Re:Unlocking any car from X brand in most of the world
by devy on Monday November 09, 2026 @12:32PM
(#50428685)
The vulnerability is with traditional automakers.
Most of the newer EV brands (at least in North America, e.g. Tesla, Rivian, Lucid) are very sensitive to automotive telemetry security. AFAIK, they are built by software engineers in house and operating like a software company than a traditional automaker whose software are NOT made by themselves but by 3rd party OEM auto suppliers who may or may not have the security mind when they release their product. In general automotive industry did not have the foresight in security engineering and neither did they do that when it was heavily mechanical and local systems instead of IoTs and electronics when they started.
So the author exaggerates their claim of their work can affect any car in United States.
Every telsa API calls are using the latest TLS 1.3 with X.509 for key card access. Their software updates VERY FREQUENTLY. And they don't use the *-telemetry.com domain that was demonstrated in their hack.
Most of the newer EV brands (at least in North America, e.g. Tesla, Rivian, Lucid) are very sensitive to automotive telemetry security. AFAIK, they are built by software engineers in house and operating like a software company than a traditional automaker whose software are NOT made by themselves but by 3rd party OEM auto suppliers who may or may not have the security mind when they release their product. In general automotive industry did not have the foresight in security engineering and neither did they do that when it was heavily mechanical and local systems instead of IoTs and electronics when they started.
So the author exaggerates their claim of their work can affect any car in United States.
Every telsa API calls are using the latest TLS 1.3 with X.509 for key card access. Their software updates VERY FREQUENTLY. And they don't use the *-telemetry.com domain that was demonstrated in their hack.