Connect with us

News

Tesla Will Pay Hackers To Help Improve Security

Tesla has announced a program of cash awards for hackers who expose security risks they find at on the company website and provide ways to fix them.

Published

on

After Tesla’s Twitter account got hacked in April, they have become more serious about security for its website. Tesla is using Bugcrowd, a place where “white hat” hackers congregate, to solicit assistance in identifying security risks on the company website. Cash rewards from $25 to $1,000 are offered.

The official announcement at Bugsource reads as follows:

“Tesla values the work done by security researchers in improving the security of our products and service offerings. We are committed to working with this community to verify, reproduce, and respond to legitimate reported vulnerabilities. We encourage the community to participate in our responsible reporting process.”

Rather than posting at Bugsource, Tesla asks people to e-mail it directly to vulnerability@teslamotors.com.

For its part, Bugsource has created a Hall of Fame for those who respond to the Tesla offer. It says 22 submissions have been made so far. You can see what awards have been made once you sign up to become a Bugsource member.

The rather large elephant in the room, however, is not security for the company website. It is security for the cars the company makes, every one of which leaves the factory with internet connectivity built in. The individuals who hacked the Tesla Twitter account were mere pranksters, but people with actual malicious intent could create havoc if they are able to hack into the cars themselves.

Advertisement
-

At a time when self-driving features are being touted by many car makers, especially Tesla with its highly advanced suite of AutoPilot features, the need to guarantee the security of onboard computers and software is critical. As cars add more “drive by wire” systems that control steering and braking, the possibility of serious physical harm increases exponentially.

Just the other day, a massive intrusion into US government computer records has been reported. Government officials tell the Associated Press the hack occurred at the Office of Personnel Management and the Interior Department. It involves information about security clearances and could potentially affect four million people at every federal agency.

Two months ago, a rogue airline pilot took it upon himself to drive a passenger jet into the ground in the French Alps. Security experts told reporters that it is possible to take control of an aircraft remotely in such situations, but they are loathe to create the systems needed to do so for fear they could be hacked by people with malicious intent.

Tesla has been more pro-active than many automakers with regard to security for its onboard software. Most, especially General Motors, claim that their software is protected by the Digital Millenium Copyright Act and threaten anyone who attempts alterations to the code with arrest and prosecution.

Ted Harrington, executive partner at Independent Security Evaluators, believes manufacturers should be taking more measures to protect people’s lives, according to Forbes.  “When it comes to security research, the stakes are the highest when human lives are involved. Securing the connected car is about more than just protecting data; it is about protecting lives. In that vein, auto manufacturers should be going to extreme lengths to harden their systems against the most sophisticated adversaries.

“In order to fully understand and mitigate risk, a system must go through ongoing, thorough, manual white box security assessment. With lives at stake, auto manufacturers in the era of the connected car should consider robust security assessment a business-critical mandate.”

Advertisement
-

Tesla did offer $10,000 last year to anyone who could hack a Model S. Reportedly, the prize was awarded to Chinese group Qihoo 360. Perhaps Tesla is deeply involved in insuring the digital security of its cars and simply chooses not to talk about the subject publicly. At least we hope so.

"I write about technology and the coming zero emissions revolution."

Advertisement
Comments

Elon Musk

The Boring Company’s latest Tesla tunnel truck mod “fits like a glove”

The Boring Company has modified a Tesla powered tunnel truck to carry freight containers underground.

Published

on

By

the-boring-company-tesla-robotaxi

The Boring Company has found a second job for the Tesla hardware it already runs underground. In a post on X, Elon Musk’s tunneling company showed its latest Prufrock Liner Truck modified to carry a standard 20 foot shipping container. “Using TBC tunnels to transport freight,” the company wrote. “The latest Prufrock Liner Truck (using Tesla Model 3 batteries and drive units) has been modified to carry a standard 20′ shipping container. Fits like a glove!”

The photo shows a red container sitting on a long, low white chassis parked outside, with drive hardware visible at one end. The Boring Company did not say where or when freight hauling would start, which customers it has in mind, or how many trucks it is converting.

Advertisement
-

Until now, the liner trucks have hauled concrete. Teslarati reported in August on Liner Truck 3, which uses Model 3 battery packs and drive units to move more than 22,000 pounds of precast tunnel segments to the boring machine. It has 28 miles of range, tops out at 12 mph, and is piloted remotely from the company’s operations center in Texas. The freight version appears to be the same platform with a different bed, and The Boring Company has not said whether it will also be remotely piloted.

Freight has been on the company’s menu for years. When TBC updated its product lineup in 2021, its freight tunnel was described as sized to fit a standard shipping container, “barely.” The company later used the idea at Tesla’s own factory, where Prufrock 3 dug a tunnel to Giga Texas that now moves finished Cybertrucks away from the production line.

The Boring Company closed a $3 billion Series D in September at a $23 billion valuation, and Teslarati has covered how that money is tied to a UAE tunneling push and a faster Nashville build. In Nashville, Prufrock MB1 and MB2 are mining at the same time, and a third machine is expected to launch in late October. Each machine needs a steady supply of liner trucks, so any design that works for segments and containers alike gives the company more use out of the same Tesla parts.

The Vegas Loop remains the only Boring Company system open to the public, and it moves passengers in Tesla vehicles. A freight service would be a separate product, and the post gave no indication that one is close to launch. For now, it is a truck, a container and a short caption saying they fit together.

Continue Reading

Elon Musk

Elon Musk will give ‘every kid in America’ a SpaceX share in 2027

Published

on

Credit: Grok Imagine

Elon Musk said he is planning to give “every one of his SpaceX shares to every kid in America” in 2027, stating that “this will be the first of many.”

SpaceX went public earlier this year, and its stock price has been relatively stable since leveling off shortly after its IPO. Based on its current price, it’s a gift of just over $10 billion to children across the United States.

It appears to be closely related to President Donald Trump’s bank accounts for children, which were set up earlier this year as Trump Accounts.

Just hours earlier, Anthropic had announced the establishment of its Anthropic Public Benefit Fund, “a new wholly-owned entity dedicated entirely to public benefit.” Musk responded by stating he recommended “giving the shares directly to the public,” and that he would be doing it that way.

Just a little bit later, Musk said children across the U.S. would be getting a share from him:

Advertisement
-

There are roughly 70 million children, meaning someone under the age of 18, in the United States, according to the Federal Interagency Forum on Child and Family Statistics. Musk’s ownership of SpaceX stock shows he has around 849 million Class A shares of SpaceX stock, according to filings with the SEC.

Continue Reading

Elon Musk

Elon Musk reveals why Boring Co’s biggest East Coast project never happened

Published

on

(Credit: The Boring Company)

Elon Musk revealed in a post on X that “Permits were impossible to get,” explaining the fate of The Boring Company’s most ambitious East Coast proposal.

The comment responded to a query about what became of his July 20, 2017 announcement that he had “just received verbal govt approval” for an underground Hyperloop connecting New York City, Philadelphia, Baltimore, and Washington, D.C., capable of carrying passengers from the Big Apple to the Nation’s Capital in just 29 minutes.

The Boring Company receives verbal ‘approval’ to build NY to DC Hyperloop tunnel

The 2017 post, which envisioned city-center stations and multiple elevators in each city, sparked immediate scrutiny. Local and state officials in New York, Philadelphia, Baltimore, and D.C. said they had no knowledge of any approval. A White House spokesperson confirmed only “promising conversations” about the transformative infrastructure.

Musk clarified shortly after that there was “still a lot of work” to do for formal approvals.

Limited progress followed, as Maryland Governor Larry Hogan’s administration issued a conditional utility permit and supported work near Fort Meade. In 2018, Washington, D.C., granted a preliminary permit for site preparation and excavation on a vacant lot at 53 New York Ave. NE in the NoMa neighborhood, which The Boring Company said could become a station.

A draft environmental assessment for a D.C.-Baltimore segment was released in 2019. Yet, by April 2021, the company had removed the project from its website, and the Federal Highway Administration reported receiving no indication of further interest. Communication with Maryland officials had ceased.

The full corridor would have required coordination among the District of Columbia, Maryland, Pennsylvania, New York, the Federal Highway Administration, the Army Corps of Engineers, the National Park Service, and other agencies.

Environmental reviews under the National Environmental Policy Act, utility clearances, and approvals for novel infrastructure added to the overall complexity of the project and its approval.

Speculation on the permitting barriers centers around a few factors, but a multi-state, multi-level route involving unproven high-speed vacuum-tube technology inherently triggers exhaustive safety, environmental, and engineering reviews that can stretch for years, even for conventional projects.

Advertisement
-

There are also other elements, of course, like officials who may face political exposure if a privately funded, untested system encountered anything such as cost overruns, delays, or safety issues. On the outset of this project, there were limited things such as engineering plans or demonstrated technology maturity, which also added to the potential skepticism.

The East Coast vision for Boring Co., once framed as a privately funded revolution that could reshape Northeast travel, quietly ended without construction of the promised network. Musk’s recent statement frames the outcome as a regulatory impasse, unfortunate but not unexpected.

Continue Reading