yay! security-by-rollerblading-CSI-fairy-sprinkledust!
It is important to distinguish the asset. I would hope the primary asset is the driver & passengers Tesla just makes common sense decisions (e.g I can sit inside my car in Parking with the car on and all doors locked) but leaves advanced mod packages to security companies (e.g. want bullet proof glasses, abduction package, intruder lock-in... pay someone $$$ but don't ruin the default experience)
I would prefer a system that
- does not interfere with my "get in car and drive" experience,
optionally requiring no more than one hand gesture, including a silent duress gesture. Windows picture passwords and Android patterns are nice. N digit pins could be tolerable if optional.
- cannot be easily spoofed e.g. I can clone an RFID tag by knowing it's there and standing within 3 feet, I am sure the fob is much more than that.
- can be used to customize seat, driving behavior, etc (e.g. Is "creep" a car configuration or a personal setting?, "teen driver" etc.)
- can correctly distinguish between at least two 'primary drivers' that sit in the car simultaneously in driver and passenger seats (two fobs! two bluetooth-paired phones!)
- allows me to track car via app, send remote alert via app. Whatever the car does to authenticate drivers should be ported to the app.
- Is shareable i.e. I should be able to allow someone to drive the car away without giving up all my "i-have, I-know" stuff. E.g. a valet code, guest PIN etc.
- Allows remote unlock etc etc by Tesla service but
knowing there's good authentication on the phone. Remember the time
the Wired guy got digitally zorked? Otherwise people with internets and a sense of logic could be driving off in Tesla Model S cars especially early owners who gladly post VINs, delivery adresses, reservation numbers, photos with exif lat-long, tesla rep names and other info in this forum.
I trust the Tesla engineers to do the basics. I care more about personalization than strong authentication, and a system that lets people drive away with my car until I'm sure me and my family are safe.
Just the thought of passwords with special characters and numbers on my car
makes me groan..