android, hacker shows off a way to unlock tesla models, start cars

LONDON: Tesla Inc customers might love the carmakers’ nifty keyless entry system, but one cybersecurity researcher has demonstrated how the same technology could allow thieves to drive off with certain models of the electric vehicles.

A hack effective on the Tesla Model 3 and Y cars would allow a thief to unlock a vehicle, start it and speed away, according to Sultan Qasim Khan, principal security consultant at the Manchester, UK-based security firm NCC Group. By redirecting communications between a car owner’s mobile phone, or key fob, and the car, outsiders can fool the entry system into thinking the owner is located physically near the vehicle.

The hack, Khan said, isn’t specific to Tesla, though he demonstrated the technique to Bloomberg News on one of its car models. Rather, it’s the result of his tinkering with Tesla’s keyless entry system, which relies on what’s known as a Bluetooth Low Energy (BLE) protocol.

There’s no evidence that thieves have used the hack to improperly access Tesla vehicles. The carmaker didn’t respond to a request for comment. NCC provided details of its findings to its clients in a note on May 15, an official there said.

Khan said he had disclosed the potential for attack to Tesla and that company officials didn’t deem the issue a significant risk. To fix it, the carmaker would need to alter its hardware and change its keyless entry system, Khan said. The revelation comes after another security researcher, David Colombo, revealed a way of hijacking some functions on Tesla vehicles, such as opening and closing doors and controlling music volume.

It takes less than 6 secs to steal your car nowadays

Need to beef up against vehicle hacking

BLE protocol was designed to conveniently link devices together over the internet, though it’s also emerged as method that hackers exploit to unlock smart technologies including house locks, cars, phones and laptops, Khan said. NCC Group said it was able to conduct the attack on several other carmakers and technology companies’ devices.

Kwikset Corp Kevo smart locks that use keyless systems with iPhone or Android phones are impacted by the same issue, Khan said. Kwikset said that customers who use an iPhone to access the lock can switch on two-factor authentication in lock app. A spokesperson also added that the iPhone-operated locks have a 30-second timeout, helping protect against intrusion.

Kwikset will be updating its Android app in “summer”, the company said.

“The security of Kwikset’s products is of utmost importance and we partner with well-known security companies to evaluate our products and continue to work with them to ensure we are delivering the highest security possible for our consumers,” a spokesperson said.

A representative at Bluetooth SIG, the collective of companies that manages the technology said: “The Bluetooth Special Interest Group (SIG) prioritizes security and the specifications include a collection of features that provide product developers the tools they need to secure communications between Bluetooth devices.

“The SIG also provides educational resources to the developer community to help them implement the appropriate level of security within their Bluetooth products, as well as a vulnerability response program that works with the security research community to address vulnerabilities identified within Bluetooth specifications in a responsible manner.”

Khan has identified numerous vulnerabilities in NCC Group client products and is also the creator of Sniffle, the first open-source Bluetooth 5 sniffer. Sniffers can be used to track Bluetooth signals, helping identify devices. They are often used by government agencies that manage roadways to anonymously monitor drivers passing through urban areas.

A 2019 study by a British consumer group, Which, found that more than 200 car models were susceptible to keyless theft, using similar but slightly different attack methods such as spoofing wireless or radio signals.

In a demonstration to Bloomberg News, Khan conducted a so-called relay attack, in which a hacker uses two small hardware devices that forward communications. To unlock the car, Khan placed one relay device within roughly 14 metres of the Tesla owner’s smartphone or key fob and a second, plugged into his laptop, near to the car.

The technology utilised custom computer code that Khan had designed for Bluetooth development kits, which are sold online for less than US$50 (RM219).

The hardware needed, in addition to Khan’s custom software, costs roughly US$100 (RM439) altogether and can be easily bought online. Once the relays are set up, the hack takes just “10 seconds”, Khan said.

“An attacker could walk up to any home at night – if the owner’s phone is at home – with a Bluetooth passive entry car parked outside and use this attack to unlock and start the car,” he said.

“Once the device is in place near the fob or phone, the attacker can send commands from anywhere in the world,” Khan added.

Keyword: Hacker shows off a way to unlock Tesla models, start cars

CAR'S NEWS RELATED

Tesla Cybertruck ‘Basecamp’ tent, solar, and beast mode, leak through app

Tesla Cybertruck options and accessories have leaked through a mobile app update revealing a ‘Basecamp’ tent, solar option, and new “Beast mode”. We are just a day away from getting all the details about the Cybertruck direct from Tesla, but a leak is now giving us some details ahead ...

View more: Tesla Cybertruck ‘Basecamp’ tent, solar, and beast mode, leak through app

Taiwanese Tesla supplier Hota retools supply chain with first US factory

Companies Hota Industrial Mfg. Co Ltd Ford Motor Co General Motors Co TAICHUNG, Taiwan, Nov 29 (Reuters) – For years, Hota Industrial Mfg. Co has made gears, shafts and other auto parts in Taiwan and shipped them to large foreign carmakers such as Tesla (TSLA.O), Ford Motor (F.N) and ...

View more: Taiwanese Tesla supplier Hota retools supply chain with first US factory

Tesla Cybertruck’s ‘Beast Mode’, Trim Details Uncovered By Software Developer

A developer who deconstructed the Tesla app also revealed that the pickup will come in two trim levels.

View more: Tesla Cybertruck’s ‘Beast Mode’, Trim Details Uncovered By Software Developer

Mazda CEO Says Electric Vehicles (Other Than Teslas) are “Not Taking Off”

Mazda’s Chief Operating Officer, Masahiro Moro, has expressed some frustrations that the company’s battery-electric lineup is struggling to gain traction, stating that any EV, other than a Tesla, simply isn’t popular with buyers. In a surprisingly candid interview with Fortune, Moro said that “EV is an absolutely important technology, and ...

View more: Mazda CEO Says Electric Vehicles (Other Than Teslas) are “Not Taking Off”

Closer look at Tesla Cybertruck – should we be concerned?

We get a closer look at the Tesla Cybertruck with one of the units the automaker is now displaying in its showrooms. Should we be concerned about the build quality? Much has been said about the Cybertruck build quality even before the truck has made it to market. We ...

View more: Closer look at Tesla Cybertruck – should we be concerned?

Tired Of Waiting For Your Cybertruck? You Can Now Lease A Rivian R1T

Photo: Rivian Rivian finally started offering leases for its electric R1T pickup in 14 states on Monday, and these leases are eligible for the full $7500 federal EV lease credit – in contrast to the $3750 credit that Rivian buyers are eligible for. The lucky residents of Arizona, California, ...

View more: Tired Of Waiting For Your Cybertruck? You Can Now Lease A Rivian R1T

Even A Tesla Cybertruck Prototype Can't Mess With San Francisco Parking Enforcement

Screenshot: Tesla East Bay Fremont on Twitter There have been a lot of Tesla Cybertruck ‘release candidates’ on the back of tow trucks lately, but they’ve all been related to breakdowns. This time a Cybertruck driver parked in the wrong place and the city of San Francisco brought down ...

View more: Even A Tesla Cybertruck Prototype Can't Mess With San Francisco Parking Enforcement

Tesla Raises Insurance Rates For Drivers Who Use 'Track Mode' On The Track

Take "Track Mode" literally, and you get punished by Tesla's insurance algorithm.

View more: Tesla Raises Insurance Rates For Drivers Who Use 'Track Mode' On The Track

Tesla Confirms A New Model 3 Performance Is On The Way

Tesla increases Cybertruck pre-order deposit, but reverts right away

Slow Cybertruck Production Will Cost Tesla 'Blood, Sweat and Tears'

The Tesla Cybertruck Isn't Even On Sale Yet But Somehow One Got Impounded

Tesla sues Sweden’s transport agency, and gets a small win

Tesla on two wheels? India's Ola Electric feels the strains of success

I Saw The Tesla Cybertruck Up Close. My Jaw's Still On The Floor

Tesla beats US claim that it fired factory workers amid union campaign

Tesla spotted building a fleet of over 25 Cybertrucks ahead of the launch

Tesla Wins Suit Against Sweden Over Union Solidarity

Volkswagen is ‘no longer competitive,’ job cuts intensify to keep up with Tesla

Tesla Cybertruck Delivery Event Will Start Nov. 30 Around 2 P.M. EST

OTHER CAR NEWS

; Top List in the World https://www.pinterest.com/newstopcar/pins/
Top Best Sushi Restaurants in SeoulTop Best Caribbean HoneymoonsTop Most Beautiful Islands in PeruTop Best Outdoor Grill BrandsTop Best Global Seafood RestaurantsTop Foods to Boost Your Immune SystemTop Best Foods to Fight HemorrhoidsTop Foods That Pack More Potassium Than a BananaTop Best Healthy Foods to Gain Weight FastTop Best Cosmetic Brands in the U.STop Best Destinations for Food Lovers in EuropeTop Best Foods High in Vitamin ATop Best Foods to Lower Your Blood SugarTop Best Things to Do in LouisianaTop Best Cities to Visit in New YorkTop Best Makeup Addresses In PennsylvaniaTop Reasons to Visit NorwayTop Most Beautiful Islands In The WorldTop Best Law Universities in the WorldTop Richest Sportsmen In The WorldTop Biggest Aquariums In The WorldTop Best Peruvian Restaurants In MiamiTop Best Road Trips From MiamiTop Best Places to Visit in MarylandTop Best Places to Visit in North CarolinaTop Best Electric Cars For KidsTop Best Swedish Brands in The USTop Best Skincare Brands in AmericaTop Best American Lipstick BrandsTop Michelin-starred Restaurants in MiamiTop Best Secluded Getaways From MiamiTop Best Things To Do On A Rainy Day In MiamiTop Most Instagrammable Places In MiamiTop Interesting Facts about FlorenceTop Facts About The First Roman Emperor - AugustusTop Best Japanese FoodsTop Most Beautiful Historical Sites in IsraelTop Best Places To Visit In Holy SeeTop Best Hawaiian IslandsTop Reasons to Visit PortugalTop Best Hotels In L.A. With Free Wi-FiTop Best Scenic Drives in MiamiTop Best Vegan Restaurants in BerlinTop Most Interesting Attractions In WalesTop Health Benefits of a Vegan DietTop Best Thai Restaurant in Las VegasTop Most Beautiful Forests in SwitzerlandTop Best Global Universities in GermanyTop Most Beautiful Lakes in GuyanaTop Best Things To Do in IdahoTop Things to Know Before Traveling to North MacedoniaTop Best German Sunglasses BrandsTop Highest Mountains In FranceTop Biggest Hydroelectric Plants in AmericaTop Best Spa Hotels in NYCTop The World's Scariest BridgeTop Largest Hotels In AmericaTop Most Famous Festivals in JordanTop Best European Restaurants in MunichTop Best Japanese Hiking Boot BrandsTop Best Universities in PolandTop Best Tips for Surfing the Web Safely and AnonymouslyTop Most Valuable Football Clubs in EuropeTop Highest Mountains In ColombiaTop Real-Life Characters of Texas RisingTop Best Beaches in GuatelamaTop Things About DR Congo You Should KnowTop Best Korean Reality & Variety ShowsTop Best RockstarsTop Most Beautiful Waterfalls in GermanyTop Best Fountain Pen Ink BrandsTop Best European Restaurants in ChicagoTop Best Fighter Jets in the WorldTop Best Three-Wheel MotorcyclesTop Most Beautiful Lakes in ManitobaTop Best Dive Sites in VenezuelaTop Best Websites For Art StudentsTop Best Japanese Instant Noodle BrandsTop Best Comedy Manhwa (Webtoons)Top Best Japanese Sunglasses BrandsTop Most Expensive Air Jordan SneakersTop Health Benefits of CucumberTop Famous Universities in SwedenTop Most Popular Films Starring Jo Jung-sukTop Interesting Facts about CougarsTop Best Hospitals for Hip Replacement in the USATop Most Expensive DefendersTop Health Benefits of GooseberriesTop Health Benefits of ParsnipsTop Best Foods and Drinks in LondonTop Health Benefits of Rosehip TeaTop Best Air Fryers for Low-fat CookingTop Most Asked Teacher Interview Questions with AnswersTop Best Shopping Malls in ZurichTop The Most Beautiful Botanical Gardens In L.A.Top Best Mexican Restaurants in Miami for Carb-loading rightTop Best Energy Companies in GermanyTop Best Garage HeatersTop Largest Banks in IrelandTop Leading Provider - Audit and Assurance In The USTop Best Jewelry Brands in IndiaTop Prettiest Streets in the UKTop Best Lakes to Visit in TunisiaTop Highest Mountains in Israel