Connect with us

News

Tesla Will Pay Hackers To Help Improve Security

Tesla has announced a program of cash awards for hackers who expose security risks they find at on the company website and provide ways to fix them.

Published

on

After Tesla’s Twitter account got hacked in April, they have become more serious about security for its website. Tesla is using Bugcrowd, a place where “white hat” hackers congregate, to solicit assistance in identifying security risks on the company website. Cash rewards from $25 to $1,000 are offered.

The official announcement at Bugsource reads as follows:

“Tesla values the work done by security researchers in improving the security of our products and service offerings. We are committed to working with this community to verify, reproduce, and respond to legitimate reported vulnerabilities. We encourage the community to participate in our responsible reporting process.”

Rather than posting at Bugsource, Tesla asks people to e-mail it directly to vulnerability@teslamotors.com.

For its part, Bugsource has created a Hall of Fame for those who respond to the Tesla offer. It says 22 submissions have been made so far. You can see what awards have been made once you sign up to become a Bugsource member.

The rather large elephant in the room, however, is not security for the company website. It is security for the cars the company makes, every one of which leaves the factory with internet connectivity built in. The individuals who hacked the Tesla Twitter account were mere pranksters, but people with actual malicious intent could create havoc if they are able to hack into the cars themselves.

At a time when self-driving features are being touted by many car makers, especially Tesla with its highly advanced suite of AutoPilot features, the need to guarantee the security of onboard computers and software is critical. As cars add more “drive by wire” systems that control steering and braking, the possibility of serious physical harm increases exponentially.

Advertisement
-
-

Just the other day, a massive intrusion into US government computer records has been reported. Government officials tell the Associated Press the hack occurred at the Office of Personnel Management and the Interior Department. It involves information about security clearances and could potentially affect four million people at every federal agency.

Two months ago, a rogue airline pilot took it upon himself to drive a passenger jet into the ground in the French Alps. Security experts told reporters that it is possible to take control of an aircraft remotely in such situations, but they are loathe to create the systems needed to do so for fear they could be hacked by people with malicious intent.

Tesla has been more pro-active than many automakers with regard to security for its onboard software. Most, especially General Motors, claim that their software is protected by the Digital Millenium Copyright Act and threaten anyone who attempts alterations to the code with arrest and prosecution.

Ted Harrington, executive partner at Independent Security Evaluators, believes manufacturers should be taking more measures to protect people’s lives, according to Forbes.  “When it comes to security research, the stakes are the highest when human lives are involved. Securing the connected car is about more than just protecting data; it is about protecting lives. In that vein, auto manufacturers should be going to extreme lengths to harden their systems against the most sophisticated adversaries.

“In order to fully understand and mitigate risk, a system must go through ongoing, thorough, manual white box security assessment. With lives at stake, auto manufacturers in the era of the connected car should consider robust security assessment a business-critical mandate.”

Tesla did offer $10,000 last year to anyone who could hack a Model S. Reportedly, the prize was awarded to Chinese group Qihoo 360. Perhaps Tesla is deeply involved in insuring the digital security of its cars and simply chooses not to talk about the subject publicly. At least we hope so.

Advertisement
-
-

"I write about technology and the coming zero emissions revolution."

Advertisement
Comments

Elon Musk

SpaceX scores another massive Pentagon deal to support military satellites

Published

on

By

SpaceX just picked up another $1.6 billion from the Pentagon, with the U.S. Space Force awarding two task orders worth $1.6 billion to fly 18 Falcon 9 missions from Vandenberg Space Force Base in California through the end of 2027. The launches will carry satellites for the Space Based Sensing and Targeting portfolio, a set of programs meant to help the military detect and track airborne threats and relay that information across forces in near real time.

The award falls under National Security Space Launch Phase 3 Lane 1, the Space Force’s faster, commercial style procurement track for missions that do not require the military’s most demanding certification process. It is also the largest single order publicly disclosed under that program so far, and the first task order issued since the Space Force nearly tripled Lane 1’s contract ceiling from $5.6 billion to $17 billion on July 17.

SpaceX to become America’s Military data backbone for missiles, drones, and warfighters

Eric Zarybnisky, the Space Force’s acting portfolio acquisition executive for space access, said the entire process, from identifying the requirement to signing the contract, took about two months, including a month set aside for companies to prepare proposals.

SpaceX is not just launching these satellites. It already holds the contracts to build two of the programs within the same portfolio, $4.16 billion for the Space Based Airborne Moving Target Indicator system and $2.29 billion for the Space Data Network Backbone, which Teslarati covered in May. That means SpaceX is now responsible for both building key pieces of the military’s next generation sensing network and getting them into orbit.

With this latest award, SpaceX’s Pentagon contract total for 2026 alone tops $8 billion, adding to a defense portfolio that already includes the Golden Dome missile defense software group SpaceX joined in April and a string of GPS launches it inherited after ULA’s Vulcan rocket ran into a booster anomaly, which we detailed in March.

Lane 1’s vendor pool technically includes seven companies: SpaceX, ULA, Blue Origin, Rocket Lab, Stoke Space, Impulse Space, and Relativity Space. In practice, SpaceX remains the only provider with the combination of launch cadence, flight proven Falcon 9 hardware, and West Coast infrastructure to support a campaign requiring roughly one Vandenberg launch a month for the next year and a half.

Advertisement
-
-

Some lawmakers have flagged the growing concentration of national security launches with one company as a risk worth watching. For now, the Space Force keeps backing SpaceX, with it being the company that shows up ready to launch.

Continue Reading

Elon Musk

Elon Musk sheds two new bits of detail on Starship after 13th test launch

Published

on

Credit: SpaceX

Elon Musk shed two new bits of detail on Starship following its 13th test launch, which was an overwhelming success.

SpaceX launched Starship for the 13th time last Friday after two delays: one on Monday when several Raptor engines did not ignite, and another on Thursday due to unfavorable weather conditions in Starbase, Texas.

The launch was overwhelmingly successful. SpaceX was able to complete a necessary test of the heat shield tiles by increasing the acceleration of Starship from launch throughout the flight; 20 Starlink v3 satellites were released with no issue; the Super Heavy Booster landed safely in the Gulf of America, Ship successfully reignited engines while in space; and it also splashed down without incident in the Indian Ocean.

SpaceX Starship just nailed something it’s never done before

Nevertheless, more details are coming out about Starship, and Musk is doing the talking.

Starship Will Be Retrieved in the Ocean

Musk revealed on Tuesday night that Starship would be recovered by a ship in the Indian Ocean. SpaceX routinely tries to recover Starship after splashdown in an effort to find out more about the flight by examining the spacecraft afterward.

This helps engineers find out more about why things might have happened, allows them to examine any potential damage or anomalies that might have occurred, and increases the chances of an even more successful flight next time thanks to the additional information recovered.

Ship Could Have Been Caught by Tower Arms, Musk claims

Musk has already indicated that SpaceX will plan to attempt a catch of Starship with the 14th test flight. While this would be a major accomplishment, it would be an expected next step, considering the fact that the Super Heavy Booster has already been caught by the chopsticks on numerous occasions.

A ship catch would be a great indication of where SpaceX stands in terms of reusability and launch cadence. A successful catch with relatively no incidents would be a good sign that SpaceX is nearing a more frequent launch of Starship, but also that the reusability of the massive rocket would be something many would expect in the near future.

It is a necessity to make life multiplanetary.

Advertisement
-
-
Continue Reading

Elon Musk

Elon Musk updates the SpaceX timeline for Mars

Published

on

Rendering of a colonized Mars by way of SpaceX
Rendering of a colonized Mars by way of SpaceX

Elon Musk has updated his timeline for when humans will walk on Mars and for when ships will simply get there.

The objective of getting to Mars has been one of Musk’s biggest goals since becoming a serial entrepreneur and realizing that time on Earth is limited. Musk has said several times he hopes to die on Mars, and not by impact.

Musk now believes that people will be on Mars in “roughly 5 to 7 years.” He said that a Mars lander will get there “a few years sooner.”

The response from Musk comes after NASA Administrator Jared Isaacman said that SpaceX’s biggest priority is the Moon and not Mars. Because of this, Isaacman conceded that he believes nuclear power and propulsion investments will provide “potentially the pathway with the fewest miracles required to put four people on Mars in the next 10 to 15 years.”

Advertisement
-
-

Of course, this is what NASA can do through taxpayer funding and nuclear investments, he added.

Musk’s grand ambitions are much more optimistic than most, and it is certainly a double-edged sword. This is not the first time timelines for Mars have been somewhat lofty, especially to those normal thinkers like you and me, not super geniuses like Musk.

SpaceX Board has set a Mars bonus for Elon Musk

In fact, the SpaceX and Tesla frontman has said on at least a dozen occasions that we could be on Mars in the coming years. Musk said 2020 would be the big year as early as 2009. In 2020, he was “highly confident” of a landing in 2026, and had even said 2024 in a best-case scenario.

The point is, the range has varied, and it’s anyone’s guess when we’ll get there. This latest adjustment to the timeline is typical of Musk, and while the Moon has seemingly taken priority over Mars, it is still worth mentioning that the ultimate goal is to make life multiplanetary, and it starts potentially with the Red Planet.

Continue Reading