Researchers hack and steal a Model S; Tesla says vulnerability now fixed

Stealing a car used to require a blunt object to break one of its windows, and basic electrical knowledge to hot-wire it. Two Belgian security experts discovered an encryption flaw that let them drive away in a Tesla Model S without busting any glass or cutting any wires.

Researchers working at the KU Leuven University in Belgium figured out a relatively simple way to digitally break into a Model S by defeating the encryption in the wireless key fob, according to Wired. It’s a technique that requires about $600 worth of radio and computing equipment, so it’s not something anyone can do with their smartphone, but that’s a small investment considering the price of a Model S. The hardware is used to access the cryptographic key programmed into each fob and copy it, which essentially creates a new key fob. The thieves can thereupon enter any Model S and drive off in it without setting off the alarm.

“Today, it’s very easy for us to clone these key fobs in a matter of seconds. We can completely impersonate the key fob and drive the vehicle,” revealed researcher Lennert Wouters in an interview with Wired. He added figuring out how to hack into a Model S took about nine months.

Tesla awarded the researchers a $10,000 bug bounty when they privately shared their discovery in August of 2017. It then spent nearly a year verifying the technique and developing a fix, which it began rolling out in June of 2018. First, it designed a more secure key fob. That means cars manufactured after that point aren’t affected by the problem.

Earlier models — a vast majority of the ones on the road — received an additional security barrier via an over-the-air software update. This lets owners set a PIN code that must be entered on the car’s touchscreen before it can be driven off. It’s similar to the PIN that protects a smartphone. Tesla told Digital Trends the PIN function will come to the Model 3 in the future.

“Due to the growing number of methods that can be used to steal many kinds of cars with passive entry systems, not just Teslas, we’ve rolled out a number of security enhancements to help our customers decrease the likelihood of unauthorized use of their vehicles,” a Tesla spokesperson told Digital Trends. “Based on the research presented by this group, we worked with our supplier to make our key fobs more secure by introducing more robust cryptography for Model S in June 2018,” the California-based company added.

Wouters and his partner, Tomer Ashur, blame the flaw on a key fob manufactured by British electronics firm Pektron. McLaren, Karma, and Triumph also use Pektron-sourced key fobs so the same hack could allow thieves to break into vehicles made by those brands.

“This attack is out there, and we’re not the only people capable of coming up with it,” Ashur warned.

Update: added statement from Tesla.


Tesla keeps promise with more affordable Model 3 with midrange battery pack

Tesla is keeping its promise of making the Model 3 gradually more affordable. The company released a new variant of the car with a mid-range, 260-mile battery option that's priced under the $50,000 mark.
Social Media

Tumblr promises it fixed a bug that left user data exposed

A bug on blogging site Tumblr left user data exposed. The company says that once it learned of the flaw, it acted quickly to fix it, adding that it's confident no data linked to its users' accounts was stolen.
Smart Home

Keep an eye on your kingdom with the best home security cameras

When it comes to the best home security cameras, the choice often comes down to the one that simply knows how to stay out of your way. Here are some of our favorites, both indoor and outdoor.

Double your charging speed with Nomad’s Tesla Model 3 wireless charger

Nomad's wireless charger for the Tesla Model 3 fits the EV's charging dock exactly. If you plug both of the Nomad's into the Model 3's two front USB ports you can charge two smartphones quickly or one phone twice as fast.

At 503 mph, Turbinator II is the world’s fastest wheel-driven vehicle

The Turbinator II is a four-wheel drive streamliner powered by a 5,000-horsepower helicopter engine, and it just achieved 503.332 mph at the Bonneville Salt Flats. That's an unofficial record for a wheel-driven car.

Lyft has a new fixed-price subscription plan for frequent passengers

Lyft wants you to save money by using rideshare services instead of owning a car. The new Lyft All-Access Plan monthly rideshare trip subscription includes 30 rides a month with a small discount for additional trips.
Product Review

Audi's new A8 is so sophisticated and serene, it practically deletes potholes

The 2019 Audi A8’s outline looks promising: Level 3 autonomous driving capability, haptic-feedback infotainment screens, rear-wheel steering, Matrix LED headlights and OLED taillights, plus a predictive suspension.

Could the next Mazda3 boast a fuel-saving breakthrough in engine tech?

Mazda released a teaser video that likely previews the next Mazda3. Expected to make its global debut at the L.A. auto show, the next 3 will wear a more curvaceous design and offer one of the most advanced engines in the automotive…

Workhorse takes on diesel with lighter, cheaper NGEN-1000 electric delivery van

Ohio-based Workhorse Group claims its new NGEN-1000 electric delivery van costs the same as a conventional diesel van and can haul a similar amount of cargo. A lower curb weight makes this possible.

Forget transponders with Peasy’s nationwide pay-as-you-go toll service

Verra Mobility launched Peasy, a consumer highway and bridge toll payment service. Designed to be less hassle than managing traditional transponder or toll tag accounts, Peasy pays tolls as they are levied across most of the U.S.

Just 10 people will get to put this limited-edition Audi R8 in their garages

The 2018 Audi R8 V10 Plus Competition makes use of Audi's motor sports experience to turn up the performance dial. Decreased weight and increased aerodynamic downforce make this R8 a track monster.

Porsche’s all-electric Taycan sedan will cost less than a Panamera

Porsche's Mission E concept won't change much as it transitions to a production model named Taycan that's scheduled to arrive in 2019. That means the sedan will keep the sleek design and its 800-volt charging system.

Bored with stock? The best tuner cars are begging to be modified

Modification has been around almost as long as the automobile itself. Here are 25 of the best tuner cars you can find, ranging from American muscle standouts to Japanese drift cars.

The snake escapes: Ford’s 700-hp Mustang GT500 slithers online ahead of schedule

The Ford Mustang Shelby GT500 will return in 2019 with over 700 horsepower, Ford confirmed at the 2018 Detroit Auto Show. The GT500 will be the most powerful Ford production car ever.