3 ms·

I would summarize it more as, the main vulnerability is the user's choice of password, the security of their email account(including phishing emails), or the po

I would summarize it more as, the main vulnerability is the user's choice of password, the security of their email account(including phishing emails), or the possibility that a tesla employee could fall for social engineering. None of which are actual vulnerabilities. There is the possibility that one day an issue could be found in one of their services, but these issues could be found in almost any modern service.

rootstrap 13y ago
...including our bank accounts, which we might have protected with a pretty bad password and might contain more money than it costs to buy a Tesla. Someone's Tesla will get stolen, just like anything gets stolen, but I find it difficult to imagine a mass theft of this or any particular vehicle. At any rate, this might give people to think about the passwords they use for things that aren't as expensive as a car.
hueving 13y ago
>None of which are actual vulnerabilities. That's an extremely dangerous position to take. Any reasonably secure system deals precisely with these problems through password policies and principle of least privilege. For example, successfully phishing a Tesla engineer's email credentials should not get you access to active vehicles. If this were the case, I would classify this as a major vulnerability because many things can result in access to someone's email.