News
Tesla Will Pay Hackers To Help Improve Security
Tesla has announced a program of cash awards for hackers who expose security risks they find at on the company website and provide ways to fix them.
After Tesla’s Twitter account got hacked in April, they have become more serious about security for its website. Tesla is using Bugcrowd, a place where “white hat” hackers congregate, to solicit assistance in identifying security risks on the company website. Cash rewards from $25 to $1,000 are offered.
The official announcement at Bugsource reads as follows:
“Tesla values the work done by security researchers in improving the security of our products and service offerings. We are committed to working with this community to verify, reproduce, and respond to legitimate reported vulnerabilities. We encourage the community to participate in our responsible reporting process.”
Rather than posting at Bugsource, Tesla asks people to e-mail it directly to vulnerability@teslamotors.com.
For its part, Bugsource has created a Hall of Fame for those who respond to the Tesla offer. It says 22 submissions have been made so far. You can see what awards have been made once you sign up to become a Bugsource member.
The rather large elephant in the room, however, is not security for the company website. It is security for the cars the company makes, every one of which leaves the factory with internet connectivity built in. The individuals who hacked the Tesla Twitter account were mere pranksters, but people with actual malicious intent could create havoc if they are able to hack into the cars themselves.
At a time when self-driving features are being touted by many car makers, especially Tesla with its highly advanced suite of AutoPilot features, the need to guarantee the security of onboard computers and software is critical. As cars add more “drive by wire” systems that control steering and braking, the possibility of serious physical harm increases exponentially.
Just the other day, a massive intrusion into US government computer records has been reported. Government officials tell the Associated Press the hack occurred at the Office of Personnel Management and the Interior Department. It involves information about security clearances and could potentially affect four million people at every federal agency.
Two months ago, a rogue airline pilot took it upon himself to drive a passenger jet into the ground in the French Alps. Security experts told reporters that it is possible to take control of an aircraft remotely in such situations, but they are loathe to create the systems needed to do so for fear they could be hacked by people with malicious intent.
Tesla has been more pro-active than many automakers with regard to security for its onboard software. Most, especially General Motors, claim that their software is protected by the Digital Millenium Copyright Act and threaten anyone who attempts alterations to the code with arrest and prosecution.
Ted Harrington, executive partner at Independent Security Evaluators, believes manufacturers should be taking more measures to protect people’s lives, according to Forbes. “When it comes to security research, the stakes are the highest when human lives are involved. Securing the connected car is about more than just protecting data; it is about protecting lives. In that vein, auto manufacturers should be going to extreme lengths to harden their systems against the most sophisticated adversaries.
“In order to fully understand and mitigate risk, a system must go through ongoing, thorough, manual white box security assessment. With lives at stake, auto manufacturers in the era of the connected car should consider robust security assessment a business-critical mandate.”
Tesla did offer $10,000 last year to anyone who could hack a Model S. Reportedly, the prize was awarded to Chinese group Qihoo 360. Perhaps Tesla is deeply involved in insuring the digital security of its cars and simply chooses not to talk about the subject publicly. At least we hope so.
Elon Musk
Tesla eyes supply partners for Optimus mass production
Tesla certified three Chinese suppliers for Optimus mass production, signaling its robot timeline is accelerating.
Tesla’s robotics team traveled to Ningbo, in China’s Zhejiang province, on September 16 and spent the following day auditing component suppliers for Optimus, according to a Bloomberg report cited by RobotAIGeek. The visit moved three manufacturers from provisional status to certified mass production partners: Tuopu Group, which handles actuators and chassis components, Ningbo Joyson Electronic, a sensor supplier, and Zhejiang Sanhua Intelligent Controls, which builds thermal management systems. All three already supply parts to Tesla’s electric vehicles, and the audit reportedly came with fresh orders that supply chain reports put at an initial batch of roughly 5,000 units.
Tuopu, Joyson, and Sanhua built their manufacturing base serving the automotive industry, where tolerances and volume requirements are already close to what a mass produced humanoid robot demands. Sanhua in particular has history here. Teslarati reported last October that the company had received a roughly $685 million order for linear actuators tied to Optimus, a volume industry watchers estimated could cover around 180,000 robots once production ramped.
Supply chain reports tied to this week’s audit put Tesla’s near term production goal at about 1,000 Optimus units a week by late September, rising to 2,000 to 2,500 units a week by the end of the year. That pace would put real weight behind the timeline Tesla has been building toward since May, when it wound down Model S and Model X production at Fremont to convert that floor space into a dedicated Optimus line targeting one million units annually. JPMorgan analysts who toured the factory in August confirmed the conversion took roughly four months, a pace Musk has called unprecedented for a facility that size.
New drone video shows Tesla’s Optimus Factory reaching a turning point
Fremont is only the first phase. A second, larger Optimus plant is rising at Gigafactory Texas, where drone footage shared by Joe Tegtmeyer last week showed the structural steel nearing completion on the north end of the building. Tesla has said that facility is meant to eventually support production of up to 10 million units a year, though volume output there is not expected before 2027.
Commercial sales of Optimus are still targeted for the second half of 2027, but production is expected to start well before then. JPMorgan analyst Rajat Gupta has said Tesla’s “Optimus Academy” program, which uses early units to collect real world training data inside Tesla’s own facilities, is expected to be running later this year. Bloomberg Intelligence analyst Ian Ma described the Ningbo audits as “a positive commercialization signal for China’s humanoid supply chain,” noting that sentiment could improve further if the visit leads to confirmed supplier nominations and larger orders. The Solactive China Humanoid Robotics Index rose about 1.4% on the news, though it remains down roughly 30% for the year.
Elon Musk
Elon Musk’s next Uranium in Uranus merch is Boring Company’s weirdest tease yet
Elon Musk teased a glowing new Boring Company merch idea, complete with a Geiger counter.
Elon Musk teased the next piece of Boring Company merchandise on X Saturday, and it is exactly as unserious as fans of the company’s product history have come to expect. “The next @boringcompany merch will put Uranium in Uranus,” Musk wrote in a thread posted early Saturday morning. He followed up by explaining that the item would glow in the dark, “because otherwise how could you find it,” and that a Geiger counter would be sold separately as “an optional strap-on.”
Musk closed the thread with a line that doubles as a mission statement for the tunneling company’s merchandise arm: “It’s not easy coming up with something that is both outrageously unsellable and yet extremely popular.”
The Boring Company has built a small but consistent side business out of novelty items that start as jokes and end up selling out. The company’s Not-a-Flamethrower raised roughly $10 million in a few days back in 2018, moving all 20,000 units it produced. Its Burnt Hair perfume, priced around $100 a bottle, sold out fast enough that scalpers were flipping units on eBay for ten times the retail price. Boring Bricks, made from tunneling spoil, followed the same playbook of teasing a product on X months before it became real.
Musk has not said what the actual item will be, only that it involves uranium and glows in the dark. Given the pattern, that vagueness is probably intentional. Past merch announcements have started as one-line jokes and taken weeks or months to turn into an actual product listing on the company’s site, and there is no guarantee this one follows through at all.
The timing lines up with a period of real momentum for the Boring Company outside of the joke merchandise. The company said last week it plans to double the number of operational stations on its Vegas Loop by the end of the year, a target tied to a hiring push for drivers and operations managers. Prufrock-5, one of the company’s tunnel boring machines, also just wrapped a test tunnel in Bastrop, Texas, and is expected to relaunch on its next assignment in November.
Whether the uranium joke turns into an actual product remains to be seen. Musk’s post did not include a price, a shipping date, or even a name for the item, which has historically meant a Boring Company website page goes up quietly, password protected, sometime before an announcement.
News
NASA taps SpaceX for more astronaut missions as Boeing Starliner remains grounded
NASA just gave SpaceX a $946 million contract for three more astronaut missions through 2030.
NASA has awarded SpaceX a $946 million contract modification covering three more astronaut missions to the International Space Station, according to an announcement the agency published Friday. The award adds Crew-15, Crew-16, and Crew-17 to SpaceX’s existing Commercial Crew Transportation Capability contract, bringing the agreement’s total value to $5.92 billion across 17 flights.
SpaceX confirmed the award on X, writing that it was excited for Falcon 9 and Dragon to launch NASA’s Crew-15, 16, and 17 missions to the Space Station from Florida. The new missions cover ground, launch, in orbit, and return operations, along with cargo transport and a lifeboat capability while docked at the station, and the period of performance runs through 2030.
We’re excited for Falcon 9 and Dragon to launch @NASA’s Crew-15, 16, and 17 missions to the @Space_Station from Florida https://t.co/Qm16vVK9F3 pic.twitter.com/drg3s7GtuM
— SpaceX (@SpaceX) September 18, 2026
The award follows a notice of intent NASA issued in May, when the agency first signaled it would purchase up to six additional post certification missions from SpaceX. Teslarati covered that filing at the time, noting NASA cited technical issues and schedule delays encountered by Boeing as a driving factor. Friday’s contract modification locks in three of those six missions, with the remaining three left open for NASA to award later, potentially to Boeing if Starliner clears certification.
Boeing’s CST-100 Starliner has still not flown an operational crew rotation mission for NASA. The spacecraft’s most recent crewed test flight in 2024 ended without the astronauts returning aboard Starliner, and the company has spent the time since working through thruster problems. SpaceX President Gwynne Shotwell said this week that SpaceX is not retiring Crew Dragon today, for sure, while stopping short of committing to fly it past 2030.
Crew-12 is currently docked at the space station, and NASA has said Crew-13 is targeting a launch in the coming weeks. The newly awarded Crew-15 through Crew-17 missions extend SpaceX’s role as NASA’s primary way of getting astronauts to and from orbit well into the back half of the decade, regardless of what happens with Starliner or Starship in the meantime.