Technology

59534 readers

3195 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

695

Teslas Can Be Stolen by Hijacking WiFi at Charging Stations, Researchers Find (futurism.com)

submitted 8 months ago by catculation@lemmy.zip to c/technology@lemmy.world

95 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] givesomefucks@lemmy.world 110 points 8 months ago* (last edited 8 months ago) (6 children)

Once logged in, the hackers could even create a new "phone key," allowing them to come back to the vehicle later and drive off with it without raising suspicion.

That's because Tesla doesn't actually notify the user if a new key is created, as Mysk and Bakry point out in their video.

Mysk tested out the vulnerability on his own Tesla and found that he was easily able to create new phone keys without ever having access to the original, physical key card. That's despite Tesla promising that wasn't possible in its owner's manual.

Once he told Tesla about his findings, the EV maker underplayed the vulnerability, telling him it was all by design and "intended behavior," an assertion that Mysk called "preposterous" in his interview with Gizmodo.

"The design to pair a phone key is clearly made super easy at the expense of security," he said.

Mysk argues it would be easy for the automaker to plug the vulnerability by simply notifying users if a new phone key is created.

Weird the dudes name is so close to Musk, but it sounds like this would be something incredibly easy for Tesla to fix, they're just not doing it and denying it's a problem...

[–] Albbi@lemmy.ca 34 points 8 months ago

I'm surprised Tesla hasn't gotten to the point yet where it's just replying with 💩, but I guess this response wasn't too far off from that.

[–] evergreen@lemmy.world 12 points 8 months ago

Same kind of dictator mentality I'd expect from Musk himself honestly. Doesn't fix the problem because he's insulted that someone else pointed it out. Cutting off his nose to spite his face. He's good at that. I'm really surprised the board still tolerates his shit.

[–] redditron_2000_4@lemmy.world 6 points 8 months ago (1 children)

It’s something they “broke” recently. You used to require a physical card to pair a new phone key. I noticed when I replaced my phone that it was no longer needed. They should be able to fix it easily, but I’m sure they won’t.

You can enable pin to drive to reduce the risk, but if you have the creds and there is no 2FA on the account then you can use the app to bypass it.

[–] AA5B@lemmy.world 1 points 8 months ago (1 children)

Really, crap, when I brought my Tesla home I promptly put the keycards somewhere secret even to me, expecting to never need them again

[–] redditron_2000_4@lemmy.world 2 points 8 months ago

You can get two more for $10 from teslas site… but I believe you need one to program them. My wife and I keep ours in our wallets, just in case phone keys don’t work or get stolen.

[–] BakerBagel@midwest.social 3 points 8 months ago

Announcing and oarch security flaws might cause stock prices to dip. And Daddy Musk wint have that

[–] noobface@lemmy.world 3 points 8 months ago

Easy to fix moving forward, but a really public admission of "oops" to all current phone key users who will have to reauth their phones.

[–] Lucidlethargy@sh.itjust.works 0 points 8 months ago

That's because everything Musk touches turns to fucking shit. Everyone is aware of this in 2024.

STOP USING AND BUYING THIS GUYS BULLSHIT, YOU FUCKING IDIOTS.