4 ms·
What lesson is there to learn? Why do you single out Tesla? The title is wrong, this is a generic attack against BLE.
by manicdee 4y ago
What lesson is there to learn?
Why do you single out Tesla?
The title is wrong, this is a generic attack against BLE.
- k_sze 4y agoRelay attacks (not specific to BLE) had been demonstrated at least more than 3 years ago: https://news.ycombinator.com/item?id=18608452 https://news.ycombinator.com/item?id=18608452 The lesson should have been to 1) pick or come up with an adequate protocol that includes tight time-of-flight checks or 2) not use proximity auth at all, if it is impossible to mitigate against relay attacks, in terms of physics and maths. I'm saying Tesla's engineers should have known better, by 1) paying attention to news in the industry; and 2) properly understanding BLE before choosing it as the auth protocol.