zzdcar
Home
/
Reviews
/
Culture
/
Belgian Security Researchers Find A Clunky But Effective Way To Steal A Tesla In Minutes
Belgian Security Researchers Find A Clunky But Effective Way To Steal A Tesla In Minutes-July 2024
2024-02-19 EST 22:12:32

Image for article titled Belgian Security Researchers Find A Clunky But Effective Way To Steal A Tesla In Minutes

Here’s a warning for owners: if you see a sort of Belgian-looking person (I assume that means ?) walking around you and car, holding a box full of electronics and wires, maybe play it safe and smack the box out of their hands, then stomp on it. , a research group from the University of Leuven in Belgium, that just discovered a huge security hole in Tesla Model S and X’s keyless entry system that would allow the car to be stolen within minutes. That, or it could be some kind person bringing a video game console to some needy kids, and you’re the jerk. Better not take a chance, though.

The security hole focuses on the Bluetooth Low Energy protocol that’s used by Models S and X in their key fobs. Pulling off the exploit does require a bit of specialized hardware, specifically a modified Electronic Control Unit (it looks like it’s the Body Control Module) salvaged from another Tesla combined with a Raspberry Pi computer, some interface items and a battery.

That’s what the dude in the video is holding, nonchalantly, in this plexiglass box:

While out in broad daylight and in public and holding the thing all exposed like that looks pretty suspicious, there’s no reason that hardware couldn’t be slipped into a backpack or something and nobody would bat an eye. And while it seems like a lot of hardware for this, it’s not like it’s all that hard to get — the and the Pi and other bits are pretty cheap; you could likely build that box for, oh, $300 or so? Maybe less.

down what they built:

The proof of concept attack was realized using a self-made device (see the video) built from inexpensive equipment: a Raspberry Pi computer ($35) with a CAN shield ($30), a modified key fob and ECU from a salvage vehicle ($100 on eBay) and a LiPo battery ($30).

And, here’s a good encapsulation of what exactly that box was doing:

“To summarize, we can steal a Tesla Model X vehicle by first approaching a victim key fob within about 5 meters to wake up the key fob. Afterwards we can send our own software to the key fob in order to gain full control over it. This process takes 1.5 minutes but can be easily performed over a range of more than 30 meters. After compromising the key fob, we can obtain valid commands that will allow unlocking the target vehicle. After approaching the vehicle and unlocking it we can access the diagnostic connector inside the vehicle. By connecting to the diagnostic connector, we can pair a modified key fob to the car. The newly paired key fob allows us to then start the car and drive off. By exploiting these two weaknesses in the Tesla Model X keyless entry system we are thus able to steal the car in a few minutes”, says Dr. Benedikt Gierlichs, researcher at COSIC.

So, the ECU-rig pings the nearby key fob, gets in contact, takes it over, gets the unlock commands, which are then sent to unlock the car, and once inside, the hacker can pair a new fob, and, boom, they’ve got your car.

The researchers did inform Tesla of this vulnerability, and Tesla has fixed the hole and released an over-the-air update, 2020.48, which all you Tesla Model S and X owners should install to avoid any Belgians from stealing your car with a box full of motherboards and wires.

(Thanks, Michael S!)

Comments
Welcome to zzdcar comments! Please keep conversations courteous and on-topic. To fosterproductive and respectful conversations, you may see comments from our Community Managers.
Sign up to post
Sort by
Show More Comments
Culture
Subaru Had It Right All Along
Subaru Had It Right All Along
When first came to the United States, it sold small funky cars that were decidedly un-American. As the company grew its own identity and became more established in the U.S., it became the first automaker to offer an all-wheel-drive passenger car in 1975. Subaru was also an early-adopter of...
Jul 10, 2025
I Entered My Lifted Miata In A Real Off-Road Race, Here's What Happened
I Entered My Lifted Miata In A Real Off-Road Race, Here's What Happened
I have two automotive loves: The first is the Miata, the second is off-road racing. For a while I raced air-cooled Volkswagens in the deserts of California and Nevada and I was lucky enough to co-drive in a class 11 stock bug in the Baja 1000 a few years...
Jul 10, 2025
Toyota Is Moving A Prewar 700-Ton Press Machine Halfway Around The World
Toyota Is Moving A Prewar 700-Ton Press Machine Halfway Around The World
closed its São Bernardo Plant in November 2023, marking the end of its first overseas production facility. The closure caps off a period of continuous car production in São Paolo, , lasting over 60 years. The plant was home to a Komatsu 700-ton press that predates itself. And now...
Jul 10, 2025
I Can't Get Enough Of This YouTuber Who Builds Tiny, Fully Functional Scale-Model Cars
I Can't Get Enough Of This YouTuber Who Builds Tiny, Fully Functional Scale-Model Cars
I love tiny, of . I have a that is roughly half the size of a normal cat, and she’s perfect. I own a 2013 , which is like the miniature version of a normal-sized vehicle (at least here in Texas) — but beyond that, I also own a Hot...
Jul 10, 2025
2024 Kia EV9: What Do You Want To Know?
2024 Kia EV9: What Do You Want To Know?
At long last, we are about to get behind the wheel of for the first time. Sure, , and sure, , and sure , but hey — what can you do? Anyway, before we get behind the wheel of this three-row electric beast, we want to know what you...
Jul 10, 2025
Watch ABS Fail When MotorWeek Tests A 1997 Chevy S-10
Watch ABS Fail When MotorWeek Tests A 1997 Chevy S-10
MotorWeek’s is some of the on the internet. The long-running automotive news magazine has a treasure trove of tests after being on the air for over 40 years. Where else can you find detailed instrumented testing of long-forgotten cars like the or a ? MotorWeek’s recent Retro Review upload is...
Jul 10, 2025
Copyright 2023-2025 - www.zzdcar.com All Rights Reserved