Connect with us

News

Details Behind the Tesla Model S Hack

Two researchers broke into the software of a Tesla recently. But there is good news behind the Tesla Model S hack. A fix was sent to all cars within days.

Published

on

Tesla Model S hack

Tesla Model S infotainment system also serves as the command center to the vehicle.

Last week, Marc Rogers, of content delivery network CloudFlare, and Lookout Mobile Security co-founder Kevin Mahaffey completed a digital break-in of a Tesla. But here’s the good news behind the Tesla Model S hack. Tesla quickly released an over-the-air firmware update, to every Model S ever manufactured, that would resolve the security holes uncovered by Rogers and Mahaffey.

The Tesla Hack

Rogers and Mahaffey had to dismantle the dashboard to gain access to an ethernet port. From there, they were able to connect directly to the CAN bus, the controller area network across which car data is sent and received.

After that, they chained together four separate vulnerabilities, first to gain access to the infotainment systems and then the touchscreen used to control vehicle functions. That let them make the speedometer disappear, alter the suspension, unlock the doors and the trunk, and make the windows go up and down. They were also able to shut down the car’s electric motor below 5 mph.

Above that speed, the dashboard screens would go blank but the car would shift into neutral, giving the driver time to find a safe place to bring the car to a stop. “Ironically, that means it’s the only car that can protect itself against a successful cyber attack,” Rogers noted.

Tesla’s Response

“Tesla has taken a number of different measures to address the effects of all six vulnerabilities reported by Lookout. And, we continue to develop further ways to harden our systems, informed by ongoing discussions with the security research community, as well as our own internal analysis. The update has been made available to all Model S customers through an OTA update. We will deploy this update to all vehicles by Thursday,” a spokesperson said in a statement e-mailed to Forbes.

Other auto manufacturers are following in Tesla’s footsteps by making internet updates available for their upcoming line of vehicles, but are starting years behind Tesla.

Rogers and Mahaffey say they also found two potential browser vulnerabilities that they exposed but did not exploit. Those flaws, resident in the WebKit browser engine, could possibly have enabled remote attacks, but Tesla’s new firmware update has resolved those issues as well.

Advertisement
-

Tesla CTO Toasts Hackers

While Rogers and Mahaffey were explaining their hacks at Def Con 23 last Friday, Tesla CTO J. B. Straubel made a surprise appearance to offer them a toast and personally thank them for their work. J.B. presented the duo with “Challenge Coins,” which will Tesla will be giving to any researcher who finds a serious security hole in their vehicles.

-

As cars acquire more digital capability, the opportunities for outside interference either by "white hat" hackers or those bent on doing actual harm will increase. Tesla, though, has the most robust program for identifying and resolving digital security issues of any manufacturer. That commitment should give every Tesla owner and prospective owner a full measure of confidence in the integrity of Tesla automobiles, now and in the future.

"I write about technology and the coming zero emissions revolution."

Advertisement
Comments

News

SpaceX just launched its secret Starfall saucer again

SpaceX launched its Starfall capsule again on Bandwagon-5, this time listed openly beside rideshare customers.

Published

on

By

An artist’s illustration of a SpaceX Starfall capsule reentering Earth’s atmosphere. (Image: SpaceX)
An artist’s illustration of a SpaceX Starfall capsule reentering Earth’s atmosphere. (Image: SpaceX)

SpaceX launched its Starfall reentry capsule for the second time on Tuesday morning, flying it as the payload of the Bandwagon-5 rideshare mission. Falcon 9 lifted off from Space Launch Complex 40 in Florida at 7:04 a.m. ET with 32 payloads, and the first stage booster, on its 19th flight, landed on the droneship A Shortfall of Gravitas about nine minutes later.

Starfall was scheduled to separate last, 2 hours and 48 minutes after liftoff. The final customer satellite on SpaceX’s mission timeline comes off the upper stage about an hour and nine minutes in, which left a long gap before the capsule was due to be released alone. SpaceX later posted that the payload deployment sequence is complete. At liftoff, the company said Starfall “enables affordable, routine access to a microgravity environment, providing unique opportunities for on-orbit manufacturing, scientific research, and testing.”

As Teslarati reported before the first Starfall flight, SpaceX made no public announcement about the vehicle then, and nearly everything known came from FAA and FCC filings. This time Starfall is an item name on the official mission page, listed beside paying rideshare customers. SpaceX has still not said what, if anything, is aboard this Starfall, Spaceflight Now noted.

The FAA’s environmental assessment from May describes a disk about 10.2 feet wide and 2.5 feet tall that weighs roughly 4,600 pounds and can bring 2,200 pounds of payload back to Earth.

Advertisement
-

Interestingly, the same rocket also carries a competitor’s hardware. Varda Space Industries launched its W-Series 7 capsule on Bandwagon-5, a spacecraft about three times smaller than Starfall that will test whether microgravity can improve the solubility of a cancer drug called Protac. It is Varda’s ninth reentry capsule, and W-8 and W-9 launched earlier this month on Transporter-18. SpaceX has been Varda’s launch provider since the company’s first Falcon 9 rideshare contract in 2021.

SpaceX has not published where or how this Starfall will come down. The preview we ran in June described a recovery from the Pacific Ocean, and the company has not said whether this flight follows the same plan. The launch also arrives hours before SpaceX posts its third quarter results after the market closes, a report we previewed earlier this week.

Continue Reading

Elon Musk

The Boring Company’s latest Tesla tunnel truck mod “fits like a glove”

The Boring Company has modified a Tesla powered tunnel truck to carry freight containers underground.

Published

on

By

the-boring-company-tesla-robotaxi

The Boring Company has found a second job for the Tesla hardware it already runs underground. In a post on X, Elon Musk’s tunneling company showed its latest Prufrock Liner Truck modified to carry a standard 20 foot shipping container. “Using TBC tunnels to transport freight,” the company wrote. “The latest Prufrock Liner Truck (using Tesla Model 3 batteries and drive units) has been modified to carry a standard 20′ shipping container. Fits like a glove!”

The photo shows a red container sitting on a long, low white chassis parked outside, with drive hardware visible at one end. The Boring Company did not say where or when freight hauling would start, which customers it has in mind, or how many trucks it is converting.

Advertisement
-

Until now, the liner trucks have hauled concrete. Teslarati reported in August on Liner Truck 3, which uses Model 3 battery packs and drive units to move more than 22,000 pounds of precast tunnel segments to the boring machine. It has 28 miles of range, tops out at 12 mph, and is piloted remotely from the company’s operations center in Texas. The freight version appears to be the same platform with a different bed, and The Boring Company has not said whether it will also be remotely piloted.

Freight has been on the company’s menu for years. When TBC updated its product lineup in 2021, its freight tunnel was described as sized to fit a standard shipping container, “barely.” The company later used the idea at Tesla’s own factory, where Prufrock 3 dug a tunnel to Giga Texas that now moves finished Cybertrucks away from the production line.

The Boring Company closed a $3 billion Series D in September at a $23 billion valuation, and Teslarati has covered how that money is tied to a UAE tunneling push and a faster Nashville build. In Nashville, Prufrock MB1 and MB2 are mining at the same time, and a third machine is expected to launch in late October. Each machine needs a steady supply of liner trucks, so any design that works for segments and containers alike gives the company more use out of the same Tesla parts.

The Vegas Loop remains the only Boring Company system open to the public, and it moves passengers in Tesla vehicles. A freight service would be a separate product, and the post gave no indication that one is close to launch. For now, it is a truck, a container and a short caption saying they fit together.

Continue Reading

Elon Musk

Elon Musk will give ‘every kid in America’ a SpaceX share in 2027

Published

on

Credit: Grok Imagine

Elon Musk said he is planning to give “every one of his SpaceX shares to every kid in America” in 2027, stating that “this will be the first of many.”

SpaceX went public earlier this year, and its stock price has been relatively stable since leveling off shortly after its IPO. Based on its current price, it’s a gift of just over $10 billion to children across the United States.

It appears to be closely related to President Donald Trump’s bank accounts for children, which were set up earlier this year as Trump Accounts.

Just hours earlier, Anthropic had announced the establishment of its Anthropic Public Benefit Fund, “a new wholly-owned entity dedicated entirely to public benefit.” Musk responded by stating he recommended “giving the shares directly to the public,” and that he would be doing it that way.

Just a little bit later, Musk said children across the U.S. would be getting a share from him:

Advertisement
-

There are roughly 70 million children, meaning someone under the age of 18, in the United States, according to the Federal Interagency Forum on Child and Family Statistics. Musk’s ownership of SpaceX stock shows he has around 849 million Class A shares of SpaceX stock, according to filings with the SEC.

Continue Reading