Facepalm: This week, an adolescent reported that he has gained distant entry to round two dozen Tesla vehicles in a number of international locations and is attempting to contact their homeowners. The listing of issues he can do to the affected autos is lengthy and harmful.
Nineteen-year-old IT safety specialist David Columbo reported in a Twitter thread Monday and Tuesday that he gained full management of over 25 Teslas in 13 international locations with out their homeowners realizing. He doesn’t wish to disclose precisely how he did it till he studies the vulnerability to the non-profit Mitre. Nevertheless, Columbo did say it was attributable to errors on the homeowners’ half, not a safety flaw in Tesla’s software program.
So, I now have full distant management of over 20 Tesla’s in 10 international locations and there appears to be no method to discover the homeowners and report it to them…
— David Colombo (@david_colombo_) January 10, 2022
Columbo mentioned he may search the exact location of every automotive, disable their safety, open their doorways and home windows even whereas they’re on the street, play music and YouTube movies at full quantity, and extra. Whereas Columbo can’t remotely drive the vehicles, he may steal them if he had been at their bodily places. Tesla’s safety staff has already advised Columbo they’re trying into it.
Though Columbo says this is not Tesla’s fault, it may nonetheless be a PR challenge for the corporate, portray the vehicles as ever extra susceptible in shoppers’ minds. Close to the tip of final yr, Tesla recalled a major variety of autos bought within the US over trunk lid issues. This incident may additionally have an effect on the development of Tesla’s self-driving mode, which remains to be in beta.