4 ms·
The password format is `ST<YY><L>0001<XYZ>`. * YY is a year, with the first year being 2015. So right now there's only five options. * L is the revision, of w
by tedivm 7y ago
The password format is `ST<YY><L>0001<XYZ>`.
* YY is a year, with the first year being 2015. So right now there's only five options.
* L is the revision, of which there is D, E, F, G, H, I- for six options total.
* XYZ is literally the last three digits of the SSID, which means you get that for free.
With all of this information it will take at most 30 attempts to log into the network.
- dpkonofa 7y agoYes, but the only time that this would be an issue is if someone, somehow decides to install it themselves or the Tesla technicians installing it forget to change the password which is very unlikely considering it's part of the standard process that you have to sign for upon install. You have to choose your own password either way or accept that you didn't.
- tooop 7y ago"The password can not be changed. It is not possible to disable the WiFi network." You can only change the password for management portal not the WiFi.
- zaroth 7y agoSo you can change the password to the management portal and prevent access to the API / admin panel which provides access to all of the mentioned settings?
- drewmol 7y ago>someone, somehow decides to install it themselves Funny! https://teslamotorsclub.com/tmc/threads/misbehaving-powerwall2.170558/ https://teslamotorsclub.com/tmc/threads/misbehaving-powerwal...
- morpheuskafka 7y agoCould always send out fake registration emails/postcards to collect serial numbers (which most people wouldn't consider especially sensitive info)...
- nemosaltat 7y agoI had a very similar thought regarding gaining API keys for Tesla vehicles after realizing I can get generate API key knowing only my Tesla Account user name and password only. Honeypot free WiFi at a Tesla Super Charger with a legit looking login page: “Free WiFi for Tesla Customers, Login to your Tesla account to access.” API End points include vehicle unlocking, speed limit settings, etc. Some are not available while the vehicle is motion, so at least there’s that. (Full disclose: I own a Model 3)
- NotSammyHagar 7y agoThat Honeypot vulnerability is true of any service that has a login. Go to say Comcast sales office or whole foods for Amazon.