Welcome to Tesla Motors Club
Discuss Tesla's Model S, Model 3, Model X, Model Y, Cybertruck, Roadster and More.
Register

How Secure Are Teslas/Tesla Thefts

This site may earn commission on affiliate links.
As we have multiple suggestions, what do people think are the top 4 or 5 things to do that achieves most things without being OTt? Mine are :

- avoid giving away tokens unless confident in who to
- P2D and sentry, but for me I’d like to have P2D excluded when at home, just like you can with sentry
- valet mode and a burner key fob when leaving yojr car with anyone
- never leave valuables on show
Enable Multi-Factor Authentication on your Tesla account.
 
Given a Tesla is supposedly an internet connected smart device, it can stream cameras over the internet, stream music or accept voice commands even in a very basic argument of such. I guess it might fall under cyber security laws and Tesla have a responsibility to fix such vulnerabilities.

Yeah, sure. Wrap mirror with foil (that's where antenna is located) or remove SIM card. Suddenly it is a bit newer ford escort does the hardware manipulation suddenly makes it cyber?

When someone robs cash machine with a digger and steals cash from cash machine. It it cyber crime (cash machine is a computer, connected to internet) or just simple robbery?
 
Last edited:
I watched the video you posted. You'll note he disconnected the MCU1 power, added signal interference to one of the data lines then re-started it such that it booted without P2D. The voiceover sounded a bit like 'safe mode' (i.e. MCU handles the garbage config in as reinitialise to new). He then manually disabled the default configured options. There was nothing on-screen to indicate it was in true service mode. Arguably Valet Mode is just another setting, which isn't enabled by default, so no luck there for MCU1. In my case I have MCU2, so it is an added layer of depth to attack resistance. Perhaps a window MCU2 sticker as deterrent might be good enough for both. The video description also mentions 'intentional inaccuracies' in its making.
Well yes, but that's the point.

As soon as you have physical access, then it's just simple know-how.

You can brute force anything if that is really needed
 
Yeah, sure. Wrap mirror with foil (that's where antenna is located) or remove SIM card. Suddenly it is a bit newer ford escort does the hardware manipulation suddenly makes it cyber?

When someone robs cash machine with a digger and steals cash from cash machine. It it cyber crime (cash machine is a computer, connected to internet) or just simple robbery?

I don't write the law. But the wording is clear that cyber also means physical attacks, i.e. any vulnerability, on internet connected devices.

You're entitled to argue it's wrong, but Tesla can't say they don't have responsibility just because some people disagree with it.

An old Ford escort wasn't internet connected, that's the difference.
 
So, when someone uses a digger and pulls cash machine out of local shop wall - is this a robbery or cyber crime?

Not cyber because it's not a smart device, nor internet connected.

If you want to, the act is online for you to read and plenty of definitions available.

A Tesla qualifies as an internet connected device, not qualifies just because it's a car.

IoT (internet connected) devices needed to be hardened from all attacks (physical or otherwise) because they represent a cyber threat. For example if a physical attack of a Tesla car gained new access to the mother ship, or became part of an online denial of service attack, e.g. bot net.

Its vital all internet connected devices are protected and that was the point of the new act.
 
Last edited:
Sorry, do you know how an ATM works?
You believe it’s not connected to the internet? 🤨

Exactly right and hence they need to be protected too. The other post was seemingly comparing diggers and old cars with Tesla, using the ATM just to create the internet association.

It's a constant battle. Banks don't just give up, they also keep improving their ATM's. Just as Tesla need to keep improving.

The law requires them all to keep improving and updating in that battle. Not everyone did and hence why the act came about.
 
Last edited:
but cash machine is connected to the internet and essentially is a computer ;)

you see, simple lines of cyber/non cyber does not apply so traightforward
In the eyes of the law, it’s very simple.

As for whether something is considered a “cyber” attack, it comes down to the method of attack, generally being an attack carried out remotely via the internet or other communications network. Simply stealing something that is connected to the internet does not make it cyber crime.
 
In the eyes of the law, it’s very simple.

As for whether something is considered a “cyber” attack, it comes down to the method of attack, generally being an attack carried out remotely via the internet or other communications network. Simply stealing something that is connected to the internet does not make it cyber crime.
Exactly.
 
The whole concept of 'cyber crime' just seems to me to be a throwback to a few years back when companies were popping up getting patents granted for really obvious everyday stuff by tacking 'with a computer' on the end.

We don't need laws to stop from stealing money from banks with a computer. The existing laws stopping them from stealing money from banks were perfectly adequate.

Stealing a car with a computer is stealing a car. There are laws against it already. Why overcomplicate it?
 
  • Like
Reactions: Beady3647
They may currently be targeting MS (and one might imagine MX) but we know M3/MY attacks are coming down the line. Security researchers have demonstrated relay attacks against the M3 using phone key; assumed to be applicable to MY and to M3/MY fobs, too. Only a matter of time before the criminals get these tools.


I'm thinking a Disklok might be in order... Anyone know if the small size fits the M3 OK?
@Roy B Dis you get any answer?

I am currently researching the Disklok for my Y. Their ads and even their vehicle list do not mention Tesla. Has anyone had better luck with Disklock or similar?
 
I find all these wheel locks useless these days.

All cars have immobilizers and it by default will stops any kids to take your car for a ride. And it is unlocked by professionals within seconds, so it adds more hassle for you than anyone who is trying to steal it.