Featured Threads

There's been almost no news coverage of a major security flaw discovered last week, approximately 6 days ago. Anyone with a Tesla can use their cell phone to unlock and then drive your car.

The flaw was introduced when Tesla updated their cell phone app and the car firmware to allow the car to treat the cell phone like a real key. It effect, it gives an authenticated cell phone the same privileges as a physical key in their wireless smart keyless entry system. That sounds cool, and it is if it's done correctly.

The problem appears to be that the Tesla programmers made a classic rookie mistake when coding the authentication, key exchange and authorization routines. The end result is that when you unlock your own Tesla, any other tesla within range of the blue tooth signal will accept your phone as authorized to provide entry. Oh, and it also thinks that your phone is authorized to allow you to start and drive the car.

In effect, Tesla created a built in "man in the...

Bob Wilson

Tesla Under Investigation by US for Detached Steering Wheels (TSLA) - Bloomberg


Tesla Under Investigation After Steering Wheels Fall Off While Driving

• Investigation follows two incidents with Model Y vehicles
• Preliminary evaluation covers 120,089 vehicles, NHTSA says

A Tesla Model YPhotographer: Bing Guan/Bloomberg
By
Rick Clough

March 8, 2023 at 7:37 AM ESTUpdated onMarch 8, 2023 at 9:52 AM EST
From


Follow the authors

+ Get alerts for
In this article
TSLA
TESLA INC
182.00
USD
-5.71-3.04%...