Tesla patches Model S after researchers hack car's software

With physical access to the car, the researchers were able to exploit six flaws and eventually access the infotainment system

Tesla has patched six flaws that could allow hackers to eventually  gain control of the entertainment software in the Model S and hijack the car.

Tesla has patched six flaws that could allow hackers to eventually gain control of the entertainment software in the Model S and hijack the car.

Tesla has issued a security update to its Model S car after security researchers discovered six flaws that allowed them to control its entertainment software and hijack the vehicle.

With access to the entertainment software, Kevin Mahaffey, CTO of security startup Lookout, and Marc Rogers, a security researcher at CloudFlare, turned off the engine while a person was driving, changed the speed and map information displayed on the touchscreen, opened and closed the trunk and controlled the radio.

The pair, who will discuss their findings Friday at the DEF CON hacking conference in Las Vegas, also uploaded a remote access application that allowed them to lock and unlock the car using an iPhone.

Mahaffey stressed in an interview that physical access to the car was needed to carry out the hack. For their research, he and Rogers plugged a laptop into a Model S Ethernet port and exploited the vulnerabilities until they tapped into the entertainment software. They didn't provide details on what flaws were used in their hack.

Any software program can be hacked and the assumption is hackers will be able to eventually remotely attack a car's entertainment applications, Mahaffey said. Keeping this in mind, he and Rogers looked at how to secure a car after it has been compromised.

It's impossible to prevent an attack from hitting a car's computer system, Mahaffey said.

"The question is how do you respond quickly with a patch and how you do you make your car resilient," he said.

One way to bolster a car's security is by increasing the protection around individual components, and that way preventing a hacker from using one compromised system to access another.

Tesla was lacking in this area, Mahaffey said, adding that the company's recent security update should help rectify the problem.

"We should make sure that if you hack the infotainment system, you shouldn't be able to get access to the drive system," he said.

On Thursday, a spokeswoman for the Palo Alto, California, car maker confirmed it issued a patch for the flaws discovered by Mahaffey and Rogers. The company uses an over-the-air system to update its vehicles' software.

Mahaffey would like other automotive manufacturers to fix security flaws by delivering updates over the air, instead of slower, traditional mass repair methods like recalls.

"Your car today has more in common with a laptop than a Model T," he said, adding that cars will need to be patched more quickly than a piece of computer hardware.

Mahaffey and Rogers selected Tesla because the company is known for building technologically sophisticated cars.

Car security has grown in importance as vehicles have gained Internet access and applications that turned them into computers on wheels. In July, hackers demonstrated they were able to hack into a Jeep Cherokee and reduce the vehicle's speed while a person drove it. U.S. legislators have taken an interest in this issue and have proposed regulations that would force manufacturers to better protect vehicles from hackers.

Fred O'Connor writes about IT careers and health IT for The IDG News Service. Follow Fred on Twitter at @fredjoconnor. Fred's e-mail address is fred_o'connor@idg.com

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags TeslaAutomotivesecurityindustry verticals

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Fred O'Connor

IDG News Service
Show Comments

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?