Connect with us

News

Details Behind the Tesla Model S Hack

Two researchers broke into the software of a Tesla recently. But there is good news behind the Tesla Model S hack. A fix was sent to all cars within days.

Published

10 years ago

on

Tesla Model S hack

Tesla Model S infotainment system also serves as the command center to the vehicle.

Last week, Marc Rogers, of content delivery network CloudFlare, and Lookout Mobile Security co-founder Kevin Mahaffey completed a digital break-in of a Tesla. But here’s the good news behind the Tesla Model S hack. Tesla quickly released an over-the-air firmware update, to every Model S ever manufactured, that would resolve the security holes uncovered by Rogers and Mahaffey.

The Tesla Hack

Rogers and Mahaffey had to dismantle the dashboard to gain access to an ethernet port. From there, they were able to connect directly to the CAN bus, the controller area network across which car data is sent and received.

After that, they chained together four separate vulnerabilities, first to gain access to the infotainment systems and then the touchscreen used to control vehicle functions. That let them make the speedometer disappear, alter the suspension, unlock the doors and the trunk, and make the windows go up and down. They were also able to shut down the car’s electric motor below 5 mph.

Above that speed, the dashboard screens would go blank but the car would shift into neutral, giving the driver time to find a safe place to bring the car to a stop. “Ironically, that means it’s the only car that can protect itself against a successful cyber attack,” Rogers noted.

Tesla’s Response

“Tesla has taken a number of different measures to address the effects of all six vulnerabilities reported by Lookout. And, we continue to develop further ways to harden our systems, informed by ongoing discussions with the security research community, as well as our own internal analysis. The update has been made available to all Model S customers through an OTA update. We will deploy this update to all vehicles by Thursday,” a spokesperson said in a statement e-mailed to Forbes.

Other auto manufacturers are following in Tesla’s footsteps by making internet updates available for their upcoming line of vehicles, but are starting years behind Tesla.

Advertisement

Rogers and Mahaffey say they also found two potential browser vulnerabilities that they exposed but did not exploit. Those flaws, resident in the WebKit browser engine, could possibly have enabled remote attacks, but Tesla’s new firmware update has resolved those issues as well.

Tesla CTO Toasts Hackers

While Rogers and Mahaffey were explaining their hacks at Def Con 23 last Friday, Tesla CTO J. B. Straubel made a surprise appearance to offer them a toast and personally thank them for their work. J.B. presented the duo with “Challenge Coins,” which will Tesla will be giving to any researcher who finds a serious security hole in their vehicles.

Tesla's approach to distribute vulnerability and feature updates through over-the-air technology, similar to how one updates software on their mobile device, clearly puts it steps ahead of other automakers.

Chris Evans, who previously worked on Google’s elite Project Zero research team, became head of digital security at Tesla this past week. He was involved in the software update that the company has now sent to all customers. “This gives me really high hopes with Tesla going forward," says Mahaffey. “I would like to see what they’ve done as a reference model for others. I think they’ve got lessons to learn but they’re 75 per cent there."

As cars acquire more digital capability, the opportunities for outside interference either by "white hat" hackers or those bent on doing actual harm will increase. Tesla, though, has the most robust program for identifying and resolving digital security issues of any manufacturer. That commitment should give every Tesla owner and prospective owner a full measure of confidence in the integrity of Tesla automobiles, now and in the future.

Related Topics:

"I write about technology and the coming zero emissions revolution."

Advertisement
Comments

Elon Musk

Elon Musk confirms Grok 4 launch on July 9 with livestream event

The rollout will be accompanied by a livestream at 8 p.m. Pacific Time.

Published

35 minutes ago

on

July 8, 2025

By

Credit: xAI/X

Elon Musk has officially confirmed that Grok 4, the latest version of xAI’s large language model, will launch on July 9. The rollout will be accompanied by a livestream at 8 p.m. Pacific Time, hosted on xAI’s official account on X.

xAI goes straight to Grok 4

Back in May, leaks indicated that xAI was getting ready to ship Grok 3.5. Considering Musk’s recent comments, however, it appears that the artificial intelligence startup would be focusing on the large language model’s fourth iteration instead. As noted in a Financial Express report, users on X have sighted references to Grok 4 in the lead up to the update’s launch, such as “grok-4-prod-mimic” and “Grok 4 Code.”

Musk’s Grok 4 announcement comes as AI competition intensifies between major players including OpenAI, Google, and xAI. With Musk’s Colossus supercomputer fully operational in Memphis, xAI appears to be accelerating its AI product roadmap.

Musk pushes Grok toward political neutrality

Grok 4’s launch also follows a recent controversy involving political bias, as noted in a CNN report. Last week, Grok responded to a user on X stating that political violence in the U.S. since 2016 had come more from the political right than the left. The chatbot noted in a later reply that its answer was based on information from sources like Reuters, the Journal of Democracy, and University of Maryland studies. 

Musk stated that Grok’s response was a “major fail.” “Major fail, as this is objectively false. Grok is parroting legacy media. Working on it,” he wrote in a post on X. By the end of June, Musk noted that he was “grinding all night with the xAI team” and that they were making “good progress.” He also stated that the model “Will be called Grok 4. Release just after July 4th. Needs one more big run for a specialized coding model.”

Advertisement
Continue Reading

News

Tesla opens massive solar Supercharger station in California

The Supercharger opened to customers ahead of Fourth of July weekend, while Tesla continues phase two of construction on the site.

Published

6 hours ago

on

July 7, 2025

By

Credit: Tesla Charging | X

Tesla has officially launched the first several Supercharging posts at a massive station in California, notably including solar canopies and grid-scale batteries to offer completely renewable charging.

Last week, Tesla announced on X that it opened the first 84 Supercharger stalls of a planned 168-stall station in Lost Hills, California. Additionally, the massive Supercharger project features 11MW of solar canopies and 10 Megapack batteries for off-grid charging powered entirely by solar energy.

Tesla completed the first phase of the project just days ahead of the busy Fourth of July holiday weekend, adding that initial construction took just eight months. In addition to the remaining charging stalls, Tesla says it’s building a set of lounge areas, renderings of which can be seen below alongside current photos of the site.

Notably, the site also includes V4 charging posts for the company’s latest available charging speeds, and it’s located near the busy junction between I-5 and Highway 46 in Kern County.

“Thank you [Kern County] and [PG&E] for collaboration and approvals,” Tesla wrote in a follow-up post.

Credit: Tesla Charging | X

Credit: Tesla Charging | X

Credit: Tesla Charging | X

Credit: Tesla Charging | X

READ MORE ON TESLA SUPERCHARGERS: Tesla launches ultra-fast V4 Superchargers in China for the first time

Testing at the LA Diner, plus Musk update on potential Tesla solar Gigafactory

The huge Tesla Supercharger station completed phase one of construction fairly quickly, especially given how long Tesla has been working on its unique Los Angeles diner, drive-in, and Supercharger location. Still, the company was seen performing some testing at the nearly-completed charging station earlier this month, and will reportedly be holding a job fair.

Elon Musk also responded on Monday morning to a post on X, suggesting that Tesla is “thinking about” building a U.S.-based solar Gigafactory in order to help support increased power needs with AI growth, and to bolster domestic solar production.

Tesla is building a new UFO-inspired Supercharger in the heart of Alien country

Continue Reading

News

Tesla driver walks away from major accident with minor injuries

The driver sustained only minor injuries, and the exact cause of the crash remains under investigation.

Published

8 hours ago

on

July 7, 2025

By

Credit: CHP Los Banos (via Facebook)

The driver of a Tesla Model Y survived and walked away from a harrowing accident on Monday in California, only sustaining minor injuries despite the vehicle being impaled by a guardrail.

On Monday morning around 4:34 a.m., the Los Banos division of the California Highway Patrol (CHP) responded to the accident on I-5 near Panoche Road, involving a 23-year-old in a Tesla Model Y. According to a post on social media, the driver veered off the road for unknown reasons in the northbound lane, before crashing directly into the guardrail and impaling the vehicle.

You can read the full message and photos from Los Banos CHP below, as were shared in a Facebook post on Monday afternoon.

This morning a Tesla model y was traveling in the #1 northbound lane of I-5 north of Panoche Rd. For unknown reasons driver allowed V-1 to veer off the roadway, travel through a dirt center divide, and crashed into the fixed metal guardrail. Lucky for the driver he only sustained minor injuries and was able to walk away. Driving a vehicle requires 100% attention to the road. Avoid distractions and focus on driving.

Credit: CHP Los Banos (via Facebook)

Credit: CHP Los Banos (via Facebook)

Credit: CHP Los Banos (via Facebook)

In a statement to SFGate, CHP officer Myles Anderson said that the driver only sustained minor injuries, while no arrests are made and drugs and alcohol are not suspected to have been involved. The report also notes that Tesla’s “cruise control and lane assistance features” were activated, according to Anderson. However, it’s not entirely clear if this is referring to Supervised Full Self-Driving (FSD), or to the cruise control and lane assist features baked into Autopilot.

At the time of writing, CHP has not yet responded to Teslarati’s request for clarification and additional details on the matter.

READ MORE ON TESLA SAFETY: Tesla rolls out crucial new safety feature aimed at saving children

The news comes after Tesla has touted its vehicles as incredibly safe for many years. In December, for example, the company highlighted receiving top safety scores from regulators on four different continents throughout the world, including from the National Highway Traffic Safety Administration (NHTSA) and the Insurance Institute of Highway Safety (IIHS) in the U.S.

Tesla has also listed the goal of making its vehicles the safest on the road throughout the years, both in the overall design of its vehicles and in its Autopilot and Full Self-Driving (FSD) programs.

Tesla Model 3 ranks as the safest new car in Europe for 2025, per Euro NCAP tests

Continue Reading

Trending