on 2040-cars

Auto blog

How to update and secure a vulnerable Chrysler Uconnect system

If you own one of the 1.4 million vehicles affected by the recent Chrysler software recall, you may want to watch this video. In it, we explain how to get the latest infotainment software loaded onto the 8.4-inch Uconnect system. The recall was a response to the findings of researchers who were able to hack into and remotely control a 2014 Jeep Cherokee through its cellular connection. Although Fiat Chrysler has worked with Sprint to plug most of the holes on the carrier side, there are still some vulnerabilities that only this latest software version can patch. Owners have three options to get the update: download it now, wait for a USB stick in the mail, or take the vehicle to an FCA dealer. Chrysler will be sending USB sticks loaded with the software update to customers. Anyone with an internet connection and a USB stick of their own with at least 4 GB capacity can speed things up by downloading the patch from the Uconnect website. We cover that process from start to finish in the video, with the final portion still applicable to those using the FCA-supplied USB stick. If after watching this you still don't want to tackle the patch yourself, you can take your vehicle to the dealer to have it done. Also note that this process is the same for all Uconnect updates, not just the one patching the exploits. Our demonstrator vehicle is a 2015 Ram 1500 pickup. The procedure should be very similar on other products with the 8.4-inch Uconnect system, with only the location of the USB port varying. Once you have the USB stick with the software on it – either after having downloaded it yourself or receiving it in the mail from Chrysler – the installation process is relatively simple. It takes about 15 minutes to perform the update; we edited out the wait in the video. To check whether or not your car's 8.4-inch Uconnect system is running the latest software, go to System Information on the touch screen's Settings page and look at Software Version. The update related to the recall is version 15.17.5. Related Video: Recalls Chrysler Dodge Jeep RAM Safety Technology Infotainment Videos Original Video hacking

Australian Jeep marketing stunt goes awry [w/video]

Jeep fans in Australia are none too happy with the off-road brand following a contest that saw ten new Cherokees sold for just $10,000 Australian (about $9,400), roughly a quarter of the vehicle's price Down Under.
The contest, called the "World's Most Remote Dealership," gave Aussies the chance to snag an ultra-affordable Cherokee Longitude (analogous to the US-spec Latitude trim), provided they could get to a secret dealership in the remote wilderness of western New South Wales, near the border with the state of South Australia.
In order to get the exact location of the dealership, though, potential customers needed to download an app, which would release a phone number 9:00 AM AEST on Thursday (7:00 PM EDT, Wednesday night). The first ten people who could call in and prove they could afford to finance $10,000 and get to the remote dealership, were given the location of the remote dealership.

Aptly-named Hooligans motorcycle gang charged with stealing 150 Jeep Wranglers

Nine members of the Tijuana, Mexico-based Hooligans motorcycle gang are facing federal charges, accused of stealing 150 Jeep Wranglers in San Diego County, then moving them across the border, where they were sold or stripped for parts. "The joy ride is over for these Hooligans," said Deputy U.S. Attorney Mark Conover. "For many of us, our cars are our most valuable possessions," he said. "These arrests have put the brakes on an organization that has victimized neighborhoods in a different way, by stealing something very personal, something that has required a lot of sacrifice to purchase." Conover said the gang also stole dozens of motorcycles. The indictment alleges that the gang used old-fashioned shoe leather, a high-tech device, and a specific Chrysler dealership to pull off the thefts. San Diego County faced a rash of Wrangler thefts in 2014. Conover says most of the Jeeps were stolen in the middle of the night, and most were equipped with alarms, yet no alarm ever went off. Police were perplexed about that until they caught a break. On Sept. 26, 2014, a Jeep was stolen out of a driveway in Rancho Bernardo, where a security camera showed the thieves' method. Based on what they saw in the surveillance footage, officers sent Chrysler a list of 20 Jeeps that had been stolen and asked whether anyone had requested duplicate keys - and sure enough, a duplicate had been issued for all 20 - and all from the same dealership, in Cabo San Lucas, Mexico. The indictment alleges that the Hooligans would case a specific Jeep days ahead of stealing it, and would take down its vehicle identification number. Somehow they managed to obtain the secret key codes that would allow them to request a duplicate key for that particular Jeep. During the theft, the indictment says, the Hooligans would disable the alarms system, program the duplicate key using a handheld device, then simply drive away. The fact that Jeeps' engine bays can be easily accessed because of their external latches made the job even easier. (Authorities recommend Jeep owners purchase aftermarket locking latches.) Three of the gang members have been arrested. One was already in custody when two others were arrested this week, one of them at San Diego's massive San Ysidro border crossing. The six others facing charges are still at large and believed to be in Mexico. Seven are US citizens, while two are from Mexico. The collective value of the thefts is estimated at $4.5 million.