It’s gotten to the point that whenever people see Teslas, they automatically start laughing.
Tesla also seems to have taken over the “douchebag driver” stereotype that used to be reseved for BMW’s and Mercedeses.
Teslas Can Be Stolen by Hijacking WiFi at Charging Stations, Researchers Find
Submitted 8 months ago by catculation@lemmy.zip to technology@lemmy.world
https://futurism.com/the-byte/teslas-stolen-wifi-charging-research
Comments
Kyrgizion@lemmy.world 8 months ago
Orbituary@lemmy.world 8 months ago
If they weren’t all so abysmally bad at handling their cars, maybe I’d have a different take. I swear that I get cut off, stuck behind, blocked by, or otherwise inconvenienced for dumb reasons by Teslas every time I drive.
It’s like despite all the cameras, they have zero spatial awareness. Or it’s a direct reflection of what’s in their head.
givesomefucks@lemmy.world 8 months ago
Eh…
I hate to do it, but in fairness the worst drivers are going to be the first to adapt self driving cars.
The issue is Tesla misrepresents how “self driving” their cars are.
So idiots who are bad drivers think the car is a good driver. Because they’re comparing it to their own driving, and overestimate how good they are at it
paysrenttobirds@sh.itjust.works 8 months ago
I’m not disagreeing, but having driven a Tesla for a couple weeks-- it’ll make a good driver look bad every time. Turning radius is surprisingly bad. Normal (through the window/mirror) visibility is bad. Handling is super weird and probably unlearnable in the default settings because the car seems to be constantly “correcting” your inputs even when not in autopilot. The default break style gives me motion sickness even when I’m the one driving. And the turn signals-- you just don’t know how long they’ll stay on, so I did start to feel reluctant to use them?
BruceTwarzen@kbin.social 8 months ago
There are a lot of roundabouts where i live and when i see a tesla, he's either not using his turn signal or is on the phone or somehow very often both. Tesla people seem to be on their phone more often than other people in the road. Which is even weirder, because they all have that elaborate electronics on board, no?
800XL@lemmy.world 8 months ago
Who can bothered with silly driving when there are calls to make? They only bought a Tesla to have an electronic chauffeur. Even though it’s not supposed to be used for that.
ChickenLadyLovesLife@lemmy.world 8 months ago
Tesla people seem to be on their phone more often than other people in the road.
I don’t know, I see people in all different makes of cars talking on their phones while driving - usually that weird shit where they’re holding it flat in front of their face and yelling into the mic. I’m a school bus driver and whenever somebody blows past my flashing lights (which happens a lot), 99% of the time they’re on their phone and not paying attention. One time I even had a cop do this.
droans@lemmy.world 8 months ago
HamCo?
I see them all the time near 37. You always gotta be careful around them.
It seems like the Mustang EV is selling better nowadays at least. I see just about as many of them on the road compared to Teslas.
Witchfire@lemmy.world 8 months ago
I live in the city and only really ever see them parked over the curb or in front of a NO PARKING sign. I don’t think I’ve ever seen a properly parked Tesla.
I also laugh at them every time I see one because they look fucking stupid. I die inside whenever I call an Uber and a Tesla pulls up.
newtraditionalists@kbin.social 8 months ago
I'm relieved this is universal. I thought I was going crazy. I've actually begun to give them a ton of space on the road now. I'll purposefully take a different road, or on the freeway, get over to right lane and slow down to get the fuck away from them. It seems like they are making a point to drive as terribly as possible. It's fucking crazy.
ChickenLadyLovesLife@lemmy.world 8 months ago
whenever people see Teslas, they automatically start laughing
I dunno, I’m a school bus driver and little boys (like, grades 1-8) always go apeshit when they see a Tesla (or a Ferrari or Lamborghini as well). And a lot of adults still seem to be buying them.
jtk@lemmy.sdf.org 8 months ago
So, children and adults that never mentally matured past 8th grade still think they’re cool. Can’t argue with that.
mibo80@lemm.ee 8 months ago
Agreed on the driver stereotype. Here in the SF Bay Area Teslas are abundant on the roads and a good 60-70% of their drivers are absolute shit.
acockworkorange@mander.xyz 8 months ago
I hate the company, but where I live the drivers are definitely undeserving of general condemnation. Altimas, on the other hand…
HubertManne@kbin.social 8 months ago
its always been lexis for my area.
BakerBagel@midwest.social 8 months ago
Pickups with Michigan plates here in Ohio.
givesomefucks@lemmy.world 8 months ago
Once logged in, the hackers could even create a new “phone key,” allowing them to come back to the vehicle later and drive off with it without raising suspicion.
That’s because Tesla doesn’t actually notify the user if a new key is created, as Mysk and Bakry point out in their video.
Mysk tested out the vulnerability on his own Tesla and found that he was easily able to create new phone keys without ever having access to the original, physical key card. That’s despite Tesla promising that wasn’t possible in its owner’s manual.
Once he told Tesla about his findings, the EV maker underplayed the vulnerability, telling him it was all by design and “intended behavior,” an assertion that Mysk called “preposterous” in his interview with Gizmodo.
“The design to pair a phone key is clearly made super easy at the expense of security,” he said.
Mysk argues it would be easy for the automaker to plug the vulnerability by simply notifying users if a new phone key is created.
Weird they keep misspelling Musk, but it sounds like this would be something incredibly easy for Tesla to fix, they’re just not doing it and denying it’s a problem…
Albbi@lemmy.ca 8 months ago
I’m surprised Tesla hasn’t gotten to the point yet where it’s just replying with 💩, but I guess this response wasn’t too far off from that.
evergreen@lemmy.world 8 months ago
Same kind of dictator mentality I’d expect from Musk himself honestly. Doesn’t fix the problem because he’s insulted that someone else pointed it out. Cutting off his nose to spite his face. He’s good at that. I’m really surprised the board still tolerates his shit.
redditron_2000_4@lemmy.world 8 months ago
It’s something they “broke” recently. You used to require a physical card to pair a new phone key. I noticed when I replaced my phone that it was no longer needed. They should be able to fix it easily, but I’m sure they won’t.
You can enable pin to drive to reduce the risk, but if you have the creds and there is no 2FA on the account then you can use the app to bypass it.
AA5B@lemmy.world 8 months ago
Really, crap, when I brought my Tesla home I promptly put the keycards somewhere secret even to me, expecting to never need them again
BakerBagel@midwest.social 8 months ago
Announcing and oarch security flaws might cause stock prices to dip. And Daddy Musk wint have that
noobface@lemmy.world 8 months ago
Easy to fix moving forward, but a really public admission of “oops” to all current phone key users who will have to reauth their phones.
Lucidlethargy@sh.itjust.works 8 months ago
That’s because everything Musk touches turns to fucking shit. Everyone is aware of this in 2024.
STOP USING AND BUYING THIS GUYS BULLSHIT, YOU FUCKING IDIOTS.
Maggoty@lemmy.world 8 months ago
But hey let’s put wifi in our heads right Elon?
This is just… Completely avoidable and a great example of XKCD’s take on cyber security.
merthyr1831@lemmy.world 8 months ago
Software engineers can be split into two groups: those who aspire to own a Tesla, and those who aspire to replacing every digital appliance they own with an analog alternative
pipe01@programming.dev 8 months ago
And which is better?
Johanno@feddit.de 8 months ago
Aaaaaahh! Wear gloves! Burry it in the desert!
RealFknNito@lemmy.world 8 months ago
Wonder how long until jailbreaking your EV becomes common place to turn off shit like Wifi.
can@sh.itjust.works 8 months ago
Fuck it jailbreak the tesla
AA5B@lemmy.world 8 months ago
Or you could click the setting. Or not login to a website you didn’t expect to see
RealFknNito@lemmy.world 8 months ago
Proprietary software is often locked down to be idiot proof and tamper proof to the average consumer. Actually disabling the wifi (not just turning off SSID broadcasting) or other exploitable points might require a deeper level of access than just the settings page.
And it’s not websites people are concerned about. There’s a pretty common hacking concept where you attack the weakest connected device. If your car connects to your garage door opener, your coffee maker, your washing machine, all your smart devices - they only need to get access to one to get access to all of them since those devices are ‘trusted’. Your car doesn’t know why your coffee maker says ‘unlock’ but it’s gonna listen, it trusts your coffee machine.
UsernameIsTooLon@lemmy.world 8 months ago
What could that even entail? Unlock faster speeds for free instead of having to pay the premium?
CCDKP@lemmy.world 8 months ago
Except in the article here, they are counting on a driver connecting their phone to the wifi and logging in with Tesla credentials.
In this instance you don’t need to disable anything in the car.
DancingBear@midwest.social 8 months ago
brbposting@sh.itjust.works 8 months ago
Fewer things have been better established than the fact that yes, absolutely, without hesitation: we would download a car.
THE_ANTIHERO@lemmy.today 8 months ago
No just transfer it
masquenox@lemmy.world 8 months ago
I would download a car - unless it’s a Tesla. I do have standards, you know.
Aatube@kbin.melroy.org 8 months ago
TL;DR: Phishing + no additional precautions against creating digital car keys once logged in
KairuByte@lemmy.dbzer0.com 8 months ago
With a sprinkling of “omg flipper zero” for some reason.
danc4498@lemmy.world 8 months ago
Worth noting that it isn’t just “hacking WiFi”. You have to have the username and password associated with the car.
unconfirmedsourcesDOTgov@lemmy.sdf.org 8 months ago
Yes, that was the “phishing” bit.
superduperenigma@lemmy.world 8 months ago
Kia Boys are moving up in the world.
FinalRemix@lemmy.world 8 months ago
Well, it’s not like you can smash the windows in a Tesla… even if you’re trying to save someone’s life apparently.
BlackNo1@lemmy.world 8 months ago
mr krabs i have an ideaaaaa
Pantherina@feddit.de 8 months ago
Aah yes, just to prevent… touching your door knob?
autotldr@lemmings.world [bot] 8 months ago
This is the best summary I could come up with:
Researchers have found that hackers could easily hijack WiFi networks at Tesla charging stations to steal vehicles — a glaring cybersecurity vulnerability that only requires an affordable, off-the-shelf tool.
“Phishing and social engineering attacks are very common today, especially with the rise of AI technologies, and responsible companies must factor in such risks in their threat models.”
Cybersecurity researchers have long rung alarm bells over the use of keyless entry in the car industry, which leave modern vehicles at risk of being stolen.
Using their weapon of choice, hackers create a spoof WiFi network called “Tesla Guest” that masquerades as the real thing.
If a victim were to try to access the network, which the EV maker normally provides free of charge to waiting customers, they could be duped into giving up their login by entering it into a duplicate site.
Once he told Tesla about his findings, the EV maker underplayed the vulnerability, telling him it was all by design and “intended behavior,” an assertion that Mysk called “preposterous” in his interview with Gizmodo.
The original article contains 428 words, the summary contains 175 words. Saved 59%. I’m a bot and I’m open source!
ahriboy@lemmy.dbzer0.com 8 months ago
The Watch Dogs series warned everyone.
boredtortoise@lemm.ee 8 months ago
praxis?
fne8w2ah@lemmy.world 8 months ago
Somebody should seriously start trolling Elmo this way lol 😂
aesthelete@lemmy.world 8 months ago
haha
scops@reddthat.com 8 months ago
At that point, why mention the Flipper Zero or RPi? Just say it can be done without specialized hardware. I feel like they’re trying to piggyback off of the buzz from the Flipper Zero being banned in Canada recently.
Morefan@retrolemmy.com 8 months ago
Flipper Zero doesn’t even have WiFi. At most it’s a screen and button input device for ESP8266, ect.
Cqrd@lemmy.dbzer0.com 8 months ago
You can buy a WiFi module and just plug it in as HAT, but I still think it’s stupid to even mention when you can use pretty much anything with WiFi that you control. You could probably do the same thing with a rooted Android phone if you wanted.
RealFknNito@lemmy.world 8 months ago
Flipper Zero is kinda whatever it wants to be since it has ports for additional modules. It’s a hacking tool you need to hack for it to work to get around (most) legal issues.
ikidd@lemmy.world 8 months ago
Maybe they’re trying to justify the stupidity of that ban. I’m still shaking my head over that, it’s like nobody bothered to ask the question “does this thing actually do the thing we’re mad about?”
Transporter_Room_3@startrek.website 8 months ago
Given how often it happens in other industries, it wouldnt surprise me to find out that someone, somewhere along the line has an agenda to push and are trying to lump certain things into the same category as a thing people aren’t supposed to like in order to get the thing that’s only kind of related banned.
Heck, I personally know people who want 3d printing to be banned because “you can 3d print guns”. I can make a gun with a trip to the hardware store and a few hours. The extra hours are to make sure I can use it more than once. I’m just using this as an example, it’s not quite the same.
I also know people who have seen the drone headlines for Ukraine and give me the side eye when I mention I have a drone and can build my own at home. One coworker has even asked why I “need” to build drones and that having a bunch of hardware to do stuff like that is “sketchy”. Drones are already being regulated into the ground over a few high profile incidents. And some try to lump rc devices into the same category. Sorry I can’t fly my 8oz foam plane here, it’s in the same class as 200lb agricultural drones with 12 rotors and I need special FAA authorization. You can build an ultralight aircraft in your garage and fly it across country without running it by anyone first, though.
I rambled a bit but my point is every time you see things being lumped together and you’re scratching your head as to why, ask yourself “who wrote/published/shared this, who are they affiliated with, and do they have a reason to want one of these things or similar products regulated” and you’ll see a surprising amount of shady bs going on that’s all perfectly legal.
Visstix@lemmy.world 8 months ago
What is the thing used for?
Imgonnatrythis@sh.itjust.works 8 months ago
There was nothing in this article that wasn’t sensationalist click bait crap.
rob_t_firefly@lemmy.world 8 months ago
In other words: you only need a computer. 😱
ColeSloth@discuss.tchncs.de 8 months ago
I believe this method came out weeks ago and I had thought I’d read tesla already took care of it, but may be wrong. You still have to hang out long enough to get someone who actually wants wifi, but doesn’t want to stay at their car where the wifi is at, and then will also fall for a phishing attack and put in their verification code sent to their phone into the fake site.
All to swipe a car that’s going to be noticed as being stolen very quickly, and when all teslas come standard with GPS location tracking.
So what’s the point of stealing a car after possible hours and hours of waiting for a mark and then taking it while the owner can report it and it’s location the entire time.
Player2@lemm.ee 8 months ago
They haven’t banned it yet, they’re just looking to do so at some point
RampantParanoia2365@lemmy.world 8 months ago
Well, most laptops do cost more than $169