2006 Jeep Wrangler Sport Sport Utility 2-door 4.0l on 2040-cars

Auto blog

Jeep in St. Louis hacked from Pittsburgh

One of America's most popular vehicles contains a security flaw that allows hackers to remotely commandeer it from anywhere on the planet. Cyber-security researchers Chris Valasek and Charlie Miller say they've accessed critical vehicle controls on a 2014 Jeep Cherokee that allowed them to remotely control critical vehicle functions like braking, transmission function, and steering. Automakers have downplayed the possibility a car could be remotely compromised, but the significance of the findings detailed Tuesday could cause them to reevaluate the threats posed to hundreds of thousands of vehicles already on the road. A key finding – the pair needed no physical access to the Jeep to pull off the attack. Valasek and Miller accessed the controls via a security hole in the Sprint cellular connection to Chrysler's UConnect infotainment system. In the course of their research, Valasek sat in his Pittsburgh home and remotely manipulated Miller's Jeep as he drove along a highway outside St. Louis. If you know a car's IP address, they say, a hacker could control it from anywhere. "We didn't add anything, didn't touch it," Valasek told Autoblog. "A customer could drive one of these things off a lot, and they'd have no clue it had these open attack surfaces." Remotely, he disabled brakes, turned the radio volume up, engaged windshield wipers and tampered with the transmission. Further, they could conduct surveillance on the Jeep, measuring its speed and tracking its whereabouts. They conducted the experiments over multiple breaches. They made their findings public on the same day the National Highway Traffic Safety Administration, the federal agency in charge of vehicle safety, released its latest report on the readiness of government and automakers to fend off these sorts of cyber attacks. Later today, two US Senators are expected to introduce legislation that would help consumers better understand the potential risks of car hacking. In the early stages of their research, Valasek and Miller found a security flaw in the car's wi-fi that allowed them to remotely manipulate controls from a range of about three feet. But in recent months, they found another vulnerability in the Sprint cellular connection in the UConnect system. That was a key breakthrough. "Lo and behold, we found we could communicate with this thing using cellular, and then more research, and 'Holy cow,' we're using the Sprint network to communicate with these vehicles," Valasek said.

Alfa Romeo will gain a Jeep Compass-based SUV

It was reported earlier this week that FCA would invest into its Italian factories to ramp up production at currently underutilized locations. Those plans have now been clarified with official information from FCA, as reported by Automotive News. The entire investment is worth $5.7 billion. First of all, Alfa Romeo will gain a new compact SUV based on the Jeep Compass architecture. The still-unnamed model will be available as a plug-in hybrid, and it will be built in Pomigliano, Italy. No U.S. availability has yet been announced, but it would not be odd to see the Compass-based model sold below the Stelvio in the States. The last time Alfa Romeo had anything similar in its model portfolio was when it offered Crosswagon-badged four-wheel-drive versions of the 156 and 159 wagons. As for the Jeep Compass itself, it will begin to be built at the Melfi plant in Italy. The rumored small "baby" Jeep slotting under the Renegade has not yet been officially mentioned. Fiat will introduce a battery electric 500, built in Turin, and the Pomigliano plant that will make the compact Alfa Romeo SUV will also be used to build a mild hybrid version of the Panda city car. The 500X will gain a PHEV variant. The Stelvio platform will also spawn a corresponding SUV for Maserati, and FCA also mentioned Maserati will introduce a new, unnamed model it will make in Modena. Automotive News quotes Italian press as saying this will be the Alfieri coupe and convertible, also offered as battery electric versions. Related Video:

Government Ending Jeep Investigation

The government is closing its investigation into older-model Jeeps with fuel tanks that could rupture and cause fires. The National Highway Traffic Safety Administration said Friday it has "no reservations" with Chrysler Group's plans to recall the vehicles. The agency is expected to release a report on its investigation in a few weeks. The decision ends an unusually public struggle between Chrysler and NHTSA. The agency asked Chrysler to recall 2.7 million Jeeps last June, contending that their gas tanks - which are positioned behind the rear axle - were at risk of rupturing and catching fire in rear-end crashes. Involved were Grand Cherokee SUVs from the 1993 to 2004 model years and Liberty SUVs from 2002 to 2007. Chrysler initially refused to recall the vehicles. The company said the rate of fuel leaks and fires after crashes was similar to comparable vehicles that were sold during the time in question. It was the first time in two years that an automaker had refused NHTSA's request for a recall. Chrysler later agreed to recall 1.56 million of the Jeeps and install trailer hitches on them to help protect the gas tanks. The company sent notices to the remaining customers saying their vehicles were fine if they have factory-installed or Chrysler-made trailer hitches. NHTSA said late Friday that it has been in close contact with Chrysler and will monitor the recall as it continues. Chrysler has told customers that it will start installing the hitches soon. "Consumers should have their vehicles serviced promptly once they receive final notification from Chrysler,"NHTSA said in a statement. In its own statement Friday, Chrysler said, "We share NHTSA's commitment to safety." NHTSA's outgoing chief, David Strickland, told The Associated Press in an interview last month that Chrysler had convinced NHTSA that the Jeeps were no more dangerous than similar vehicles sold at that time. "Those vehicles performed at a rate similar to their peers. That is the keystone analysis as to whether something poses an unreasonable risk to safety," Strickland said. Friday was Strickland's last day at NHTSA. He is joining Venable, a law firm. NHTSA began investigating the Jeeps at the request of the Center for Auto Safety, a Washington-based advocacy group. "It is tragic that NHTSA approved Chrysler's sham trailer hitch recall for Jeeps that explode in rear impacts," the Center for Auto Safety's director, Clarence Ditlow, said Friday.