Connect with us

News

Details Behind the Tesla Model S Hack

Two researchers broke into the software of a Tesla recently. But there is good news behind the Tesla Model S hack. A fix was sent to all cars within days.

Published

on

Tesla Model S hack

Tesla Model S infotainment system also serves as the command center to the vehicle.

Last week, Marc Rogers, of content delivery network CloudFlare, and Lookout Mobile Security co-founder Kevin Mahaffey completed a digital break-in of a Tesla. But here’s the good news behind the Tesla Model S hack. Tesla quickly released an over-the-air firmware update, to every Model S ever manufactured, that would resolve the security holes uncovered by Rogers and Mahaffey.

The Tesla Hack

Rogers and Mahaffey had to dismantle the dashboard to gain access to an ethernet port. From there, they were able to connect directly to the CAN bus, the controller area network across which car data is sent and received.

After that, they chained together four separate vulnerabilities, first to gain access to the infotainment systems and then the touchscreen used to control vehicle functions. That let them make the speedometer disappear, alter the suspension, unlock the doors and the trunk, and make the windows go up and down. They were also able to shut down the car’s electric motor below 5 mph.

Above that speed, the dashboard screens would go blank but the car would shift into neutral, giving the driver time to find a safe place to bring the car to a stop. “Ironically, that means it’s the only car that can protect itself against a successful cyber attack,” Rogers noted.

Tesla’s Response

“Tesla has taken a number of different measures to address the effects of all six vulnerabilities reported by Lookout. And, we continue to develop further ways to harden our systems, informed by ongoing discussions with the security research community, as well as our own internal analysis. The update has been made available to all Model S customers through an OTA update. We will deploy this update to all vehicles by Thursday,” a spokesperson said in a statement e-mailed to Forbes.

Other auto manufacturers are following in Tesla’s footsteps by making internet updates available for their upcoming line of vehicles, but are starting years behind Tesla.

Rogers and Mahaffey say they also found two potential browser vulnerabilities that they exposed but did not exploit. Those flaws, resident in the WebKit browser engine, could possibly have enabled remote attacks, but Tesla’s new firmware update has resolved those issues as well.

Advertisement
-

Tesla CTO Toasts Hackers

While Rogers and Mahaffey were explaining their hacks at Def Con 23 last Friday, Tesla CTO J. B. Straubel made a surprise appearance to offer them a toast and personally thank them for their work. J.B. presented the duo with “Challenge Coins,” which will Tesla will be giving to any researcher who finds a serious security hole in their vehicles.

-

As cars acquire more digital capability, the opportunities for outside interference either by "white hat" hackers or those bent on doing actual harm will increase. Tesla, though, has the most robust program for identifying and resolving digital security issues of any manufacturer. That commitment should give every Tesla owner and prospective owner a full measure of confidence in the integrity of Tesla automobiles, now and in the future.

"I write about technology and the coming zero emissions revolution."

Advertisement
Comments

Elon Musk

Elon Musk says Tesla’s Roadster demo could be a bang, quite literally

Musk says tonight’s Roadster demo will be a banger, maybe literally. The clues add up.

Published

on

By

tesla roadster elon musk flying

Elon Musk spent Wednesday and Thursday stacking teases on top of Tesla’s Roadster event, and the wording is getting harder to read as routine hype. Tesla streams the unveil tonight at 7:55 p.m. Central on X. Musk has called it “a candidate for greatest product demo of all time,” then added that “this demo will be a BANGER, probably metaphorically, though some chance literally.”

The “some chance literally” part is the line to watch. The Roadster has been tied to a SpaceX option package since 2018, and as we reported when the date was announced, the system is reportedly codenamed A71 and uses cold gas thrusters fed by a composite overwrapped pressure vessel, the same tank design SpaceX uses on Falcon 9. Musk has said a thruster equipped car could reach 60 mph in about 1.1 seconds. Cold gas thrusters firing at full output are loud, and reports ahead of the event say the car will be unmanned with spectators kept several hundred yards back. A literal bang could simply mean a demonstration that sounds like one, though it is also an admission that something could go wrong on stage.

Then there is “Timing is everything,” which Musk posted a day earlier. Stocktwits noted that 7:55 p.m. is 19:55 on a 24 hour clock, which echoes 1955, the year Marty McFly travels to in Back to the Future. Musk has made that connection before. In 2019 he replied to an animation of a flying DeLorean by saying the new Roadster “will actually do something like this.” Nothing from Tesla confirms the movie reference, but the stream time was chosen by someone, and Tesla has not been shy about this kind of wink.

Advertisement
-

Also, Tesla said it moved the event because it “can only be held outdoors,” and Musk then wrote that the demo was postponed “due to high winds,” as Teslarati covered at the time. A car running a standing start in front of a crowd shrugs off wind. A car that leaves the ground does not. The venue near SpaceX’s McGregor test site and the FAA airspace closures reported around the original date point the same way, though we also noted the delay could be a plain safety precaution. Musk has also described the new Roadster as “beyond movies, beyond imagination, beyond human, yet still made by humans on Earth.”

The only official figures remain the 2017 ones: 620 miles of range, a top speed above 250 mph, a 1.9 second 0 to 60 time, and prices of $200,000 for the base car and $250,000 for the Founders Series. Production is expected at Giga Texas in 2027 or 2028. Tesla has said the event will cover pricing, specifications and production targets, and its livestream preview has the full rundown. Tesla reports third quarter earnings on October 21, so whatever lands tonight will be fresh going into that call. We will have live coverage as soon as the stream starts.

Continue Reading

Elon Musk

Elon Musk breaks his silence on the Starlink impact to Ukraine drones

Musk says the US military and president set Starshield limits, not SpaceX, amid Ukraine complaints.

Published

on

By

Elon Musk says the speed limit cutting out Ukraine’s military Starlink terminals is not SpaceX’s decision. In a post on X Wednesday, Musk wrote that “Starshield systems are owned and controlled by the US government. Any limits on speed or usage are decided by the US military and ultimately POTUS.” He added that Starlink is a commercial service limited to civilian or defensive activities and “cannot be used for offensive military action, as doing so would be inappropriate for a commercial company.”

He was replying to Mykhailo Fedorov, Ukraine’s former defense minister, who had thanked Musk for restoring connectivity at speeds up to 160 km/h and said removing the Starshield limit entirely is “now critical for Ukraine’s defense.”

The complaint started Tuesday night, when Ukrainian officials said military terminals began losing service above roughly 100 mph. Presidential adviser Serhiy Beskrestnov said the defense forces got no warning and several missions were disrupted, as Teslarati reported earlier Wednesday. The 7th Rapid Reaction Corps told Reuters connections dropped for 10 to 20 seconds at speeds well below the limit, which made drones harder to control. Poland’s foreign minister, Radoslaw Sikorski, asked Musk on X whether he is “playing politics with your products again.”

Advertisement
-

That is why the Starlink and Starshield distinction matters. SpaceX introduced Starshield in 2022 as the government version of Starlink, with an initial focus on Earth observation, communications and hosted payloads. It won a Space Force contract in 2023 with a $70 million ceiling. In December 2024, the Pentagon moved Ukraine’s terminals onto Starshield, covering about 3,000 units across two contracts. Ukraine’s military connections therefore run through a service that Musk now says sits under Washington’s control.

SpaceX pitches subscription model for Trump’s Golden Dome

While Musk’s post describes who holds authority, it does not infer that anyone ordered the limit, and neither SpaceX nor the US government has confirmed who set it. Ukrainian officials have pointed to the timing, which follows President Trump’s push for an energy ceasefire and Musk’s Saturday post that “Zelensky has gone too far.” The BBC noted Trump denied threatening to restrict intelligence sharing with Kyiv, and no evidence has been presented that Washington requested the cap.

The episode also revives a promise from 2025. After Poland accused him of threatening Ukraine’s access, Musk said Starlink “will never turn off its terminals” and would not be used as a bargaining chip. Poland has since supplied more than 29,000 terminals to Ukraine. Teslarati also covered Kyiv’s search for Starlink alternatives in 2025, and the latest dispute gives that search new urgency.

Continue Reading

Investor's Corner

Tesla opens the Q&A for its biggest earnings call yet

Tesla opens its Q3 earnings Q&A, and Cybercab, Robotaxi, Optimus and regulators loom over October 21.

Published

on

By

Tesla has opened its shareholder question portal for the Q3 2026 earnings call, with the Say Q&A page already listing questions. Investors have until 4:00 p.m. EDT on October 20 to submit and vote on what management should answer.

The call is set for Wednesday, October 21. Tesla will post results after the market closes, with a live webcast at 4:30 p.m. CT, or 5:30 p.m. ET, through its investor relations site.

Say ranks questions by the number of shares behind the votes, which gives institutional holders extra weight over the retail crowd.

Ahead of Q2, retail investors asked why Robotaxi growth had stalled, when Cybercab would start customer rides, and where the Optimus Gen 3 ramp stood, while an institutional holder asked how Tesla and SpaceX would split Terafab duties. Cybercab has since answered one of those. Tesla said last week it has 300 plus Cybercabs serving Austin, up eightfold in 30 days, with Dallas named as the next city. The questions now are likely to move from when to how fast.

There is also a regulatory question hanging over the call. NHTSA has demanded sworn answers on how the pedal free Cybercab was certified against federal safety standards, with responses due October 30, nine days after the call. Whether an analyst raises it live is unknown, but it is the kind of exposure that tends to find its way into a Q&A.

The numbers will not be the main draw. Tesla already reported 486,532 deliveries and 13.7 GWh of storage for the quarter. Consensus sits around 43 to 45 cents per share on roughly $27.8 billion in revenue, according to Zacks, after a Q2 report that missed on EPS. Goldman Sachs, which holds a Neutral rating and a $360 target, argues the outlook for Robotaxi, FSD and Optimus will matter more to the stock than the quarter itself.

Advertisement
-

The call also lands six days after the rescheduled Roadster event, which Tesla will stream on X on Thursday, October 15, at 7:55 p.m. CT. If the Roadster shows up with a production date or a SpaceX thruster package, expect it to climb the voting list before the deadline.

Continue Reading