Fatal flaw found in Tesla, McLaren keys

Forums › Transport (cars, bikes and boats) › Fatal flaw found in Tesla, McLaren keys

Mspec

1189 posts

Uber Geek
+1 received by user: 410

Subscriber

Topic # 240685 20-Sep-2018 11:14

Always going to be cat and mouse with this sort of stuff. That was pretty quick and easy to take off in a Tesla.

I see that Tesla have pushed out a patch requiring a pin to start your car , So many pins not enough memory in my head to remember them all lol.

https://www.stuff.co.nz/motoring/107196568/fatal-flaw-found-in-tesla-mclaren-keys

Ding Ding Ding Ding Ding : Ice cream man , Ice cream man

FireEngine

1213 posts

Uber Geek
+1 received by user: 231

Trusted

Reply # 2093732 20-Sep-2018 11:45

One person supports this post

Maybe just put a pin pad on the door for access and throw away the key concept completely. Oh wait don't lots of GM cars have that already... :-)

Regards FireEngine

MikeB4

13548 posts

Uber Geek
+1 received by user: 6352

Trusted

Subscriber

Reply # 2093736 20-Sep-2018 11:47

2 people support this post

FireEngine:

Maybe just put a pin pad on the door for access and throw away the key concept completely. Oh wait don't lots of GM cars have that already... :-)

Nissan had those years ago on the Maxima. Problem with key pads it only takes a few seconds to determine the keys which are being pressed all the time.

Mike
Retired IT Manager.
The views stated in my posts are my personal views and not that of any other organisation.

Mac user, Windows curser, Chrome OS desired.

The great divide is the lies from both sides.

Inphinity

2527 posts

Uber Geek
+1 received by user: 939

Subscriber

Reply # 2093737 20-Sep-2018 11:50

Good biometric security is the safer way.

Windows 7 x64 // i5-3570K // 16GB DDR3-1600 // GTX660Ti 2GB // Samsung 830 120GB SSD // OCZ Agility4 120GB SSD // Samsung U28D590D @ 3840x2160 & Asus PB278Q @ 2560x1440
Samsung Galaxy S5 SM-G900I w/Spark

dacraka

561 posts

Ultimate Geek
+1 received by user: 89

Trusted

Reply # 2093778 20-Sep-2018 12:43

PIN is not a requirement, it's optional. If you are worried that people are going to copy your key, simply turn off passive mode (the mode that automatically unlocks your car when you walk near it).

coffeebaron

5288 posts

Uber Geek
+1 received by user: 2314

Trusted

Lifetime subscriber

Reply # 2093824 20-Sep-2018 13:40

4 people support this post

So how does someone die with this "Fatal Flaw"?

Chorus has spent $1.4 billion on making their xDSL broadband network faster. If your still stuck on ADSL or VDSL, why not spend from $150 on a master filter install to make sure you are getting the most out of your connection?
I install - Naked DSL, DSL Master Splitters, VoIP, data cabling and general computer support for home and small business.
Rural Broadband RBI installer for Ultimate Broadband and Full Flavour

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

MikeB4

13548 posts

Uber Geek
+1 received by user: 6352

Trusted

Subscriber

Reply # 2093854 20-Sep-2018 14:32

3 people support this post

coffeebaron: So how does someone die with this "Fatal Flaw"?

Heart attack following finding a vacant lot where their Tesla was parked

Mike
Retired IT Manager.
The views stated in my posts are my personal views and not that of any other organisation.

Mac user, Windows curser, Chrome OS desired.

The great divide is the lies from both sides.

Mspec

1189 posts

Uber Geek
+1 received by user: 410

Subscriber

Reply # 2093855 20-Sep-2018 14:33

Perhaps you get run over as you try and stop the thief speeding off in your shiny Tesla.

Ding Ding Ding Ding Ding : Ice cream man , Ice cream man

wellygary

3503 posts

Uber Geek
+1 received by user: 984

Reply # 2093864 20-Sep-2018 14:54

MikeB4:

coffeebaron: So how does someone die with this "Fatal Flaw"?

Heart attack following finding a vacant lot where their Tesla was parked

Apparently only 115 Teslas have been taken since 2011...

I'm guessing its not seen as a great idea to pinch an EV that is constantly GPS and Network Connected along with Tesla having the ability to remote disable the vehicle..

https://www.marketwatch.com/story/nearly-100-of-teslas-stolen-in-the-us-since-2011-have-been-recovered-2018-08-10

PolicyGuy

211 posts

Master Geek
+1 received by user: 90

Subscriber

Reply # 2093888 20-Sep-2018 15:31

Inphinity:
Good biometric security is the safer way.

Safer initially, perhaps.
If someone cracks and steals your PIN, you get a new one.
If someone cracks and steals the encrypted string that represents your biometrics, ... oh dear

No thanks

Wellingtondave

37 posts

Geek
+1 received by user: 18

Reply # 2093989 20-Sep-2018 18:02

Inphinity:

Good biometric security is the safer way.

Until you get your finger cut off (there are pecidents) or forced by duress to look at the scanner etc. Is a car worth it?

Aredwood

3250 posts

Uber Geek
+1 received by user: 1266

Subscriber

Reply # 2094207 20-Sep-2018 23:37

This problem could be solved just by going back to remotes that require you to press a button. As a hacker will then need physical access to the remote, so they can press the button.

And the car companies need to at least implement proper crypto. As that attack would have been a MITM or a replay attack. Crazy when there is strong encryption on many websites (including this site). Which is used to stop attackers from seeing that I'm looking for pictures of cute fluffy kittens on Google.

Yet car companies can't be bothered using the same encryption to protect cars that are worth well over $100K.

tripper1000

781 posts

Ultimate Geek
+1 received by user: 475

Reply # 2094351 21-Sep-2018 09:50

Convenience has traditionally been the enemy of security and continues to be so in the digital age.

RUKI

1132 posts

Uber Geek
+1 received by user: 254

Reply # 2095577 24-Sep-2018 14:54

Aredwood: .....car companies can't be bothered using the same encryption to protect cars that are worth well over $100K.

installation of expensive security systems may help. nowadays good ones are integrated into CAB BUS but that still does not give 100% protection

Barfoot & Thompson described the theft of the house in their book "Selling Auckland". The House! Simply being towed away on a truck. Towing away the car is less complex...

Toyota / Lexus Hybrid and EV Battery Expert Battery Test & Repair