4 ms·

So, just to summarize and understand this article: Basically, the Tesla software has some holes that need to be patched and some security settings changed. Ho

So, just to summarize and understand this article: Basically, the Tesla software has some holes that need to be patched and some security settings changed. However, there has not been a proven method to penetrate the cars' software yet. I see this becoming a concern the in the coming months as more people purchase a Model S and more people start to tinker with it. I am intrigued to see if systems such as propulsion and braking are easily hacked considering how the whole car is basically networked. We shall see...

honksillet 13y ago
I'd summarize it as there are currently gaping security holes that leave the car immediately vulnerable to a determined hacker. The currently level of security is below what anyone could reasonably consider minimum enterprise level.
stingrae 13y ago
I would summarize it more as, the main vulnerability is the user's choice of password, the security of their email account(including phishing emails), or the possibility that a tesla employee could fall for social engineering. None of which are actual vulnerabilities. There is the possibility that one day an issue could be found in one of their services, but these issues could be found in almost any modern service.
- rootstrap 13y ago
  ...including our bank accounts, which we might have protected with a pretty bad password and might contain more money than it costs to buy a Tesla. Someone's Tesla will get stolen, just like anything gets stolen, but I find it difficult to imagine a mass theft of this or any particular vehicle. At any rate, this might give people to think about the passwords they use for things that aren't as expensive as a car.
- hueving 13y ago
  >None of which are actual vulnerabilities. That's an extremely dangerous position to take. Any reasonably secure system deals precisely with these problems through password policies and principle of least privilege. For example, successfully phishing a Tesla engineer's email credentials should not get you access to active vehicles. If this were the case, I would classify this as a major vulnerability because many things can result in access to someone's email.

honksillet 13y ago

I'd summarize it as there are currently gaping security holes that leave the car immediately vulnerable to a determined hacker. The currently level of security is below what anyone could reasonably consider minimum enterprise level.

stingrae 13y ago

I would summarize it more as, the main vulnerability is the user's choice of password, the security of their email account(including phishing emails), or the possibility that a tesla employee could fall for social engineering. None of which are actual vulnerabilities. There is the possibility that one day an issue could be found in one of their services, but these issues could be found in almost any modern service.

rootstrap 13y ago
...including our bank accounts, which we might have protected with a pretty bad password and might contain more money than it costs to buy a Tesla. Someone's Tesla will get stolen, just like anything gets stolen, but I find it difficult to imagine a mass theft of this or any particular vehicle. At any rate, this might give people to think about the passwords they use for things that aren't as expensive as a car.
hueving 13y ago
>None of which are actual vulnerabilities. That's an extremely dangerous position to take. Any reasonably secure system deals precisely with these problems through password policies and principle of least privilege. For example, successfully phishing a Tesla engineer's email credentials should not get you access to active vehicles. If this were the case, I would classify this as a major vulnerability because many things can result in access to someone's email.