News for hackers. Stuff that matters.
Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by jjav on Wednesday May 05, 2021 @04:27PM (#27055280)
> But it can't actually drive the car.

Hopefully. Remember this vulnerability:

https://www.csoonline.com/article/2951746/hackers-remotely-t...

The initial intrusion was through the infotainment system but from there they moved to the more critical systems.

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by ajross on Wednesday May 05, 2021 @07:24PM (#27057193)
Exactly! Because in the Jeep case there was an architectural failure where the attack surface (the radio controller) was connected directly to the vehicle control system via a CAN bus, speaking bare unauthenticated protocols that were designed before the idea of internet-accessible cars was conceived. So once your initial attack face was compromised, the game was up.

This is the writeup if you want details, certainly I'm no expert on this particular hack: http://illmatics.com/Remote%20Car%20Hacking.pdf

What I'm saying is that Tesla seems to have learned from that experience and gone with a very different architecture where vehicle commands simply aren't accessible to the public-facing computer, from which motor/brake/steering control systems only get general direction (e.g. waypoints).

That's not saying it can't have a hole. But they don't seem to have made the kind of messup that would permit an attack like the Jeep hack.

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by jjav on Thursday May 06, 2021 @03:22AM (#27060106)
> What I'm saying is that Tesla seems to have learned from that experience

Maybe. From a few decades in the industry in and around security, I have no faith in assuming that a serious vulnerability triggers any kind of change in the culture that led to it.

Remember Cisco and curl? https://news.ycombinator.com/item?id=19507225

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by nuker on Thursday May 06, 2021 @12:00AM (#27059048)
> Tesla seems to have learned from that experience and gone with a very different architecture

Have circuit diagrams?