2021 Tesla Model 3 Long Range on 2040-cars

Auto blog

Tesla Model S vulnerable to hackers?

Next time you walk by a parked Tesla and its sunroof is opening and closing with nobody sitting inside or around it, you could be witnessing a hacker moment. For all of its strengths as a car, the Model S reportedly has a weak spot: the security of its API (application programming interface) authentication, according to an article in the O'Reilly Community by George Reese, executive director of cloud management at Dell. Tesla develops and uses its own API authentication protocols, which have made access to certain Model S functions too easy for hackers, Reese says - himself a Model S owner.
At question is the Tesla REST API, which is accessed via a web-based portal, usually by Model S owners with their iPhone or Android-based smartphone, to perform a variety of menial tasks and check the status of the car. The Tesla-registered e-mail and password of the car owner is used to access the API through a web portal, which creates a "token" that lasts for three months. During that period, owners access the Tesla REST API via the token without the use of their log-in information. Unfortunately, the tokens and their respective cars are stored on website databases that are all too easy to hack, Reese explains, and if a hacker gains access, "it has free access to all of that site's cars for up to three months with no ability for the owners to do anything about it." On top of that, there is no way to revoke access of a compromised application.
Reese says that "there's nothing in the API that (can? should?) result in an accident if someone malicious were to gain access." The API can check the car's battery charge, operate climate control, operate the sunroof, identify car location, honk the horn, open the charge port, and perform other similar operations. But, he cautions, "Perhaps the scariest bit is that the API could be used to track your every move."

There are ways to sneak Tesla Model S into Russia for just 6.5M rubles

Tesla Fever has extended far and wide, winning over critics and everyday enthusiasts alike. The company is rapidly expanding its efforts both in its home market and abroad, but for some of its wealthy fans, that move isn't happening quite fast enough.
Dmitry Grishin is one such enthusiast. The 35-year-old multi-millionaire founder of Russia's Mail.ru is a big fan of Elon Musk's operation, so much so, in fact, that he's decided not to wait for sales to begin in the Russian Federation. Instead, he's gone off on his own and simply imported a Model S to get around Moscow.
The acquisition was not easy, as detailed by The Verge, and Grishin's car isn't quite as full-featured as a Model S sold in America - he's forced to use his phone's data connection rather than the car's . But, Grishin clearly has no regrets, spending a total of $180,000 to bring the EV to Moscow. In fact, Grishin has gone so far as to say he'd invest in the American EV manufacturer, if it hastened the brand's arrival in the motherland.

Driving the BMW M2 Competition, Honda Odyssey and Toyota RAV4 Prime | Autoblog Podcast #651

In this week's Autoblog Podcast, Editor-in-Chief Greg Migliore is joined by West Coast Editor James Riswick. This week, they talk about driving the BMW M2 Competition, Honda Odyssey and Toyota RAV4 Prime. Then they discuss James' experience testing the new Yakima CBX cargo carrier, Autoblog readers' preference for the GMC Hummer EV over the Tesla Cybertruck, and Mercedes-Benz taking a larger stake in Aston Martin. Lastly, they help James' father find a new car in the Spend My Money segment. Autoblog Podcast #651 Get The Podcast iTunes – Subscribe to the Autoblog Podcast in iTunes RSS – Add the Autoblog Podcast feed to your RSS aggregator MP3 – Download the MP3 directly Rundown Cars we're driving 2020 BMW M2 Competition 2021 Honda Odyssey 2021 Toyota RAV4 Prime Testing the Yakima CBX Cargo Carrier on the Subaru Outback 75% of Autoblog Twitter follower prefer the GMC Hummer EV over the Tesla Cybertruck Mercedes-Benz to boost stake in Aston Martin to 20%, lend it some tech Spend JamesÂ’ fatherÂ’s money Feedback Email – Podcast@Autoblog.com Review the show on iTunes Related Video: