-II diagnostic port under the dash. The team also had to update the Jeep with their own firmware to disable some of the car's built-in safety checks before they could get much control. In other words: In order to get hacked, Jeep owners would first need to roll back their car's firmware to an older version, invite someone to remove security features and then also let them ride shotgun with a computer. Or, as Engadget's resident security expert Violet Blue wrote on Twitter, it's sort of a non-threat. This content is hosted by a third party. To view it, please update your privacy preferences. Manage Settings. That said, The Verge points out that it may still be possible to exploit OBD-connected wireless dongles like the Metromile Tag, Automatic Link or other similar devices currently marketed by insurance companies.