7 ms·
"General purpose computer used to hack something" is not really a story. This attack requires a salvaged ECU from another Tesla, that's a more interesting and i
by taylorfinley 6y ago
"General purpose computer used to hack something" is not really a story. This attack requires a salvaged ECU from another Tesla, that's a more interesting and informative part of the story in my opinion. "Using a computer salvaged from a wrecked Tesla to pop the door on any model X" would be a much more interesting take!
- pmiller2 6y agoTrue, but it's still kinda funny to hack a $50K car with a $50 computer.
- 0x008 6y agoMuch like you can hack a million dollar house with a sub-dollar lock pick?
- pmiller2 6y agoI had no idea a lock pick costing under a dollar could defeat a security system.
- beardedwizard 6y ago25 jig saw blades for 17.99, less than 1 dollar per pick.
- pmiller2 6y agoAnd? How does a jigsaw blade defeat a security system?
- beardedwizard 6y agohttps://www.art-of-lockpicking.com/homemade-lock-pick-materials/ https://www.art-of-lockpicking.com/homemade-lock-pick-materi..., but I suspect you just want to focus on "lock pick doesn't work on a Tesla", that's okay too. You can probably break the glass for under a dollar.
- pmiller2 6y agoNo, I was referring to the security system that's likely to be installed in the hypothetical million dollar home upthread. In what way is breaking the glass on a Tesla considered "hacking," anyway?
- beardedwizard 6y agoGets you access to the diagnostic port required to complete this attack.
- mortehu 6y agoDo you think for example most million dollar homes in New York City have "security systems" beyond locks?
- jstanley 6y agoThe point is that it isn't the tool defeating the security system, it's the person using it.
- pmiller2 6y agoTry defeating a security system with no tools, then. Let me know how far you get.
- colejohnson66 6y agoNot all million dollar houses have security systems. Multi million ones would though.
- michaelt 6y agoCalifornia's median house price is $706,900 [1] so a million-dollar home is only moderately above average. Simply wait until the house is empty and break a window with a rock. No tools required. Take 10 minutes to grab whatever valuables motivated you to rob the place, then get out of there. Even if they have a monitored alarm, it doesn't matter because you'll be gone before the response arrives. [1] https://www.prnewswire.com/news-releases/california-housing-market-continues-recovery-as-median-home-price-breaks-700-000-mark-car-reports-301133378.html https://www.prnewswire.com/news-releases/california-housing-...
- Shared404 6y agoI'm gonna be "that guy" and point out that the rock is a tool. Different alternative would be to watch a street and see who has keys hidden outside. That way you're using part of the system to defeat the system.
- 0x008 6y agoYes, the point I was trying to make that the large difference in value between tool and target that is implied is completely irrelevant.
- cptskippy 6y agoYou can hack any Ford with Securicode by entering a 3200 De Bruijn sequence. No fancy tools required.
- mr_toad 6y ago> True, but it's still kinda funny to hack a $50K car with a $50 computer. Once when I was a kid my mum locked her keys in the car and I opened it with a coat hanger. Not a $50k car, but not a $50 tool either - and more importantly no expertise required.
- hoistbypetard 6y agoSimilarly, they said: >This vulnerability has forced Tesla to issue an over the air patch for its Model X vehicles. And I'd consider it a more interesting story that "Tesla was able to address this grievous problem with an over the air patch." This kind of problem means it's time for a recall for any car I've ever owned, and I think that holds for the majority of the industry today, still.
- itsoktocry 6y ago>This kind of problem means it's time for a recall for any car I've ever owned, and I think that holds for the majority of the industry today, still. And yet we aren't inundated with brand-wide OEM recalls due to these other cars being hacked, despite the fact that there are hundreds of times more of them sold than Teslas every year. Why do you think that is?
- Roritharr 6y agoBecause, historically, such issues simply are not getting fixed. Basically every keyfob sold before the mid 2000s got hacked via various methods. That's just a fact car manufacturers have not addressed retroactively.
- cptskippy 6y agoVulnerabilities were found in Ford's 2019 key fobs. Let's not forget you can use a De Bruijn sequence of like 3200 numbers to unlock any Ford with Securicide. I don't know if Ford fixed it in newer models but as it was on 90% of vehicles they sold since the 90s, they opted to roll the dice and not recall.
- CamperBob2 6y agoThere should be a literary term for cases where a typo or malapropism is as incredibly apt as "Securicide."
- 6y ago
- rzzzt 6y agoI thought the "Swiss Army Knife of hacker tools" is curl.
- tinus_hn 6y agoFor what it’s worth, curl won’t help you connect to Bluetooth devices
- rkachowski 6y agoin my experience bluetooth hacking just sucks on everything, with maybe python pybluez being the least sucky. I'd be interested to know what could be on the pi though, what is the current state of bluetooth tooling for research?