Re:Researchers demo Bluetooth relay attack against Tesla
by zionic on Monday May 16, 2022 @08:40PM
(#31404708)
This dawned on me the other day, if someone hopped in my Tesla and drove away I’m not sure I could do anything in the app to hinder them. Maybe set valet mode? Best I could do there is cap it to 50
[ Parent
| on HN ]
Re:Researchers demo Bluetooth relay attack against Tesla
by paxys on Monday May 16, 2022 @09:04PM
(#31404836)
Turns out your car is, in fact, a car.
Re:Researchers demo Bluetooth relay attack against Tesla
by zionic on Tuesday May 17, 2022 @03:04PM
(#31415052)
The way the app works though with the default setup leaves it unlocked/ready to go until you walk a considerable distance away. I could see thieves eventually figuring that out.
Re:Researchers demo Bluetooth relay attack against Tesla
by philips on Monday May 16, 2022 @09:38PM
(#31405079)
You can add a PIN as a second factor. See PIN to drive in the manual
https://www.tesla.com/ownersmanual/modely/en_us/GUID-94B0E05...
Re:Researchers demo Bluetooth relay attack against Tesla
by Operyl on Monday May 16, 2022 @10:25PM
(#31405412)
> If the touchscreen is still unresponsive, you can still bypass PIN to Drive by turning on Keyless Driving in the Tesla mobile app.
Isn't this what the research team is abusing? If so, make sure that's turned off too!
Re:Researchers demo Bluetooth relay attack against Tesla
by firloop on Tuesday May 17, 2022 @01:05AM
(#31406244)
Pretty sure turning on Keyless driving is separate from unlocking/starting the car with Bluetooth. To do it requires the Tesla account password and I believe is relayed via the LTE connection of the car.