Connect with us

News

Details Behind the Tesla Model S Hack

Two researchers broke into the software of a Tesla recently. But there is good news behind the Tesla Model S hack. A fix was sent to all cars within days.

Published

on

Tesla Model S hack

Tesla Model S infotainment system also serves as the command center to the vehicle.

Last week, Marc Rogers, of content delivery network CloudFlare, and Lookout Mobile Security co-founder Kevin Mahaffey completed a digital break-in of a Tesla. But here’s the good news behind the Tesla Model S hack. Tesla quickly released an over-the-air firmware update, to every Model S ever manufactured, that would resolve the security holes uncovered by Rogers and Mahaffey.

The Tesla Hack

Rogers and Mahaffey had to dismantle the dashboard to gain access to an ethernet port. From there, they were able to connect directly to the CAN bus, the controller area network across which car data is sent and received.

After that, they chained together four separate vulnerabilities, first to gain access to the infotainment systems and then the touchscreen used to control vehicle functions. That let them make the speedometer disappear, alter the suspension, unlock the doors and the trunk, and make the windows go up and down. They were also able to shut down the car’s electric motor below 5 mph.

Above that speed, the dashboard screens would go blank but the car would shift into neutral, giving the driver time to find a safe place to bring the car to a stop. “Ironically, that means it’s the only car that can protect itself against a successful cyber attack,” Rogers noted.

Tesla’s Response

“Tesla has taken a number of different measures to address the effects of all six vulnerabilities reported by Lookout. And, we continue to develop further ways to harden our systems, informed by ongoing discussions with the security research community, as well as our own internal analysis. The update has been made available to all Model S customers through an OTA update. We will deploy this update to all vehicles by Thursday,” a spokesperson said in a statement e-mailed to Forbes.

Other auto manufacturers are following in Tesla’s footsteps by making internet updates available for their upcoming line of vehicles, but are starting years behind Tesla.

Rogers and Mahaffey say they also found two potential browser vulnerabilities that they exposed but did not exploit. Those flaws, resident in the WebKit browser engine, could possibly have enabled remote attacks, but Tesla’s new firmware update has resolved those issues as well.

Advertisement
-

Tesla CTO Toasts Hackers

While Rogers and Mahaffey were explaining their hacks at Def Con 23 last Friday, Tesla CTO J. B. Straubel made a surprise appearance to offer them a toast and personally thank them for their work. J.B. presented the duo with “Challenge Coins,” which will Tesla will be giving to any researcher who finds a serious security hole in their vehicles.

-

As cars acquire more digital capability, the opportunities for outside interference either by "white hat" hackers or those bent on doing actual harm will increase. Tesla, though, has the most robust program for identifying and resolving digital security issues of any manufacturer. That commitment should give every Tesla owner and prospective owner a full measure of confidence in the integrity of Tesla automobiles, now and in the future.

"I write about technology and the coming zero emissions revolution."

Advertisement
Comments

Elon Musk

SpaceX President to gift Trump Accounts her SpaceX stock

Gwynne Shotwell’s 2 million SpaceX shares are headed to children’s Trump Accounts starting this December.

Published

on

By

Concept rendering of SpaceX President Gwynne Shotwell overlooks the company’s Hawthorne, California headquarters as an American flag flies over the campus at sunset.

SpaceX President Gwynne Shotwell said Friday that more than 2 million SpaceX shares belonging to her and her husband, Robert, will be distributed to children’s Trump Accounts in December, turning a pledge she made over the summer into an actual transfer. “Robert and I are thrilled that our gift of over 2 million shares of SpaceX stock will be distributed to children’s Trump accounts in December!” Shotwell wrote on X, adding that the shares are “transferring to escrow as we speak.”

The first round goes to children aged 11 to 17 who live in ZIP codes where the median family income is $57,000 or less, along with kids in ZIP codes with too few residents for the Census to report that figure. Shotwell said those families should receive a notice by Monday, Reuters reported.

A second gift is expected to be finalized in the next few weeks. That round will cover eligible children in military families serving overseas, children in foster care, and more kids in Texas counties near the Shotwells’ home where median family income is $90,000 or less. Elon Musk replied to the announcement with “Cool” and a heart emoji.

Shotwell first announced the donation on July 6, less than a month after SpaceX priced its record IPO at $135 per share on the Nasdaq. IPO filings showed Shotwell owned about 12.6 million SpaceX shares, Quartz reported at the time, which makes the gift roughly one sixth of her stake. At the roughly $146 per share used to value Musk’s own pledge earlier this month, 2 million shares are worth about $290 million.

How the stock would actually reach the accounts had been an open question since July. Treasury guidance acknowledged that stock donations could flow into Trump Accounts, but it did not explain the mechanics for a program whose contributions default into an S&P 500 index fund. Shotwell thanked the Treasury, the IRS, the Dell Foundation, Greater Horizons, Invest America and the law firms Morgan Lewis and Gibson Dunn for “working over the past few months to make this happen.”

The transfer also works as a dry run for a far larger gift. On October 19, Musk said he would give one of his SpaceX shares to every kid in America next year and called it “the first of many.” With roughly 72 million children in the country, that pledge is worth about $10.5 billion. President Donald Trump thanked Musk the same day and said the shares would go through Trump Accounts, though neither SpaceX nor the Treasury has published how or when that distribution will happen.

Advertisement
-

Shotwell’s recipients also fill a gap in the program itself. Trump Accounts launched on July 4, and the $1,000 Treasury deposit only goes to babies born between 2025 and 2028. Teenagers aged 11 to 17 receive no government seed money, so for many of the families getting a notice on Monday, SpaceX stock will be the first asset in the account. The accounts convert into retirement accounts when the child turns 18.

Continue Reading

News

Tesla Full Self-Driving becomes main pillar of new Referral Program

Published

on

Credit: Tesla

Tesla Full Self-Driving is now the centerpiece of the company’s newly revised Referral Program, which launched on October 29.

Instead of referring people to purchase vehicles and the referrer receiving $250 in Tesla Credit, the new program now incentivizes Full Self-Driving subscriptions.

If a Tesla owner is on an FSD trial and uses a referral code to subscribe to Full Self-Driving, the person whose Referral Link was used will receive one month of FSD (Supervised). Their code can be utilized 12 times per year, with January 1 marking the reset date.

Realistically, this means that if your Referral Code is used by 12 Tesla owners on an FSD trial, you will receive a full year of FSD for free.

The previous program made it pretty difficult to get referrals; buying a vehicle is obviously a much larger financial strain than subscribing to Full Self-Driving for a month.

Of course, the previous Referral Program also offered a tangible benefit: $250 in credits you could use on Service, Supercharging, or anything in the Tesla Shop. It truly could pay for someone’s travel for a year. It recently bought me a new backpack and a T-shirt.

However, this new program is much more attainable for those who do not have a massive online presence of a slew of friends in the Tesla community who will use the code and max out subscriptions for vehicle purchases.

The Full Self-Driving suite will now be the keystone of the Referral Program, which makes it more inclusive and more fun for everyone with an awesome benefit.

It also gives the impression that Tesla is truly focused on FSD subscriptions, something that saw a tremendous increase in volume in Q3, as 75 percent of deliveries for the quarter came with an FSD subscription attached.

Full Self-Driving data is so instrumental to the suite’s improvement that this kind of program benefits Tesla as much as it does the consumer.

Advertisement
-
Continue Reading

Elon Musk

Tesla made napping in a Robotaxi easier with its latest update

Tesla’s quiet mode reaches Model Y Robotaxis, blacking out the screen for riders wanting rest.

Published

on

By

Tesla’s quiet mode, the setting that blacks out the screen for riders who want to rest, has moved beyond the Cybercab. A video posted Thursday by Spencer (@scotsrule08) shows the feature running in a Model Y Robotaxi on a night ride that appears to be in Dallas.

The rider taps a small crescent moon icon in the bottom right corner of the map screen. The map, media player, app shortcuts and Grok prompt disappear, leaving a dark display with “Arriving soon,” the destination and a line reading “Tap display to exit quiet mode.” Controls a passenger may still need, including Pull Over, cabin temperature, volume and Support, stay visible. One tap anywhere brings the full map back.

Quiet mode first showed up in the Cybercab last week, which Teslarati reported alongside a new rear camera view. Tesla has been trimming cabin noise in other ways too. On October 25, Spencer reported that Robotaxi turn signals now chime for the first four blinks and then go silent. Tesla has not published release notes for either change.

Elon Musk has been pitching this use for more than a decade. In October 2014, he said that “maybe five or six years from now I think we’ll be able to achieve true autonomous driving where you could literally get in the car, go to sleep and wake up at your destination,”

By 2017 he was setting a higher bar. Speaking at TED, Musk said the hard part was not making self-driving work 99.9 percent of the time, “because, like, if a car crashes one in a thousand times, then you’re probably still not going to be comfortable falling asleep. You shouldn’t be, certainly.”

Advertisement
-

Owners asked for something similar in their own cars. In December 2019, a Tesla owner requested a Nap Mode that would keep the climate running and wake the occupant with an alarm, and Musk answered “Ok,” as Teslarati covered at the time.

The line returned when the Cybercab was unveiled at the We, Robot event in October 2024. “We’ll move from supervised Full Self-Driving to unsupervised Full Self-Driving, where you can fall asleep and wake up at your destination,” Musk said. On Tesla’s first quarter earnings call in April 2025, he called it the deciding measure: “The acid test is, can you go to sleep in your car and wake up in your destination and I’m confident that will be available in many cities in the US by the end of this year,”

Tesla has run driverless Model Y rides in Dallas and Houston since April, so a passenger dozing off on the way home is now a realistic use of the button. Tesla is also offering new riders a free first trip in both cities, according to an in-app screen shared by tracker Ethan McKanna, and said on its third quarter call that Cybercab rides would launch in Dallas next month.

Continue Reading