Restored 1989 Jeep Yj Wrangler on 2040-cars

Auto blog

Feds fretting over remote hack of Jeep Cherokee

A cyber-security gap that allowed for the remote hacking of a Jeep Cherokee has federal officials concerned. An associate administrator with the National Highway Traffic Safety Administration said Thursday that news of the breach conducted by researchers Chris Valasek and Charlie Miller had "floated around the entire federal government." "The Homeland Security folks sent out broadcasts that, 'Here's an issue that needs to be addressed,'" said Nathaniel Beuse, an associate administrator with the National Highway Traffic Safety Administration. Valasek and Miller commandeered remote control of the Cherokee through a security flaw in the cellular connection to the car's Uconnect infotainment system. From his Pittsburgh home, Valasek manipulated critical safety inputs, such as transmission function, on Miller's Jeep as he drove along a highway near St. Louis, MO. The scope of the remote breach is believed to be the first of its kind. The prominent cyber-security researchers needed no prior access to the vehicle to perform the hack, and the scope of the remote breach is believed to be the first of its kind. A NHTSA spokesperson said the agency's cyber-security staff members are "putting their expertise to work assessing this threat and the response, and we will take action if we determine it's necessary to protect safety." A Homeland Security spokesperson referred questions about the hack to Chrysler. Fiat Chrysler Automobiles has already been the subject of a federal hearing this month, in which officials scrutinized whether the company had adequately fixed recalled vehicles and repeatedly failed to notify the government about defects. But cyber-security concerns are a new and different species for the regulatory agency. Only hours before the Jeep hack was announced by Wired magazine earlier this week, NHTSA administrator Dr. Mark Rosekind said hacking vulnerabilities were a threat to privacy, safety, and the public's trust with new connected and autonomous technologies that allow vehicles to communicate. NHTSA outlined its response to the cyber-security challenges facing the industry in a report issued Tuesday. In it, the agency summarized its best practices for thwarting attacks and said it will analyze possible real-time infiltration responses. But the agency's ability to handle hackers may only go so far.

Chrysler, Nissan looking into claim that their cars are industry's most hackable

A pair of cyber security experts have awarded the ignominious title of most hackable vehicles on American roads to the 2014 Jeep Cherokee, 2014 Infiniti Q50 and 2015 Cadillac Escalade.
Charlie Miller and Chris Valasek are set to release a report at the Black Hat hacking conference in Las Vegas, Automotive News reports. The two men found the Jeep, Caddy and Q50 were easiest to hack based not on actual tests with the vehicles, but a detailed analysis of systems like Bluetooth and wireless internet access - basically, anything that'd allow a hacker to remotely gain access to the vehicle's systems.
Considering this lack of hands-on testing, the pair acknowledge that "most hackable" could be a relative term - they point out that the vehicles may actually be quite secure.

FCA inline-six rumored to be real, headed for Jeep Wagoneer

In September, Allpar reported that that clues being dropped at Fiat- Chrysler headquarters, in the carmaker's factories, and on engineer resumes pointed to the development of an inline six-cylinder engine. The site has just proclaimed the rumor is reality, writing that the straight-six, "turbocharged to meet or beat 5.7 Hemi power ratings, with a smoother torque curve, is on the way." The motor's first outing is expected to be either the next-generation Jeep Grand Cherokee, debuting perhaps next year, or the Jeep Wagoneer, debuting in 2020 or 2021. "Tornado" is the purported codename for the power plant said to be just under three liters in displacement, expanding the family begun with the Global Medium Engine 2.0-liter turbo codenamed Hurricane. Engine bay constraints and a long use horizon mean engineers won't simply add two more cylinders to the GME, however. Allpar says the brief is to keep the Tornado GME-T6 — the alphanumeric for "turbocharged six" — no more than three inches longer than the Tigershark 2.4-liter four-cylinder. That means "major design changes" that could include a space-saving head, more closely spaced cylinders, and no cylinder liners. An FCA division called Comau could be called on for its "SmartSpray" plasma lining technology. Allpar muses that the standard version of the engine for Chrysler, Dodge, Jeep, and Ram could get a single twin-scroll turbocharger. Performance trims for Alfa Romeo and Maserati could get different heads and maybe twin turbos, an SRT version might also get both those tweaks. History shows that the Italian versions would make changes to the block, as well. Even so, the Tornado would be less expensive than any Ferrari-supplied V6. A straight-six would put FCA in company with current adopters BMW and Mercedes-Benz, future users like Jaguar, and perhaps Aston Martin. The engine would span the widest range of use cases in the U.S. carmaker's portfolio, though. Potential applications include being a base engine for Ram trucks, serving double duty as a base engine and 5.7-liter Hemi replacement for the Dodge Charger and Challenger, working in the high-end Jeeps, and as a properly hot trim — with Ferrari-designed heads — in the luxury Italian sports cars. The Alfa Romeo Giulia begs for just such motivation to fill the gap between the 280-hp, $42,695 Ti Sport RWD and the 505-hp, $73,700 Giulia Quadrifoglio RWD. And a twin-turbo inline-six in a Maserati Alfieri would stack up nicely with the Germans.