HN Explorer

15 comments

[ 0.93 ms ] story [ 52.7 ms ] thread
smrtinsert
Is there a write up somewhere?
mikebonnell
Not yet. From the Twitter thread:

Next steps: - Waiting for MITRE‘s reply regarding a CVE - Preparing my Writeup - Coordinating disclosure to affected owners with Tesla

Liquid_Fire
I don't understand how something can need a CVE and yet be the car owner's fault and not be Tesla's responsibility to address or communicate.
Decker87
My guess is Tesla would treat it as the user's fault unless they were defeated in court. It'll be interesting.
consumer451
Wow, Tesla really is the Apple of the car world!

> Customers say that holding band on iPhone 4 interferes with reception · CEO Steve Jobs: "Avoid holding it in that way"

https://www.cnn.com/2010/TECH/mobile/06/25/iphone.problems.r...

gord288
Surely you mean the Samsung/HTC/Motorola/Nokia/etc./etc. of the car world...

https://dontholditwrong.tumblr.com

consumer451
Ha, touché.

FYI: I prefer iPhones these days but I spent years rooting android phones prior to that.

I just thought this type of corporate problem is funny.

mlac
If the person can rick roll them, he can put up a YouTube video explaining they are compromised and with instructions on how to fix the vulnerability, and then play it.
LinuxBender
Even stating they have control even if they do nothing is more of a risk than I would be willing to take. Two security researcher took control of a vehicle several years back [1][2][3][4] and didn't really think through how they were doing the demo. The vehicle was on a live highway. There were articles that spoke of the trouble the researchers got themselves into but appear to have vanished from the google.

[1] - https://www.wired.com/2015/07/hackers-remotely-kill-jeep-hig...

[2] - https://www.cbc.ca/news/science/hackers-kill-engine-of-movin...

[3] - https://www.reuters.com/article/us-fiat-chrysler-recall/fiat...

[4] - https://nakedsecurity.sophos.com/2019/01/10/supreme-court-re...

jdsully
Tesla software is getting pretty bad. I had my car reboot while driving at speed on the highway; the turn signals and speedometer went out with it.

Tesla told me it’s normal for it to “reboot occasionally during normal operation”. They didn’t seem that phased by the situation.

jakemauer
That’s insane. Wouldn’t this be cause for a recall with any other manufacturer? What if a 2015 civic just lost speedometer and turn signals randomly? You think Honda would get away with saying “eh that’s normal.”
nomel
To be fair, turn signals go out all the time. Many people still have filament bulbs as turn signals. This is why part of the drivers test is to show competence in using hand signals.
jdsully
The real problem is you suddenly have a car in an unknown state. Is autopilot still on? Can I change gears, am I in park? Will it lose power?

Fortunately not everything goes through the entertainment computer and the car was drivable enough to pull over, but it’s quite scary to have happen.

When a turn signal goes out it’s just the turn signal and your not worried about the engine.

LinuxBender
That brings back memories. Long ago my family had an AMG Hornet and in the engine compartment was a large red button. Ever so often we had to hold the button down to "reset the engine" or it would not function.

I had higher hopes for Tesla. Can you imagine if SpaceX rockets had these issues?

jollybean
It's not the 'owners fault' if this can be done easily without very specific and problematic actions by the driver.

It's a product problem, not an 'owner problem'.