Connect with us

News

Details Behind the Tesla Model S Hack

Two researchers broke into the software of a Tesla recently. But there is good news behind the Tesla Model S hack. A fix was sent to all cars within days.

Published

on

Tesla Model S hack

Tesla Model S infotainment system also serves as the command center to the vehicle.

Last week, Marc Rogers, of content delivery network CloudFlare, and Lookout Mobile Security co-founder Kevin Mahaffey completed a digital break-in of a Tesla. But here’s the good news behind the Tesla Model S hack. Tesla quickly released an over-the-air firmware update, to every Model S ever manufactured, that would resolve the security holes uncovered by Rogers and Mahaffey.

The Tesla Hack

Rogers and Mahaffey had to dismantle the dashboard to gain access to an ethernet port. From there, they were able to connect directly to the CAN bus, the controller area network across which car data is sent and received.

After that, they chained together four separate vulnerabilities, first to gain access to the infotainment systems and then the touchscreen used to control vehicle functions. That let them make the speedometer disappear, alter the suspension, unlock the doors and the trunk, and make the windows go up and down. They were also able to shut down the car’s electric motor below 5 mph.

Above that speed, the dashboard screens would go blank but the car would shift into neutral, giving the driver time to find a safe place to bring the car to a stop. “Ironically, that means it’s the only car that can protect itself against a successful cyber attack,” Rogers noted.

Tesla’s Response

“Tesla has taken a number of different measures to address the effects of all six vulnerabilities reported by Lookout. And, we continue to develop further ways to harden our systems, informed by ongoing discussions with the security research community, as well as our own internal analysis. The update has been made available to all Model S customers through an OTA update. We will deploy this update to all vehicles by Thursday,” a spokesperson said in a statement e-mailed to Forbes.

Other auto manufacturers are following in Tesla’s footsteps by making internet updates available for their upcoming line of vehicles, but are starting years behind Tesla.

Rogers and Mahaffey say they also found two potential browser vulnerabilities that they exposed but did not exploit. Those flaws, resident in the WebKit browser engine, could possibly have enabled remote attacks, but Tesla’s new firmware update has resolved those issues as well.

Advertisement
-

Tesla CTO Toasts Hackers

While Rogers and Mahaffey were explaining their hacks at Def Con 23 last Friday, Tesla CTO J. B. Straubel made a surprise appearance to offer them a toast and personally thank them for their work. J.B. presented the duo with “Challenge Coins,” which will Tesla will be giving to any researcher who finds a serious security hole in their vehicles.

-

As cars acquire more digital capability, the opportunities for outside interference either by "white hat" hackers or those bent on doing actual harm will increase. Tesla, though, has the most robust program for identifying and resolving digital security issues of any manufacturer. That commitment should give every Tesla owner and prospective owner a full measure of confidence in the integrity of Tesla automobiles, now and in the future.

"I write about technology and the coming zero emissions revolution."

Advertisement
Comments

News

Tesla Cybercab arrives with steep ownership fine print

Published

on

Credit: Tesla

Tesla’s long-promised Cybercab is finally available for personal purchase, at least for a select few in the Austin area. But it’s far from a straightforward ownership experience.

The $29,990 price tag comes with a stack of restrictions that redefine what “owning” the vehicle actually means. The two-seat, steering-wheel-free Robotaxi, previously limited to Tesla’s own fleet, now carries contractual terms that limit where it can go, how it can be used, and whether it can even move without an active paid subscription.

Opening Night of Orders

Late on November 13, Tesla announced that select customers were being invited to order a Cybercab for personal use.

Tesla Cybercab goes on sale for $29,990, slated for December deliveries

The estimated purchase price is $29,990 before taxes, paired with a non-refundable $1,000 deposit and an estimated December 2026 delivery in Austin, Texas. The first month of the required :Autonomy Subscription,” priced at $299 per month is included.

After that, the vehicle needs an active subscription to operate at all. The announcement confirmed that customer sales had begun, albeit on an invite-only basis rather than a public order page.

Advertisement
-

The Fine Print for Buyers

For those invited to order, the agreements (Cybercab Order Agreement, Terms of Use, and Autonomy Subscription Agreement) impose significant constraints. Major points include:

  • A mandatory Autonomy Subscription (currently listed at $299 per month on the order screen, first month included) is required; without it, the Cybercab will not operate.
  • Personal, non-commercial use only; ride-hailing, Robotaxi network participation, delivery, or rental requires separate written authorization or product enablement from Tesla.
  • Operation restricted to Tesla-enabled Robotaxi geofences and supported service areas, which the company can expand, shrink, or alter; the vehicle may be technologically prevented from operating outside them.
  • No unauthorized modifications (including wraps, window tint, or wheel changes) without Tesla or an authorized provider.
  • Restricted resale and transfer: written permission required, with contractual damages of at least $50,000 (or full transaction value if higher) for unauthorized sales; Tesla also reserves repurchase rights at a company-determined fair market value, with the owner covering return costs.
  • Safety or improper-use “strikeouts” (three or more) can trigger a one-week suspension of autonomous features without prorated refund.
  • Owners remain responsible for insurance, registration, charging, parking, and general cleaning; the subscription covers certain maintenance items such as tires, windshields, filters, and camera cleaning, plus limited towing.
  • Manual controls on the touchscreen allow only short-distance movement up to about 2 mph and require a valid driver’s license; they are not for public-road driving.

Why These Terms Might Exist

Tesla’s approach prioritizes control over a vehicle designed without traditional human controls and intended primarily as transport-as-a-service, something that Musk has hinted toward for some time now. Restricting commercial use and modifications could be as much of a software integrity, safety, and data collection effort as it is a safety effort.

Fleet consistency could also be in regulatory scrutiny early on in the Cybercab’s days of public operation.

The subscription model generates ongoing revenue beyond the low vehicle price and ensures the car remains connected and updatable, something that will keep the Cybercab as safe as possible as new updates roll out.

Buyback and resale limits reduce the risk of vehicles circulating outside Tesla’s operational and service ecosystem.

Advertisement
-

It apperas that personal ownership is secondary to the broader Robotaxi network strategy, as Musk has previously stated that the vast majority of Cybercabs would remain Tesla-owned.

Pickup Locations and Musk’s Pricing View

Initial deliveries are estimated for Austin, but personal vehicles are able to operate in any of Tesla’s Robotaxi geofences:

Those who have been invited to order can also have their personal Cybercab delivered to numerous locations in Texas, including:

  • Austin
  • Dallas
  • Houston
  • San Antonio
  • Fort Worth

As far as the monthly “Autonomy Subscription,” it appears Musk already wants it to be low. He acknowledged last night on X that the subscription price is too high. Along with detailing that the Cybercab will be available nationwide as regulatory approval is received, Musk said the monthly fee should match the cost of FSD and Premium Connectivity, which is about $115 per month.

The launch marks a milestone for unsupervised personal autonomous vehicles, but the fine print makes clear that buyers are purchasing a highly constrained asset whose usefulness is tightly bound to Tesla’s software, service network, and geographic approvals.

Continue Reading

News

Tesla Cybercab goes on sale for $29,990, slated for December deliveries

Published

on

Credit: Tesla

Tesla has officially put the Cybercab up for sale, revealing a bargain price and a $299 per month “Autonomy Subscription” that could hit customer hands as soon as December.

The offer requires a $299 monthly Autonomy Subscription, with the first month included in the purchase price, along with a $1,000 non-refundable order deposit. Tesla’s ordering interface shows deliveries targeted for Austin, Texas.

Tesla says that the Cybercab is making transportation more efficient, affordable and accessible than ever before, and that buyers can order their own Cybercab for personal use.

Advertisement
-

The Cybercab is Tesla’s dedicated robotaxi, a gold-finished, two-passenger vehicle without a steering wheel or pedals, designed from the outset for unsupervised autonomous operation. It has been in limited Robotaxi service in Austin since September 2026, operating alongside Tesla’s larger fleet of Model Y vehicles.

Production takes place at Gigafactory Texas, which launched earlier this year. Tesla has stated for some time that it planned to put Cybercabs on sale by the end of the year, and it looks like they will come through on that promise if everything goes according to plan.

The Autonomy Subscription is mandatory for the vehicle to operate because it is void of a steering wheel and pedals. Tesla notes that the subscription and regular vehicle maintenance are required, indicating that personal owners will depend on the company’s software and service infrastructure rather than traditional ownership models.

One month of the subscription is included with purchase and subsequent months are billed separately until canceled.

This limited personal-sales opening marks a shift from Tesla’s earlier emphasis on fleet and transport-as-a-service operations. During the Q3 2026 Earnings Call, executives indicated that the vast majority of Cybercabs would remain Tesla-owned and used for rideshare service, while still aiming to place some vehicles with customers by year-end.

Elon Musk has previously targeted a price below $30,000, which was a huge point of emphasis for the Cybercab being the central point of Tesla’s “transportation-as-a-service” model.

Advertisement
-

Availability remains restricted to invited customers rather than a public order page, and the initial deliveries are expected only in the Austin area where unsupervised Robotaxi operations are already active. Buyers will need to accept the geographic and operational constraints of current autonomous deployment, as the vehicle cannot be driven manually outside supported zones.

The move gives a small number of early buyers the chance to own Tesla’s dedicated autonomous vehicle at the long-discussed sub-$30,000 price point, while the bulk of production continues to support the company’s expanding Robotaxi network.

Continue Reading

News

SpaceX Starship Flight 15: How to watch the double catch attempt

Published

on

Credit: SpaceX

UPDATE: The FAA has granted the license for Starship Flight 15.

SpaceX is set to attempt its 15th test flight of Starship this evening from Starbase, Texas.

SpaceX is targeting Starship Flight 15 for a launch as soon as today, Friday, November 13, pending an FAA Flight License, during a 75-minute window that opens at 4:45 p.m. CT (5:45 p.m. ET) from Orbital Launch Pad 2 at Starbase, Texas. The flight remains pending final regulatory approval.

Advertisement
-

The mission, using Booster 22 and Ship 42, aims to achieve the first full recovery of an orbital launch system. Primary objectives include a tower catch of the Super Heavy booster roughly six and a half minutes after liftoff and the first-ever tower catch of a Starship upper stage after more than 22 hours in space.

SpaceX will perform Starship double catch attempt with Flight 15

Between those catches, Ship 42 is planned to enter a low Earth orbit of about 275 km, complete roughly 14 orbits, and deploy 26 next-generation Starlink V3 satellites (Starlink Group 31-2). Three of those satellites carry cameras to inspect the ship’s heat shield in orbit and help controllers decide whether the vehicle is healthy enough for a return to the tower.

Advertisement
-

Contingency ocean splashdown options exist if either stage is not cleared for catch.

To watch the attempt, check the link to the broadcast in both X posts in this article. The live webcast is scheduled to begin about 30 minutes before liftoff and is planned to continue through the ship catch the next day, with the possibility of extended onboard views during the orbital coast via Starlink.

Because the schedule is dynamic, check back here or on our social media channels for the latest updates on window timing and regulatory status. A successful dual catch would mark a major milestone toward making Starship a rapidly reusable rocket capable of frequent flights.

Advertisement
-
Continue Reading