3 ms·
Tesla provides (two-step) Multi-Factor Authentication to be able to drive the car: - Unlock the car via BLE. Not able to drive away. - Enter a PIN-to-drive on
by Rygian 4y ago
Tesla provides (two-step) Multi-Factor Authentication to be able to drive the car:
- Unlock the car via BLE. Not able to drive away.
- Enter a PIN-to-drive on car screen, to turn on the virtual ignition. Able to drive away.
Unfortunately, the PIN to drive is not enabled by default.
Pin-to-drive can be bypassed through the Tesla mobile app, and this bypass is not relayed to the car via BLE but rather via the link between car and Tesla servers.
Therefore, someone with proximity to a locked phone can unlock the car, and someone with access to an unlocked phone can unlock the car and drive away.
- bin_bash 4y agoPIN to drive is so annoying to use. I had it enabled when I lived in Oakland to avoid a potential car-jacking but I could not wait to turn it off when I moved out of California.
- stevehawk 4y agoIf I'm going through the effort to do BLE relay.. then I can probably go through the effort to watch you enter a PIN through a camera lense though, right? (I'm not familiar with how Tesla's actually work)
- riffraff 4y agoI recall videos from years ago of people opening up a car via relay of proximity keys, recorded via some security camera. They literally just walked up with an antenna close to a house and the car parked in front of it opened. It's _very_ different from spying on someone to steal their PIN.
- Handytinge 4y agoI believe this is the relevant video (amusingly with a Tesla next to it): https://youtu.be/uxzm_6SYBFo https://youtu.be/uxzm_6SYBFo