News for hackers. Stuff that matters.
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by LeifCarrotson on Tuesday January 15, 2019 @10:58AM (#18912048)
You don't think they could ask their own salaried engineers and get a nice long list of secured-by-obscurity vulnerabilities?
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by _ph_ on Tuesday January 15, 2019 @11:30AM (#18912342)
If they want the best security, they should have a bounty program both internally and externally. Of course, one would expect the Tesla engineers to find bugs first, as they have earlier and closer access to the system. Such bug/exploit finding should be appropriately rewarded. But the closer you are working with a product, the more obvious things one might miss. I often miss bugs in my own code, while I am great at finding them in my coworkers code :). So external bounty programs attrackt a wide variety of clever people with an idependant mindset.
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by sametmax on Tuesday January 15, 2019 @11:07AM (#18912135)
We are talking about a company that made electrical vehicules economically realistic in a oil-addidcted world.

I think it's safe to think they have considered that already :)

Would you say it's unlikely they just maxed out what they can do internally and want new eyes to work on it ?

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by Someone1234 on Tuesday January 15, 2019 @11:15AM (#18912208)
> We are talking about a company that made electrical vehicules economically realistic in a oil-addidcted world.

When did that occur? They're still selling $40K+ cars while their competitors are selling cars in the $20K range; Tesla cars continue not to make financial sense, they're a luxury good.

Dollar per dollar the best bang for your buck is still likely hybrid vehicles followed by the cheapest electric vehicle you can find.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by cheald on Tuesday January 15, 2019 @11:23AM (#18912277)
It wasn't very long ago that electric cars were considered nothing more than an elaborate joke which would never command equal consideration with gasoline-powered cars.

The Roadster definitely challenged a lot of those assumptions. Tesla proved they could make an electric car people wanted, rather than one they hated but tolerated out of a sense of moral obligation.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by Someone1234 on Tuesday January 15, 2019 @11:56AM (#18912575)
You're arguing a completely different point than the one I responded to.

> made electrical vehicules economically realistic

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by cheald on Tuesday January 15, 2019 @12:45PM (#18913132)
I don't think I am - consumer acceptance is a critical part of economic viability. A product which nobody wants to buy isn't a viable alternative, regardless of price point.

To cast some perspective, Nissan has sold about 380k Leafs - the most popular electric car in the world - worldwide over the past 8 years. Tesla has shipped over 160k Model 3s in the US alone over the past 14 months (and currently continues to sell another 20k or so per month).

The vehicle market is huge, and Tesla has by no means conquered it, but they've put a much larger dent in it than any other electric vehicle manufacturer, and have been instrumental in changing public opinion on EVs.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by astrodust on Tuesday January 15, 2019 @01:08PM (#18913358)
Tesla has made an inconsequential dent in the automotive market. Their cars really don't exist in any statistical sense.

Volkswagen, post diesel fiasco, is best situated to hard-pivot to electric. Nissan is alreday succeeding. Others will follow suit as soon as it's economically viable, and mostly this depends on battery tech improving a little bit more.

Tesla is not the leader: https://www.forbes.com/sites/bertelschmitt/2017/05/01/who-is...

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by cheald on Tuesday January 15, 2019 @01:40PM (#18913647)
Certainly they haven't conquered the auto market - it's huge. I don't think anyone has made that argument, though.

Your article is nearly two years old, though; 2018 was a very different year for EVs because of the Model 3. Here's some actual sales data for you: https://insideevs.com/monthly-plug-in-sales-scorecard/

The Model 3 accounted for 38% of all EV or hybrid vehicles sold in the US in 2018 and 60% of all BEV vehicles. Tesla's 3 vehicles accounted for over 50% of all EV/hybrid sales, and 82% of all BEV sales in the US in 2018. How you can look at that and conclude that they aren't the leader in that space is beyond me.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by astrodust on Tuesday January 15, 2019 @02:18PM (#18913987)
I get it, you hold $TSLA and you're hoping it goes to the moon.

The US market is not the world market, and world-wide Tesla is inconsequential. Even in the US it's highly localized, and in those areas it's still inconsequential.

The Model 3 has suffered from ridiculous levels of mismanagement and process problems. They are so far behind on targets it's amazing their entire management team hasn't been sacked and replaced with people who know what they're doing.

One day a company that's competent, like Toyota, will brush Tesla aside without even trying. Until then Tesla has a fraction of a fraction of the sales in the US.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by cheald on Tuesday January 15, 2019 @02:42PM (#18914222)
Heh, I have one share of TSLA, and that's just a symbolic statement of my desire to see them succeed in their mission. Guess that makes me a shill. I'll enjoy my 4.3 seconds of retirement on the proceeds. Is this the part where I accuse you of being one of those eeeeevil shorts in response?

The US (well, North American) market comparison is apt because that's the only market that Tesla is manufacturing and selling in in any appreciable quantity right now. It's somewhat difficult to quantify demand response in markets where supply isn't available.

Toyota may well come from behind and eclipse Tesla. I'm not particularly concerned if they do or not, but I do think it's ignorant to look at the EV landscape and not conclude that Tesla has created demand and interest in a market previously marked by tepid apathy. You're arguing global auto markets, I'm talking about impact on consumer sentiment towards EVs. Two totally different discussions (and frankly, a rather clumsy strawman on your part).

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by sametmax on Tuesday January 15, 2019 @11:22AM (#18912265)
It happened when we shifted from "electrical cars are hippie nonsense" to "we think there is a strong possibility in a not so distance future they will replace most oil based cars". They enabled that thinking. It just didn't exist before their first roadster.
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by sametmax on Tuesday January 15, 2019 @12:01PM (#18912638)
You said "You're arguing a completely different point than the one I responded to" to another commenter, but so are you. The initial debate is wether given Tesla size and expertise, it's logical to expect them to indeed have done their homework and now chose another approach to find bugs.
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by freehunter on Tuesday January 15, 2019 @01:17PM (#18913443)
The Model 3 is the best selling luxury car in the US. Outselling tons of SUVs, in a US auto climate where the biggest automakers are ditching cars altogether in favor of SUVs.

I'd say that counts as "economically realistic", even if it doesn't meet your further-back goalpost of "best bang for the buck". If the Model 3 isn't economically realistic, someone should tell that to Audi and BMW and Cadillac and Mercedes-Benz.

https://www.cnbc.com/2019/01/08/teslas-model-3-was-2018s-bes...

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by gamblor956 on Tuesday January 15, 2019 @11:37AM (#18912397)
We're talking about a company that spent more than a billion dollars to build an assembly line they discovered after the fact wouldn't work...

It's not safe to say anything about Tesla's capabilities or competencies at this point.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by SEJeff on Tuesday January 15, 2019 @11:55AM (#18912556)
UBS hired professionals to tear down a model 3 and they think the raw tech is way ahead of the competition. Read the report yourself: https://www.dropbox.com/s/3wfof8kfw02cbbf/Teardown%206.pdf?d...

Munroe's teardown also had some interesting findings (both good and bad, but that was the goal):

https://cleantechnica.com/2018/04/29/munro-tesla-model-3-tea...

A suspension worthy of formula one was quite a compliment. I'd say there are some things that Tesla does uniquely well. Safety is another one. Remember that time the NTHSA literallyu broke their testing machine when testing the Model S for crash safety? No? Here are some videos:

https://www.roadandtrack.com/new-cars/videos/a5238/watch-the...

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by treis on Tuesday January 15, 2019 @12:28PM (#18912924)
>UBS hired professionals to tear down a model 3 and they think the raw tech is way ahead of the competition. Read the report yourself: https://www.dropbox.com/s/3wfof8kfw02cbbf/Teardown%206.pdf?d....

That reads like an ad paid for by Tesla

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by Latteland on Tuesday January 15, 2019 @01:01PM (#18913282)
Multiple separate automobile teardown companies have reported the same thing, basically, we don't believe it can be this good then afterwards, wow, this is more sophisticated than they believed anyone would do now. Such as https://electrek.co/2018/07/26/tesla-model-3-teardown-electr...
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by SEJeff on Tuesday January 15, 2019 @01:23PM (#18913492)
Literally my point! Tesla can't do that! hires professionals to reverse engineer a Tesla Oh , Tesla did that! What shall we do today Pinky?
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by SEJeff on Tuesday January 15, 2019 @01:24PM (#18913496)
Read the report yourself. It stands on its own.
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by astrodust on Tuesday January 15, 2019 @01:06PM (#18913330)
There's two parts to engineering: Making something good, and making something you can manufacture inexpensively. These two are in complete contradiction most of the time.

You can "engineer" the hell out of something and still do a terrible job as an engineer. Tesla's infatuation with novel, clever things often gets in the way of shipping. Their fiasco with the model X gull-wing doors is just one example of a billion.

It's easy to make your car better when you can charge vastly more and you've got tons of VC money you can blow through in pursuit of some distant goal. Established car companies have no such luxury.

This is not to say Tesla hasn't had some wins, but on the whole they're losing.

Arguably Tesla is the Juicero of cars.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by freehunter on Tuesday January 15, 2019 @01:18PM (#18913457)
>It's easy to make your car better when you can charge vastly more and you've got tons of VC money you can blow through in pursuit of some distant goal. Established car companies have no such luxury.

Isn't that called "disruption" and is the entire reason Silicon Valley exists?

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by astrodust on Tuesday January 15, 2019 @02:20PM (#18914015)
You can "disrupt" without being in the Valley, plus a lot of companies that claim they're disrupting are just cherry-picking customers and barely moving the needle in terms of net-new technology.

It's easy to make a billion dollar start-up if you get two billion in cash you can blow on acquisitions. It's hard to make that company survive more than ten years.

When Tesla runs out of VC money, which they will, things are going to turn ugly in a hurry. All this money they've blown on door hinges and sending cars into space will be gone and they'll have to turn a profit. I'm not sure they can without massively cutting back and radically simplifying their product.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by sametmax on Tuesday January 15, 2019 @11:53AM (#18912545)
Any people in this thread capable of creating revolutionary vehicules, mass building them, and selling them for years, raise your hand.
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by gamblor956 on Tuesday January 15, 2019 @04:27PM (#18915517)
Toyota and Nissan have their hands raised, and have had their hands raised for decades.

The market for clean vehicles exists because Toyota and Nissan showed there was demand for it. Tesla came in and made better-looking cars (from a distance, they're quite shoddy looking up close), but they're competitively only because Toyota and Nissan have chosen to stick with their distinctive designs rather than put their EV tech into mainstream vehicles.

And Tesla's big problem is that the rest of the industry is finally getting around to putting their EV technologies into mainstream vehicles, almost all of which are better made and far more reliable.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by thecanman on Tuesday January 15, 2019 @12:48PM (#18913166)
What does that have to do with what he said about Tesla? Are you going to debate with him or are you going to make another non-contributing comment?
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by rchaud on Tuesday January 15, 2019 @01:18PM (#18913450)
Rebuttals of the "Oh yeah? Well, what world changing things have YOU done?" variety are common if someone brings up anything remotely negative about Tesla.
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by gamblor956 on Tuesday January 15, 2019 @04:30PM (#18915540)
Well, for myself, I've changed the law in several countries in ways that have greatly improved the lives of the people affected by them.

I feel pretty confident in my right to criticize Tesla for it's presumptive and poorly executed overreach.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by gens on Tuesday January 15, 2019 @11:34AM (#18912368)
What about Nissan?

That aside, i don't trust any car maker to make good software. Especially infotainment. Especially if it has bluetooth/wifi. And especially if there's internet involved. Let's just say i'm holding back words here.

Grand majority of software development is not very strict on best security practices. But a two ton object that can easily move at speeds over 100kmh demands insane security measures. That's my opinion, at least. I know people will sooner buy a car with spotify. And i know people won't just hack other peoples cars and make them crash. But still, it weights two tons and moves at two hundred kilometers per hour.

As a side note; someone else wrote how Teslas are advanced in terms of computer technology then other cars and how many computers they have in their cars. Lots of other cars have a ton of computers in them. It's nothing new.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by sametmax on Tuesday January 15, 2019 @11:39AM (#18912418)
The comment was answering "You don't think they could ask their own salaried engineers and get a nice long list of secured-by-obscurity vulnerabilities?" by saying that since Tesla is a leading player in the electrical car industry, it's fair to assume they did that already and is why they are now seaking experience from outside.

Since I'm not giving any evualation in any way about the quality of the software resulting in those actions, is your comment stating that I'm wrong, in a way I couldn't understand ?

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by gens on Tuesday January 15, 2019 @12:14PM (#18912770)
I was reading the LKML(linux kernel mailing list) back when some.. people were pushing DBus (a message transport protocol) into the kernel (in a slightly different form, as kdbus). Main reasons were performance (dbus sucks there) and.. i think security or something. Many comments in and the main reasoning for the performance improvement (of moving it into the kernel) was context switching (going from a userspace program into the kernel and/or back). At least two senior RedHat engineers, the top kernel maintainer, and a bunch of other engineers. Out of all of them NOBODY bothered to check out why dbus is slow. Until Linus himself ran a simple test and found that the user-space dbus daemon is not optimized at all. Context switches were something like 1% of the actual performance cost. Well.. saying that nobody bothered to check is just my wishful thinking, thinking that it is incompetence or just them just being jaded by fancy technology rather then malice (there's more to the story).

Anyway. One of the mails was an infotainment engineer at some car company. Before that I, for some reason, thought that such a big and serious industry is very serious when it comes to software. But right then it clicked that car software makers are just as any other software writers (maybe a bit more serious). This was before two hackers hacked a Toyota. And later a Range Rover (or something) over bluetooth. Bout those companies are much older and much more serious then Tesla, and probably have plenty of world class coders at their disposal.

As for the first part of what I wrote above (that i forgot by now). Teslas are not the first commercially viable electric car. They may be among the first to have nice range (over 300km). And Teslas are not the most affordable, that goes to the Nissan Leaf (2017 and above). Granted the Nissan is not a big car, closer to a Clio.

On another though, they could just hire a security company to do a deep audit. Maybe they have. Maybe that's why they are incentivizing crackers. I do not and probably can not know.

edited for readability

EDIT: I'd maybe trust Rolls Royce. But i don't have money for that so it doesn't matter.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by sametmax on Tuesday January 15, 2019 @12:32PM (#18912974)
Can't reply to gens comment, so I'll do it here:

I see that you had many experiences with failing engineering, and so have I. What's more, car manufacturers have been involved in more and more scandals, and this does include code quality. As a matter of fact, I did meet people with direct experience on car systems code that reported deep quality problems.

It's then logical to say there is a possibility Tesla screw up.

However, electrical cars have been holding computers since day one. Tesla demonstrated the ability to create, build and sell at scale complex electronic systems with generally well considered performance. Also their will to allow outsiders to attack it can be interpretted as a desire to improve the system, and hence it makes sense to think this desire existed before, and they that did their homework (which is the original topic of this thread).

We are discussing ability to setup a process, not to succeed in it.

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by gens on Tuesday January 15, 2019 @01:26PM (#18913517)
You need to wait a bit.

Anyway. I'm sorry. I forgot for a second that I don't want to take part in these kinds of discussions. Tesla, in this case. You can have your faith.