3 ms·
tl;dr: It's a captive portal that goes to a phishing site that asks for Tesla account credentials. It's not exploiting any vulnerabilities.
by josephcsible 3y ago
tl;dr: It's a captive portal that goes to a phishing site that asks for Tesla account credentials. It's not exploiting any vulnerabilities.
- beardyw 3y agoIf it can be exploited it's a vulnerability. It remains a vulnerability even when Tesla says it's not.
- josephcsible 3y agoThe only thing being exploited is the owner's brain.
- e44858 3y agoThe vulnerability: "Mysk said the unsuspecting Tesla owner isn't even notified when a new phone key is set up. And, though the Tesla Model 3 owner's manual says that the physical card is required to set up a new phone key, Mysk found that that wasn't the case, according to the video." They should at least notify you if someone logs in from a new device.