Relay attacks (not specific to BLE) had been demonstrated at least more than 3 years ago: https://news.ycombinator.com/item?id=18608452 https://news.ycombinator

Relay attacks (not specific to BLE) had been demonstrated at least more than 3 years ago: https://news.ycombinator.com/item?id=18608452 https://news.ycombinator.com/item?id=18608452 The lesson should have been to 1) pick or come up with an adequate protocol that includes tight time-of-flight checks or 2) not use proximity auth at all, if it is impossible to mitigate against relay attacks, in terms of physics and maths. I'm saying Tesla's engineers should have known better, by 1) paying attention to news in the industry; and 2) properly understanding BLE before choosing it as the auth protocol.