Fatal flaw found in Tesla, McLaren keys

Forums › Transport (cars, bikes and boats) › Fatal flaw found in Tesla, McLaren keys

JaseNZ

2576 posts

Uber Geek

ID Verified

Lifetime subscriber

#240685 20-Sep-2018 11:14

Always going to be cat and mouse with this sort of stuff. That was pretty quick and easy to take off in a Tesla.

I see that Tesla have pushed out a patch requiring a pin to start your car , So many pins not enough memory in my head to remember them all lol.

https://www.stuff.co.nz/motoring/107196568/fatal-flaw-found-in-tesla-mclaren-keys

Ding Ding Ding Ding Ding : Ice cream man , Ice cream man

FireEngine

1223 posts

Uber Geek

Trusted

#2093732 20-Sep-2018 11:45

Maybe just put a pin pad on the door for access and throw away the key concept completely. Oh wait don't lots of GM cars have that already... :-)

Regards FireEngine

MikeB4

18435 posts

Uber Geek

ID Verified

Trusted

#2093736 20-Sep-2018 11:47

FireEngine:

Maybe just put a pin pad on the door for access and throw away the key concept completely. Oh wait don't lots of GM cars have that already... :-)

Nissan had those years ago on the Maxima. Problem with key pads it only takes a few seconds to determine the keys which are being pressed all the time.

Inphinity

2780 posts

Uber Geek

#2093737 20-Sep-2018 11:50

Good biometric security is the safer way.

dacraka

766 posts

Ultimate Geek

ID Verified

Trusted

#2093778 20-Sep-2018 12:43

PIN is not a requirement, it's optional. If you are worried that people are going to copy your key, simply turn off passive mode (the mode that automatically unlocks your car when you walk near it).

coffeebaron

6231 posts

Uber Geek

Trusted

Lifetime subscriber

#2093824 20-Sep-2018 13:40

So how does someone die with this "Fatal Flaw"?

Rural IT and Broadband support.

Broadband troubleshooting and master filter installs.
Starlink installer - one month free: https://www.starlink.com/?referral=RC-32845-88860-71
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

MikeB4

18435 posts

Uber Geek

ID Verified

Trusted

#2093854 20-Sep-2018 14:32

coffeebaron: So how does someone die with this "Fatal Flaw"?

Heart attack following finding a vacant lot where their Tesla was parked

JaseNZ

2576 posts

Uber Geek

ID Verified

Lifetime subscriber

#2093855 20-Sep-2018 14:33

Perhaps you get run over as you try and stop the thief speeding off in your shiny Tesla.

Ding Ding Ding Ding Ding : Ice cream man , Ice cream man

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

wellygary

8312 posts

Uber Geek

#2093864 20-Sep-2018 14:54

MikeB4:

coffeebaron: So how does someone die with this "Fatal Flaw"?

Heart attack following finding a vacant lot where their Tesla was parked

Apparently only 115 Teslas have been taken since 2011...

I'm guessing its not seen as a great idea to pinch an EV that is constantly GPS and Network Connected along with Tesla having the ability to remote disable the vehicle..

https://www.marketwatch.com/story/nearly-100-of-teslas-stolen-in-the-us-since-2011-have-been-recovered-2018-08-10

PolicyGuy

1726 posts

Uber Geek

ID Verified

Lifetime subscriber

#2093888 20-Sep-2018 15:31

Inphinity:
Good biometric security is the safer way.

Safer initially, perhaps.
If someone cracks and steals your PIN, you get a new one.
If someone cracks and steals the encrypted string that represents your biometrics, ... oh dear

No thanks

Wellingtondave

156 posts

Master Geek

#2093989 20-Sep-2018 18:02

Inphinity:

Good biometric security is the safer way.

Until you get your finger cut off (there are pecidents) or forced by duress to look at the scanner etc. Is a car worth it?

Aredwood

3885 posts

Uber Geek

#2094207 20-Sep-2018 23:37

This problem could be solved just by going back to remotes that require you to press a button. As a hacker will then need physical access to the remote, so they can press the button.

And the car companies need to at least implement proper crypto. As that attack would have been a MITM or a replay attack. Crazy when there is strong encryption on many websites (including this site). Which is used to stop attackers from seeing that I'm looking for pictures of cute fluffy kittens on Google.

Yet car companies can't be bothered using the same encryption to protect cars that are worth well over $100K.

tripper1000

1617 posts

Uber Geek

#2094351 21-Sep-2018 09:50

Convenience has traditionally been the enemy of security and continues to be so in the digital age.

RUKI

1402 posts

Uber Geek

#2095577 24-Sep-2018 14:54

Aredwood: .....car companies can't be bothered using the same encryption to protect cars that are worth well over $100K.

installation of expensive security systems may help. nowadays good ones are integrated into CAB BUS but that still does not give 100% protection

Barfoot & Thompson described the theft of the house in their book "Selling Auckland". The House! Simply being towed away on a truck. Towing away the car is less complex...

Toyota / Lexus Hybrid and EV Battery Expert Battery Test & Repair