Menu
Tesla patches Model S after researchers hack car's software

Tesla patches Model S after researchers hack car's software

With physical access to the car, the researchers were able to exploit six flaws and eventually access the infotainment system

Tesla has patched six flaws that could allow hackers to eventually  gain control of the entertainment software in the Model S and hijack the car.

Tesla has patched six flaws that could allow hackers to eventually gain control of the entertainment software in the Model S and hijack the car.

Tesla has issued a security update to its Model S car after security researchers discovered six flaws that allowed them to control its entertainment software and hijack the vehicle.

With access to the entertainment software, Kevin Mahaffey, CTO of security startup Lookout, and Marc Rogers, a security researcher at CloudFlare, turned off the engine while a person was driving, changed the speed and map information displayed on the touchscreen, opened and closed the trunk and controlled the radio.

The pair, who will discuss their findings Friday at the DEF CON hacking conference in Las Vegas, also uploaded a remote access application that allowed them to lock and unlock the car using an iPhone.

Mahaffey stressed in an interview that physical access to the car was needed to carry out the hack. For their research, he and Rogers plugged a laptop into a Model S Ethernet port and exploited the vulnerabilities until they tapped into the entertainment software. They didn't provide details on what flaws were used in their hack.

Any software program can be hacked and the assumption is hackers will be able to eventually remotely attack a car's entertainment applications, Mahaffey said. Keeping this in mind, he and Rogers looked at how to secure a car after it has been compromised.

It's impossible to prevent an attack from hitting a car's computer system, Mahaffey said.

"The question is how do you respond quickly with a patch and how you do you make your car resilient," he said.

One way to bolster a car's security is by increasing the protection around individual components, and that way preventing a hacker from using one compromised system to access another.

Tesla was lacking in this area, Mahaffey said, adding that the company's recent security update should help rectify the problem.

"We should make sure that if you hack the infotainment system, you shouldn't be able to get access to the drive system," he said.

On Thursday, a spokeswoman for the Palo Alto, California, car maker confirmed it issued a patch for the flaws discovered by Mahaffey and Rogers. The company uses an over-the-air system to update its vehicles' software.

Mahaffey would like other automotive manufacturers to fix security flaws by delivering updates over the air, instead of slower, traditional mass repair methods like recalls.

"Your car today has more in common with a laptop than a Model T," he said, adding that cars will need to be patched more quickly than a piece of computer hardware.

Mahaffey and Rogers selected Tesla because the company is known for building technologically sophisticated cars.

Car security has grown in importance as vehicles have gained Internet access and applications that turned them into computers on wheels. In July, hackers demonstrated they were able to hack into a Jeep Cherokee and reduce the vehicle's speed while a person drove it. U.S. legislators have taken an interest in this issue and have proposed regulations that would force manufacturers to better protect vehicles from hackers.

Fred O'Connor writes about IT careers and health IT for The IDG News Service. Follow Fred on Twitter at @fredjoconnor. Fred's e-mail address is fred_o'connor@idg.com


Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Tags TeslaAutomotivesecurityindustry verticals

Featured

Slideshows

Kiwi channel comes together for another round of After Hours

Kiwi channel comes together for another round of After Hours

The channel came together for another round of After Hours, with a bumper crowd of distributors, vendors and partners descending on The Jefferson in Auckland. Photos by Maria Stefina.​

Kiwi channel comes together for another round of After Hours
Consegna comes to town with AWS cloud offerings launch in Auckland

Consegna comes to town with AWS cloud offerings launch in Auckland

Emerging start-up Consegna has officially launched its cloud offerings in the New Zealand market, through a kick-off event held at Seafarers Building in Auckland.​ Founded in June 2016, the Auckland-based business is backed by AWS and supported by a global team of cloud specialists, leveraging global managed services partnerships with Rackspace locally.

Consegna comes to town with AWS cloud offerings launch in Auckland
Veritas honours top performing trans-Tasman partners

Veritas honours top performing trans-Tasman partners

Veritas honoured its top performing partners across the channel in Australia and New Zealand, recognising innovation and excellence on both sides of the Tasman. Revealed under the Vivid lights in Sydney, Intalock claimed the coveted Partner of the Year 2017 (Pacific) award, with Data#3 acknowledged for 12 months of strong growth across the market. Meanwhile, Datacom took home the New Zealand honours, with Global Storage and Insentra winning service provider and consulting awards respectively. Dicker Data was recognised as the standout distributor of the year, while Hitachi Data Systems claimed the alliance partner award. Photos by Bob Seary.

Veritas honours top performing trans-Tasman partners
Show Comments