laitimes

Tesla owner account loophole! One hacker claimed to have controlled more than 25 Teslas

With excellent power performance and highly intelligent car engine system, Tesla has become the world's highest-selling new energy vehicle company in the past year. But as the saying goes, "the smarter the product, the more dangerous it is", and this is also reflected in Tesla electric vehicles. Recently, according to foreign media reports, a nineteen-year-old IT security expert and hacker from Germany, David Colombo, said that he found a vulnerability that allowed him to fully control Tesla motors. He recently tweeted that he had "full remote control" of more than two dozen Tesla cars located in thirteen different countries.

Tesla owner account loophole! One hacker claimed to have controlled more than 25 Teslas

Tesla Model 3

In the post, he said he used API keys and third-party software to access the vehicle, though he said he didn't do it through vulnerabilities in Tesla's software infrastructure. He explained that the owner should actually be responsible for the vulnerability, not Tesla, because he did this by hacking into the owner's personal account. In another post on Jan. 11, David said that through the vulnerability, he could disable vehicle sentry mode, open doors and windows, and even start keyless driving. In addition, he can also check the exact location of the vehicle, whether the driver is present, etc. He said that it can also affect the tesla owner in the car through remote control, if someone through the remote control of the Tesla is driving at high speed to the maximum volume, unlock doors and windows or constantly flash lights, even if it is impossible to actually control the vehicle's steering or acceleration, but also will pose a threat to the safe driving of the vehicle.

Tesla owner account loophole! One hacker claimed to have controlled more than 25 Teslas

Foreign media reported that Tesla has a security vulnerability

He concluded by saying that Tesla had contacted him and that the security team was investigating the issue. David said he never had any malicious intent and that his constant postings on the matter were just hoping to get the attention of Tesla and the owners involved, saying at the end of the post: "We have to wait and see what Tesla thinks about this and how it intends to prevent this from happening in the future."

Read on