9 ms·
Security researcher hacks Tesla via Bluetooth LE keyless entry vulnerability
- edcrfv 6y agoThat site is pure cancer. I opened the article in the same tab and then pressed back to come back to news.ycombinator.com, but it just showed me a bunch of blog spam from taboola which seemed to have hijacked the back button :-/
- jve 6y agoNot for me on mobile with adblock and pihole. But there are many sites that hijack back button and is disgusting.
- syntaxing 6y agoBecause of this annoying practice, I disable automatic redirects on Firefox. I highly recommend doing the same!
- jonny383 6y agoInstall uBlock.
- fakedang 6y agoUse Brave. I've just used it since the Friday last week and it's already stopped over 10k ads and saved me 400 MB. In one week!
- taylorfinley 6y ago"General purpose computer used to hack something" is not really a story. This attack requires a salvaged ECU from another Tesla, that's a more interesting and informative part of the story in my opinion. "Using a computer salvaged from a wrecked Tesla to pop the door on any model X" would be a much more interesting take!
- pmiller2 6y agoTrue, but it's still kinda funny to hack a $50K car with a $50 computer.
- 0x008 6y agoMuch like you can hack a million dollar house with a sub-dollar lock pick?
- pmiller2 6y agoI had no idea a lock pick costing under a dollar could defeat a security system.
- beardedwizard 6y ago25 jig saw blades for 17.99, less than 1 dollar per pick.
- pmiller2 6y agoAnd? How does a jigsaw blade defeat a security system?
- beardedwizard 6y agohttps://www.art-of-lockpicking.com/homemade-lock-pick-materials/ https://www.art-of-lockpicking.com/homemade-lock-pick-materi..., but I suspect you just want to focus on "lock pick doesn't work on a Tesla", that's okay too. You can probably break the glass for under a dollar.
- jcims 6y agoIt wasn’t clear from the article, did they need physical access to the key fob? Feels like some details are missing and the raspberry pi angle is pointless.
- roelschroeven 6y agoThere's more detail in this Wired article: https://www.wired.com/story/tesla-model-x-hack-bluetooth https://www.wired.com/story/tesla-model-x-hack-bluetooth. They need to be within 5 m of the keyfob for 90 to reprogram it.
- mhh__ 6y ago5m seems far enough to do some RF magic from long distance (with the budget, obviously)
- renw0rp 6y agoAnnoying title for the article. The point is that tesla cars are easy to break into, not that you need a raspberry pi to do so. But having a "raspberry pi" in the title gives you probably more views :|
- flyinghamster 6y agoAdding the "Raspberry Pi" clickbait also sounds like a smear attempt to me. We already have enough of the "let's restrict general purpose computing because bad people" narrative.
- mavhc 6y agoIsn't the point that Tesla cars aren't easy to break into, you have to buy a ECU and use bluetooth, and it was fixed, whereas most cars are subject to a simple radio signal jam and replay, and are never fixed. Wonder why it only applies to a Model X though
- newacct583 6y agoYou need a salvaged controller from another Tesla, I'm not sure if that's "easy". It's also been patched already, per the article. And in any case, the exploit here was that the door was opened, something that locksmiths have traditionally been offering as a paid service for decades with no computer hardware at all. Really, the vulnerability angle isn't so interesting here at all. But it's a cool hack.
- woahAcademia 6y agoYou don't buy a Tesla for Quality. Tesla could put their logo on a Kia and it would sell to this demographic. If there is anything to learn from Tesla it's about marketing, not automotive.
- pwagland 6y agoHate to say it, but this simply isn't true. What Tesla brought to the game was insane performance for Electic cars, _and_ OTA updates for maps and software. And _just as importantly_ they actually update the software in meaningful ways. Kia have none of these things. Your statement is very similar to "Apple could slap their logo on any Chromebook and sell it for 2K!".
- woahAcademia 6y agoApple could. Gucci could. Heck I've even seen GM put their logo on the Nissan Van. Also "simply not True" is you being incorrect. OTA always existed, it's just EXTREMELY expensive to send OTA. Tesla only has a few vehicles so it's cheap compared to Ford. And they take today's Stockholders money to pay for those updates. Source- I did automotive telematics.
- traverseda 6y agoWhy are OTA updates so expensive? The price isn't prohibitive in other fields. I don't see how adding more cars would make that process more expensive, as if anything I'd expect a lot of the cost to come from QA and with more cars that cost gets spread out better.
- salawat 6y agoI'd hazard life critical systems requiring a greater degree of assurance that the software update actually arrived at it's destination. Maintaining connectivity to a great number of network end nodes is not a trivial endeavor, even before you get into them being able to move around. But who am I kidding. Someone probably just pays pays for a SIM to embed in an ECU with remote wake-up to phone home and grab an update, and the cost comes from all the telco networks that need to be contracted with to forward the traffic back home.
- deleted 6y ago[deleted]