News
Tesla Will Pay Hackers To Help Improve Security
Tesla has announced a program of cash awards for hackers who expose security risks they find at on the company website and provide ways to fix them.
After Tesla’s Twitter account got hacked in April, they have become more serious about security for its website. Tesla is using Bugcrowd, a place where “white hat” hackers congregate, to solicit assistance in identifying security risks on the company website. Cash rewards from $25 to $1,000 are offered.
The official announcement at Bugsource reads as follows:
“Tesla values the work done by security researchers in improving the security of our products and service offerings. We are committed to working with this community to verify, reproduce, and respond to legitimate reported vulnerabilities. We encourage the community to participate in our responsible reporting process.”
Rather than posting at Bugsource, Tesla asks people to e-mail it directly to vulnerability@teslamotors.com.
For its part, Bugsource has created a Hall of Fame for those who respond to the Tesla offer. It says 22 submissions have been made so far. You can see what awards have been made once you sign up to become a Bugsource member.
The rather large elephant in the room, however, is not security for the company website. It is security for the cars the company makes, every one of which leaves the factory with internet connectivity built in. The individuals who hacked the Tesla Twitter account were mere pranksters, but people with actual malicious intent could create havoc if they are able to hack into the cars themselves.
At a time when self-driving features are being touted by many car makers, especially Tesla with its highly advanced suite of AutoPilot features, the need to guarantee the security of onboard computers and software is critical. As cars add more “drive by wire” systems that control steering and braking, the possibility of serious physical harm increases exponentially.
Just the other day, a massive intrusion into US government computer records has been reported. Government officials tell the Associated Press the hack occurred at the Office of Personnel Management and the Interior Department. It involves information about security clearances and could potentially affect four million people at every federal agency.
Two months ago, a rogue airline pilot took it upon himself to drive a passenger jet into the ground in the French Alps. Security experts told reporters that it is possible to take control of an aircraft remotely in such situations, but they are loathe to create the systems needed to do so for fear they could be hacked by people with malicious intent.
Tesla has been more pro-active than many automakers with regard to security for its onboard software. Most, especially General Motors, claim that their software is protected by the Digital Millenium Copyright Act and threaten anyone who attempts alterations to the code with arrest and prosecution.
Ted Harrington, executive partner at Independent Security Evaluators, believes manufacturers should be taking more measures to protect people’s lives, according to Forbes. “When it comes to security research, the stakes are the highest when human lives are involved. Securing the connected car is about more than just protecting data; it is about protecting lives. In that vein, auto manufacturers should be going to extreme lengths to harden their systems against the most sophisticated adversaries.
“In order to fully understand and mitigate risk, a system must go through ongoing, thorough, manual white box security assessment. With lives at stake, auto manufacturers in the era of the connected car should consider robust security assessment a business-critical mandate.”
Tesla did offer $10,000 last year to anyone who could hack a Model S. Reportedly, the prize was awarded to Chinese group Qihoo 360. Perhaps Tesla is deeply involved in insuring the digital security of its cars and simply chooses not to talk about the subject publicly. At least we hope so.
News
SpaceX’s Gwynne Shotwell just made a quiet gesture toward Tesla
SpaceX president Gwynne Shotwell quietly followed Tesla on X, and merger watchers noticed right away.
SpaceX President and COO Gwynne Shotwell has started following Tesla’s official account on X, a small change that landed in the middle of a very loud merger conversation. Whole Mars Catalog joked about it on Sunday.
A follow is not an announcement, and neither company has said anything about a deal. What gives the moment weight is the timing. Barclays analyst Dan Levy has told clients that an agreement could come before Tesla’s annual meeting, which must be held by December 6, with SpaceX as the buyer in an all stock deal, as we reported after the Roadster unveiling. Wedbush’s Dan Ives has stuck with a 2027 timeline.
“Shit, I better start following their X account if i’m gonna be helping run the company”
— Whole Mars Catalog (@wholemars) October 18, 2026
Shotwell is the executive most worth watching if the two companies do move closer. When Musk was asked at the All In Summit why Tesla and SpaceX remain separate, Shotwell sat next to him and said SpaceX personnel had already moved into xAI to fill leadership and engineering gaps. The businesses were integrating “faster than I thought,” she said, though “not fully integrated yet.” Her responsibilities have also grown since SpaceX absorbed xAI, and she now oversees operations that include Grok and the company’s AI compute buildout.
The financial links are already there. Tesla’s $2 billion xAI investment turned into a stake of less than one percent in SpaceX, the two share the Terafab chip project in Austin, and Musk exercised his 2018 Tesla options a week after SpaceX began trading, a sequence analysts flagged as giving SpaceX public shares to use in a deal. Musk holds about 20 percent of Tesla and controls 85.1 percent of SpaceX’s voting power, according to our earlier breakdown.
The next test is close at hand. SpaceX reports its second earnings as a public company on Tuesday after the close, and Tesla follows on Wednesday. Musk told analysts in July that “we can’t talk about combining companies and that kind of thing on an earnings call,” so a direct answer is unlikely from either stage. Tesla shareholders can still submit and vote on questions through the Say portal until 4 p.m. EDT on Monday, and the merger is a recurring theme in the queue.
Elon Musk
Tesla Roadster owners to get “Flying Stunt Mode” and looping track access
Musk says Roadster owners can command the unveiling stunts autonomously, with a Texas looping track.
Elon Musk says owners of the new Tesla Roadster will be able to ask the car to perform the stunts Tesla showed at its unveiling, with the car doing the driving itself. Musk made the comment Saturday in a reply on X to tech blogger Robert Scoble, and he added a promise of a looping track at Tesla’s Texas headquarters.
Scoble had argued that the person in the Roadster is not really driving it. In his description, the driver operates a computer that tells another computer what to do, with steering, braking and acceleration all handled by wire. Musk answered, “True. You will be able to ask the Roadster to perform any of the tricks shown autonomously, as it will be sentient. Also, we will have a wild looping track (crazier even than Hot Wheels) at our Texas HQ where you can test out your Roadster.”
@Scobleizer True.
You will be able to ask the Roadster to perform any of the tricks shown autonomously, as it will be sentient.
Also, we will have a wild looping track (crazier even than Hot Wheels) at our Texas HQ where you can test out your Roadster.
— Elon Musk (@elonmusk) October 17, 2026
At the October 15 event outside Waco, the car drove up a curved ramp until it was upside down, flew off on cold gas thrusters, flipped and landed. It also hovered over a Cybercab, Cybertruck, Semi, Model Y and Model 3 while moving. As we noted in our breakdown of the three Roadster configurations, Musk said at the event that the car “literally is just going to puff itself up” to perform the maneuvers whenever an owner wants. Saturday’s reply adds that the car would run them on its own.
Tesla has described some of the hardware that would make that possible. The Roadster uses steer by wire with a yoke, and its cold gas thrusters rely on electric actuators for small adjustments in flight. A fan system under the car creates suction, which Tesla says is strong enough to hold it upside down, a setup we covered in our look at the Roadster’s fan system and thrusters.
Musk did not say when an autonomous stunt feature might arrive, how it would work, or what he means by sentient. He also gave no size, location or opening date for the Texas track. Production is planned for Giga Texas in 2027 or 2028, and Tesla says the car is not approved for public road use. The Rocket version, the one built to fly, is invite only.
The comment follows a week of Musk teasing the event, including his claim that the demo would be a banger, which we covered before the stream. Tesla reports third quarter earnings on October 21, and shareholders can submit and vote on questions through the Say portal until 4 p.m. EDT on October 20, according to our earnings Q&A preview. A question about autonomous Roadster stunts and the Texas track would be a quick way to get specifics from management.
Elon Musk
How to use Grok Bot to block spam calls and texts
Musk told users to ask Grok Bot to scrub their phone numbers from spam lists.
Elon Musk has a new use case for Grok Bot, and it is the spam call. On Thursday he replied to an X user named Arash with a short instruction: “Ask your @Grok @Bot to remove your phone number from spam call & text lists!” Arash had said he got tired of the calls, had an AI bot find his number on listing sites and file removal requests, and packaged the process as a free skill for others.
The skill is called Spam-Call Scrubber, which is described to find a phone number on people search sites and data brokers, submits the opt outs, completes the confirmation emails those sites send back, and rechecks on a schedule the user picks. Using it requires the Grok Bot app. The pitch is time saved, since most broker opt outs sit behind separate forms on separate sites.
Ask your @Grok @Bot to remove your phone number from spam call & text lists!
— Elon Musk (@elonmusk) October 15, 2026
Musk said Grok Bot now gives each bot its own email address, and that it can detect scam emails. On Thursday he also said SpaceX would make users whole if the bot botches a purchase or leaks a card, then told users to shop away from Amazon after the retailer blocked the agent, as Teslarati reported. The terms of service we reviewed at the time put responsibility for what an agent does on the user.
For Tesla owners, Grok Bot is not just a phone app. Tesla brought Grok Bot into its vehicles on September 22, and we argued earlier this week that the Cybercab’s real advantage may be the errands it runs during a ride. Every Cybercab and the rest of the Model Y Robotaxi fleet has it enabled. The more routine tasks like this one become, the more a rider has reason to hand over something personal in the back seat.
The new Spam-Call Scrubber skill can be downloaded for free and works on sites that honor removal requests, while noting that listings can reappear, and illegal robocallers do not check any registry. Whether Spam-Call Scrubber cuts anyone’s call volume is something the first wave of users will find out, and Musk’s endorsement guarantees that wave is coming.
SpaceX’s Gwynne Shotwell just made a quiet gesture toward Tesla
Tesla Roadster owners to get “Flying Stunt Mode” and looping track access
How to use Grok Bot to block spam calls and texts
SpaceX reveals how its 1 Million AI satellite network will work and prevent space collisions
Tesla Roadster: Three configs, one can fly, 0-60 in 0.8 seconds
