News
Chinese Find Obvious Tesla Model S Security Flaw
A group of Chinese hacker reported that the Model S has a security flaw. We say, welcome to reality. Any system that is connected, whether physical or wireless, has a potential security flaw.
Model S has a security flaw
The Tesla Model S security flaw is making its round lately. It has to make you wonder when reports on security exploits related to computer systems appear. Modern computers, including cars and their wireless technologies have many open ports and channels. A long, long time ago, when I was learning about Novell servers, (yes, I’m that old) my teacher taught me that a truly un-hackable computer is one without a mouse, keyboard or Internet connection. It helped to understand that once a port is open, either with a keyboard of wireless connection, even if secured, there is still a potential vulnerability.
The Model S open connections mean potential security flaw
The Model S is not really a car. It’s more of a future template of what every car will soon look like. It is more of a rolling computer on wheels, which handles quite well. But the Tesla Model S is always connected, either to Tesla Motors, or the Internet, as well as many other types communication is happening. What this means is that the Model S is, by definition, as vulnerable as its weakest point in the security chain. So is it any wonder to hear that the Model S, the most Internet-connected and remotely-connected electric vehicle (EV) on the market today, has a major security flaw? It shouldn’t. Anything connected cars, even Tesla’s Model S means it can be hacked and has security flaws.
According to TransportEvolved, Sina Weibo announced a Chinese Internet security company called Qihoo 360, found Tesla Model S security flaw. This is one of the most common security issue with anything connected and it means a crafty hacker can remotely access and unlock your Tesla Model S, as well as sound the horns, use the headlights, wipers, and even the panoramic sunroof. Are you scared yet? At the very least, if it rains, you might get annoyed.
Making sense of the Tesla Model S security flaw
Once we take a few steps back, we can see a pattern emerging from this Tesla Model S security flaw news. First, it was announced a day before one of the biggest security conference in China, the 2014 SyScan +360. Add to this that the conference is awarding a $10,000 prize to whoever successfully hacks into a Tesla Model S, and you get a better picture of what is happening. The Tesla Motors Model S is as secured as can be, and will continue to be more secured as each individual security flaws are discovered.
Tesla Motors was quick to reassure us with the following: “While Tesla is not associated with the conference and is not a sponsor of the competition, we support the idea of providing an environment in which responsible security researchers can help identify potential vulnerabilities. We hope that the security researchers will act responsibly and in good faith.” Whether open or closed sources, nothing is 100% secured if it is connected.
But joking apart, news of the Tesla Model S security flaw is a welcome relief in a world of over-confidence and side-blinders. In the meantime, as user and hacker feedback rolls in, Tesla will rewrite some APIs and take a closer look at some of the certificates it uses. So far, if sounding your horn, opening your doors and sunroof are the biggest threats, we can say that the latest Tesla Motors Model S security flaw is only a potential… so far.
Elon Musk
Tesla Roadster owners to get “Flying Stunt Mode” and looping track access
Musk says Roadster owners can command the unveiling stunts autonomously, with a Texas looping track.
Elon Musk says owners of the new Tesla Roadster will be able to ask the car to perform the stunts Tesla showed at its unveiling, with the car doing the driving itself. Musk made the comment Saturday in a reply on X to tech blogger Robert Scoble, and he added a promise of a looping track at Tesla’s Texas headquarters.
Scoble had argued that the person in the Roadster is not really driving it. In his description, the driver operates a computer that tells another computer what to do, with steering, braking and acceleration all handled by wire. Musk answered, “True. You will be able to ask the Roadster to perform any of the tricks shown autonomously, as it will be sentient. Also, we will have a wild looping track (crazier even than Hot Wheels) at our Texas HQ where you can test out your Roadster.”
@Scobleizer True.
You will be able to ask the Roadster to perform any of the tricks shown autonomously, as it will be sentient.
Also, we will have a wild looping track (crazier even than Hot Wheels) at our Texas HQ where you can test out your Roadster.
— Elon Musk (@elonmusk) October 17, 2026
At the October 15 event outside Waco, the car drove up a curved ramp until it was upside down, flew off on cold gas thrusters, flipped and landed. It also hovered over a Cybercab, Cybertruck, Semi, Model Y and Model 3 while moving. As we noted in our breakdown of the three Roadster configurations, Musk said at the event that the car “literally is just going to puff itself up” to perform the maneuvers whenever an owner wants. Saturday’s reply adds that the car would run them on its own.
Tesla has described some of the hardware that would make that possible. The Roadster uses steer by wire with a yoke, and its cold gas thrusters rely on electric actuators for small adjustments in flight. A fan system under the car creates suction, which Tesla says is strong enough to hold it upside down, a setup we covered in our look at the Roadster’s fan system and thrusters.
Musk did not say when an autonomous stunt feature might arrive, how it would work, or what he means by sentient. He also gave no size, location or opening date for the Texas track. Production is planned for Giga Texas in 2027 or 2028, and Tesla says the car is not approved for public road use. The Rocket version, the one built to fly, is invite only.
The comment follows a week of Musk teasing the event, including his claim that the demo would be a banger, which we covered before the stream. Tesla reports third quarter earnings on October 21, and shareholders can submit and vote on questions through the Say portal until 4 p.m. EDT on October 20, according to our earnings Q&A preview. A question about autonomous Roadster stunts and the Texas track would be a quick way to get specifics from management.
Elon Musk
How to use Grok Bot to block spam calls and texts
Musk told users to ask Grok Bot to scrub their phone numbers from spam lists.
Elon Musk has a new use case for Grok Bot, and it is the spam call. On Thursday he replied to an X user named Arash with a short instruction: “Ask your @Grok @Bot to remove your phone number from spam call & text lists!” Arash had said he got tired of the calls, had an AI bot find his number on listing sites and file removal requests, and packaged the process as a free skill for others.
The skill is called Spam-Call Scrubber, which is described to find a phone number on people search sites and data brokers, submits the opt outs, completes the confirmation emails those sites send back, and rechecks on a schedule the user picks. Using it requires the Grok Bot app. The pitch is time saved, since most broker opt outs sit behind separate forms on separate sites.
Ask your @Grok @Bot to remove your phone number from spam call & text lists!
— Elon Musk (@elonmusk) October 15, 2026
Musk said Grok Bot now gives each bot its own email address, and that it can detect scam emails. On Thursday he also said SpaceX would make users whole if the bot botches a purchase or leaks a card, then told users to shop away from Amazon after the retailer blocked the agent, as Teslarati reported. The terms of service we reviewed at the time put responsibility for what an agent does on the user.
For Tesla owners, Grok Bot is not just a phone app. Tesla brought Grok Bot into its vehicles on September 22, and we argued earlier this week that the Cybercab’s real advantage may be the errands it runs during a ride. Every Cybercab and the rest of the Model Y Robotaxi fleet has it enabled. The more routine tasks like this one become, the more a rider has reason to hand over something personal in the back seat.
The new Spam-Call Scrubber skill can be downloaded for free and works on sites that honor removal requests, while noting that listings can reappear, and illegal robocallers do not check any registry. Whether Spam-Call Scrubber cuts anyone’s call volume is something the first wave of users will find out, and Musk’s endorsement guarantees that wave is coming.
Investor's Corner
Tesla’s flying Roadster just revealed something bigger than the car
Analysts say the Roadster demo puts a Tesla and SpaceX merger back on the table.
The Roadster unveiling near Waco ended Thursday night, and by Friday morning much of the investor reaction had less to do with the car than with who owns the rocket technology inside it.
Wedbush analyst Dan Ives said the event “puts the Tesla/SpaceX relationship on the table in a tangible way,” pointing to the propulsion, pressure vessel and control hardware sitting on a Tesla product. Gene Munster of Deepwater Asset Management called the demo “a ridiculous display of engineering” with “no commercial value” beyond embarrassing traditional automakers, though he said it showed Musk wants the two companies together.
The more specific forecast came a day earlier from Barclays. Analyst Dan Levy told clients a deal could be announced before Tesla’s annual meeting, which must happen by December 6, and that an announcement in late October or early November could make shareholder approval harder. Barclays expects SpaceX to be the buyer in an all stock deal, with Tesla holders receiving SpaceX shares at a premium, based on market values of roughly $2.1 trillion for SpaceX and $1.5 trillion for Tesla. If nothing lands around the meeting, the bank still sees an announcement within 6 to 12 months.
The Roadster demo just added more weight to merger speculations. Tesla’s demo used cold gas thrusters and pressure tanks of the kind SpaceX uses on Falcon 9, and Musk described the car as a collaboration between Tesla and SpaceX engineers, as we mentioned in our breakdown of the three Roadster configurations.
Musk has not publicly addressed a deal since the event, as far as we have seen. His most direct answer remains the one he gave at the All In Summit, when he said that with so much collaboration, “who can imagine what action one might take” without ruling anything out. Ives has held to a 2027 timeline since his March note, and Musk pushed back on the China piece of the speculation when ARK floated a year end announcement in August.
The next test is Tesla’s third quarter earnings call on October 21. However, we recall in July that Musk told analysts, “we can’t talk about combining companies and that kind of thing on an earnings call,” so a clear answer wouldn’t be expected.