4 ms·

More importantly it should mention that he was caught red handed stealing company secrets and sending them to others. This one is a bit better coverage of it: h

by laveur 8y ago

More importantly it should mention that he was caught red handed stealing company secrets and sending them to others. This one is a bit better coverage of it: https://arstechnica.com/tech-policy/2018/07/tesla-whistleblower-tells-sec-of-alleged-wrongdoing-at-gigafactory/ https://arstechnica.com/tech-policy/2018/07/tesla-whistleblo...

jonknee 8y ago
> More importantly it should mention that he was caught red handed stealing company secrets and sending them to others That is a roundabout way of describing a whistleblower. He didn't give information to competitors, he gave it to journalists and the SEC.
- deleted 8y ago
  [deleted]
- mr_toad 8y ago
  Which journalists? If he did, they don’t seem to be in a hurry to print what he gave them.
  - stephengillie 8y ago
    The most interesting part of this article is that Tesla is involved. Beyond that, it's a lone wolf bad actor looking for a Rainmaker[0]. [0] https://www.imdb.com/title/tt0119978/ https://www.imdb.com/title/tt0119978/
  - jonknee 8y ago
    I'm not sure if there is a list, but he definitely gave info to Business Insider and that is apparently what set Elon off: http://www.businessinsider.com/tesla-whistleblower-martin-tripp-elon-musk-waging-war-on-him-over-leaks-2018-6 http://www.businessinsider.com/tesla-whistleblower-martin-tr... This is the piece they used his info for: http://www.businessinsider.com/tesla-model-3-scrap-waste-high-gigafactory-2018-5 http://www.businessinsider.com/tesla-model-3-scrap-waste-hig...
    - iamshs 8y ago
      Why would anyone leak to BI? I is already hard to trust anything on that website.
- manicdee 8y ago
  Journalist singular. He only gave data to SEC after Tesla started trade secrets proceedings.
danso 8y ago
IIRC, Tesla's civil complaint accuses Tripp of writing "hacking software" but doesn't mention any other effects of the software besides exfiltration of data to unspecified third parties: https://arstechnica.com/tech-policy/2018/06/tesla-sues-employee-alleged-to-have-stolen-gigabytes-of-data/ https://arstechnica.com/tech-policy/2018/06/tesla-sues-emplo... > Beyond the misconduct to which Tripp admitted, he also wrote computer code to periodically export Tesla’s data off its network and into the hands of third parties. His hacking software was operating on three separate computer systems of other individuals at Tesla so that the data would be exported even after he left the company and so that those individuals would be falsely implicated as guilty parties.
- sjwright 8y ago
  From the perspective of a technologist it's clumsy and imprecise language, but it's not wrong. He wrote code that was explicitly designed to bypass the company's security and treacherously act in a way that caused damage to the company's interests, then he inserted it using other people's security credentials. The only elements missing between what he did and what a "real" hacker might have done is breach a technical security barrier rather than be a trusted employee.
  - danso 8y ago
    I don't begrudge Tesla for portraying facts as damning as possible to the opposing party -- that's what any litigant would do (and should do, I would think, although IANAL), as long as no deliberately false statements are made. So "technically true" is fine by me. But since their investigation is still ongoing, and they haven't felt the need to divulge more specific and damning assertions, then it's fair to consider what's currently left open to interpretation. "Wrote code" could include a wget cron job. "Bypass company's security" includes literally any activity done without company approval or authorization, including printing out files and putting them in his briefcase and walking out the building without announcing the fact. No one is really disputing that his alleged acts were "treacherous" to the company, or that they "caused damage to the company's interests" -- that would cover every conceivable form of whistleblowing. At this point, I don't see what it matters whether it was a "real" hack or not (though it's ironic you mention social engineering, since for too long that has been ignored as a real attack vector). He took info and disclosed it without company approval, now it's up to the courts to decide if that was legitimate and protected whistleblowing.
stephengillie 8y ago
> This one is a bit better coverage of it This article omits the crowdfunded defense and all quotes from the defendant, Martin Tripp. It also glosses over the purported issues: > Tripp told the SEC that Tesla had installed batteries with holes punctured in them, placed battery cells too close to one another and didn’t properly affix them. ... Tripp also alleged that the company systematically reused parts that had been deemed scrap or waste in vehicles. Is Tesla running an undercover salvage operation, to identify reusable components and reduce waste from their "totaled" cars?
- mchahn 8y ago
  > Is Tesla running an undercover salvage operation, to identify reusable components and reduce waste from their "totaled" cars? The economics of the situation would say no. The number of "totaled" teslas is a tiny fraction of the number they are producing.

by laveur 8y ago

jonknee 8y ago

> More importantly it should mention that he was caught red handed stealing company secrets and sending them to others That is a roundabout way of describing a whistleblower. He didn't give information to competitors, he gave it to journalists and the SEC.

deleted 8y ago
[deleted]
mr_toad 8y ago
Which journalists? If he did, they don’t seem to be in a hurry to print what he gave them.
- stephengillie 8y ago
  The most interesting part of this article is that Tesla is involved. Beyond that, it's a lone wolf bad actor looking for a Rainmaker[0]. [0] https://www.imdb.com/title/tt0119978/ https://www.imdb.com/title/tt0119978/
- jonknee 8y ago
  I'm not sure if there is a list, but he definitely gave info to Business Insider and that is apparently what set Elon off: http://www.businessinsider.com/tesla-whistleblower-martin-tripp-elon-musk-waging-war-on-him-over-leaks-2018-6 http://www.businessinsider.com/tesla-whistleblower-martin-tr... This is the piece they used his info for: http://www.businessinsider.com/tesla-model-3-scrap-waste-high-gigafactory-2018-5 http://www.businessinsider.com/tesla-model-3-scrap-waste-hig...
  - iamshs 8y ago
    Why would anyone leak to BI? I is already hard to trust anything on that website.
manicdee 8y ago
Journalist singular. He only gave data to SEC after Tesla started trade secrets proceedings.

danso 8y ago

IIRC, Tesla's civil complaint accuses Tripp of writing "hacking software" but doesn't mention any other effects of the software besides exfiltration of data to unspecified third parties: https://arstechnica.com/tech-policy/2018/06/tesla-sues-employee-alleged-to-have-stolen-gigabytes-of-data/ https://arstechnica.com/tech-policy/2018/06/tesla-sues-emplo... > Beyond the misconduct to which Tripp admitted, he also wrote computer code to periodically export Tesla’s data off its network and into the hands of third parties. His hacking software was operating on three separate computer systems of other individuals at Tesla so that the data would be exported even after he left the company and so that those individuals would be falsely implicated as guilty parties.

sjwright 8y ago
From the perspective of a technologist it's clumsy and imprecise language, but it's not wrong. He wrote code that was explicitly designed to bypass the company's security and treacherously act in a way that caused damage to the company's interests, then he inserted it using other people's security credentials. The only elements missing between what he did and what a "real" hacker might have done is breach a technical security barrier rather than be a trusted employee.
- danso 8y ago
  I don't begrudge Tesla for portraying facts as damning as possible to the opposing party -- that's what any litigant would do (and should do, I would think, although IANAL), as long as no deliberately false statements are made. So "technically true" is fine by me. But since their investigation is still ongoing, and they haven't felt the need to divulge more specific and damning assertions, then it's fair to consider what's currently left open to interpretation. "Wrote code" could include a wget cron job. "Bypass company's security" includes literally any activity done without company approval or authorization, including printing out files and putting them in his briefcase and walking out the building without announcing the fact. No one is really disputing that his alleged acts were "treacherous" to the company, or that they "caused damage to the company's interests" -- that would cover every conceivable form of whistleblowing. At this point, I don't see what it matters whether it was a "real" hack or not (though it's ironic you mention social engineering, since for too long that has been ignored as a real attack vector). He took info and disclosed it without company approval, now it's up to the courts to decide if that was legitimate and protected whistleblowing.

stephengillie 8y ago

> This one is a bit better coverage of it This article omits the crowdfunded defense and all quotes from the defendant, Martin Tripp. It also glosses over the purported issues: > Tripp told the SEC that Tesla had installed batteries with holes punctured in them, placed battery cells too close to one another and didn’t properly affix them. ... Tripp also alleged that the company systematically reused parts that had been deemed scrap or waste in vehicles. Is Tesla running an undercover salvage operation, to identify reusable components and reduce waste from their "totaled" cars?

mchahn 8y ago
> Is Tesla running an undercover salvage operation, to identify reusable components and reduce waste from their "totaled" cars? The economics of the situation would say no. The number of "totaled" teslas is a tiny fraction of the number they are producing.