Featured Threads

Which levels had Heated seats that were leather?

There's been almost no news coverage of a major security flaw discovered last week, approximately 6 days ago. Anyone with a Tesla can use their cell phone to unlock and then drive your car.

The flaw was introduced when Tesla updated their cell phone app and the car firmware to allow the car to treat the cell phone like a real key. It effect, it gives an authenticated cell phone the same privileges as a physical key in their wireless smart keyless entry system. That sounds cool, and it is if it's done correctly.

The problem appears to be that the Tesla programmers made a classic rookie mistake when coding the authentication, key exchange and authorization routines. The end result is that when you unlock your own Tesla, any other tesla within range of the blue tooth signal will accept your phone as authorized to provide entry. Oh, and it also thinks that your phone is authorized to allow you to start and drive the car.

In effect, Tesla created a built in "man in the...

Bob Wilson