Tesla Under Attack - Attempted bribery and malware

[geoalan]

Anyone heard anything about this?

Commercial Companies Attacked: Tesla Malware Attempt Proves It - ClearanceJobs

 

[BlindPass]

I’m not looking forward to the cyber security aspect of cars becoming IoT. My guess is Tesla, given its roots, will be on top of this better than most manufacturers

 

[David.85D]

Maybe it’s related to turning off access to TeslaFi. Only the shadow knows...

 

[Wol747]

I don't click on links.......

 

[David.85D]

It reported on a scheme to inject malware into the Tesla network by bribing an employee for access. The employee didn’t and helped the FBI trace the source.

 

[Wol747]

Good!

 

[Joelgjr]

is it technically possible for someone to hack Tesla's system, and gain control of a particular (or all) vehicles and activate summon or something similar and have a car start driving itself? I'm not a software guy so I don't really know if that's technically possible

 

[Saghost]

is it technically possible for someone to hack Tesla's system, and gain control of a particular (or all) vehicles and activate summon or something similar and have a car start driving itself? I'm not a software guy so I don't really know if that's technically possible

Depends on how much you assume the hacker can compromise. There are layers of security and interlocks in place that are supposed to prevent such things from happening, but in theory they could be bypassed or subverted by a sufficiently informed, talented, and determined attacker, if such a party exists.

When a 0 day vulnerability was uncovered in Tesla code that gave some potential control to folks who owned the WiFi you’d used to run a remote app command a few years ago, Tesla rolled firmware to the whole fleet in 48 hours that blocked it.

That’s probably the shape of the future. You can’t always stop a determined hacker, but after they succeed with a car or two you can shut down whatever method they came up with, and Tesla has proven capable and motivated in that regard.

(A similar hack in Chrysler infotainment systems around the same time still worked on half the fleet nine months later because they had to get letters of recall out to people, who then had to bring the car to the dealer for an hour to update it.)

 

[2101Guy]

It reported on a scheme to inject malware into the Tesla network by bribing an employee for access. The employee didn’t and helped the FBI trace the source.

Corect. Per multiple articles, it was a ring that had already successfully compromised numerous other companies including some being US.
The suspects/arrested person(s) were Russian.

So, wont be uprising if all are pardoned in the coming weeks....

 

[Kirk Smith]

Has anyone else had their Tesla (with FSD Beta) try to connect to Beijing Baidu? My router flagged it as malware and blocked the connection. It sounds like a Tesla competitor trying to access data.

 

[TLLMRRJ]

is it technically possible for someone to hack Tesla's system, and gain control of a particular (or all) vehicles and activate summon or something similar and have a car start driving itself? I'm not a software guy so I don't really know if that's technically possible

As someone that has been a programmer since 40 years ago and was in cybersecurity for 7 years, absolutely anything is possible, so yes.

 

[Sam1]

As someone that has been a programmer since 40 years ago and was in cybersecurity for 7 years, absolutely anything is possible, so yes.

Dang 40 years? Were you programming Cobol on stone tablets and chisels back then?

 

[TLLMRRJ]

Dang 40 years? Were you programming Cobol on stone tablets and chisels back then?

Let’s put it this way: most people back then thought it was pointless and stupid to have a computer.

 

[Wol747]

Let’s put it this way: most people back then thought it was pointless and stupid to have a computer.

................and they were right. I've spent all day going round and round rabbit holes of password changes, unstructured security sites an so on.

 

[teko]

Dang 40 years? Were you programming Cobol on stone tablets and chisels back then?

No dude, we were using AI called expert systems

 

[TLLMRRJ]

................and they were right.

Really? I don't think there's a single one of them still alive today that doesn't have multiple computers at home right now.