Bluetooth relay attacks allow Tesla Model 3 / Y to be unlocked and driven away

Re:Bluetooth relay attacks allow Tesla Model 3 / Y to be unl... by Vespasian on Tuesday May 17, 2022 @10:17AM (#31411036)

This is not what they did.

They used a relay attack which means that they tunneled the actual keyfob signal over the internet (or a direct connection).

Tesla and others try to mitigate that by making sure that the latency of the signal is not too high.

<Everything you described> Car: your encrypted authentication looks right but you took 200ms to send it. You are probably not within BLE range.

The researchers contribution was to show that despite that a relay attack is still possible.

[ Parent | on HN ]

Re:Bluetooth relay attacks allow Tesla Model 3 / Y to be unl... by jimmaswell on Tuesday May 17, 2022 @10:29AM (#31411221)

So they could add a power switch to the fob or make it need a button press. Maybe people don't think it's worth it. Could also keep your fob in a radio frequency blocking bag.

[ Parent | on HN ]

Re:Bluetooth relay attacks allow Tesla Model 3 / Y to be unl... by Vespasian on Tuesday May 17, 2022 @11:35AM (#31412249)

It's usually working without a dedicated fob and uses the users phone to open and start the car.

I believe they have an option where you need a pin to start the engine at least however I'm not an owner

[ Parent | on HN ]

Re:Bluetooth relay attacks allow Tesla Model 3 / Y to be unl... by brewdad on Tuesday May 17, 2022 @12:46PM (#31413288)

Wait. Does this mean thieves are downloading a car?

What a world!

[ Parent | on HN ]