Tesla Car Hacked Remotely from Drone via Zero-Click Exploit

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by ajross on Wednesday May 05, 2021 @12:36PM (#27052158)

Obviously security bugs are bad and need to be fixed. But the point is that the security architecture seems to have made the right choices here. It's the same defense in depth strategy that puts reverse proxies in front of our web applications, or runs a database server behind a managed protocol such that SQL commands can never come from the front end boxes.

Or, for a glib answer: if you need to stop the car safely, engage autopilot and unbuckle your seatbelt. The car will turn the hazards on and pull over on its own.

[ Parent | on HN ]

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by jfrankamp on Wednesday May 05, 2021 @01:10PM (#27052641)

Does anyone know if the glib answer works? Does the steering column selector stalk go through the ui (and therefore is interceptable by the supposedly compromised interface) or is it directly connected to the 'backend' below?

Calling the critical ui interface the 'infotainment' system for a tesla is slightly misleading.

[ Parent | on HN ]

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by filoleg on Wednesday May 05, 2021 @01:39PM (#27053046)

>Does the steering column selector stalk go through the ui (and therefore is interceptable by the supposedly compromised interface) or is it directly connected to the 'backend' below?

It is directly connected to the 'backend' below and doesn't go through the infotainment system/UI.

You can manually kick off a reboot of the infotainment system on a Tesla while you are waiting at a traffic light, and still drive like usual just fine if the light goes green a second after. The only non-functional stuff will be the visuals on the screen and anything infotainment related (like playing music). All driving aspects are preserved even with the infotainment system being broken/in the middle of a reboot.

[ Parent | on HN ]

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by ErikVandeWater on Wednesday May 05, 2021 @01:14PM (#27052696)

Unbuckling your seatbelt at speed when your car suddenly acts strangely is a very bad idea.

[ Parent | on HN ]

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by labster on Wednesday May 05, 2021 @01:35PM (#27052995)

“My car suddenly accelerated to 110 mph, I know, I’ll unbuckle my seat belt” doesn’t seem like a plausible human reaction to me.

[ Parent | on HN ]