Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tesla's charging ports use a standard msg to open on 315MHz and can be replayed

twitter.com

Post reply on HN
Print view View original

21–30 of 43 posts

Re: Tesla's charging ports use a standard msg to open on 315MHz and can be replayed

#21

Post by andsbf »

dotancohen wrote: post #20
andsbf wrote: post #5

Earlier quoted context omitted.

But it is Tesla, so people has to make a drama about it

Recently I was talking to someone about my new Model 3. They had heard all about the body panels not lining up. But when I asked him if he had ever heard about the Subaru brake light recall or the Toyota airbag shrapnel, he became concerned because he drives a Toyota. For some reason, all minor Tesla recalls become public scandals yet serious safety-related recalls of other automakers are obscure.

Thanks, that was my point but I didn't have the energy to write it as well as you did. Appreciate it

Re: Tesla's charging ports use a standard msg to open on 315MHz and can be replayed

#22

Post by natch »

gambiting wrote: post #14
songgao wrote: post #2

I’m having a hard time coming up with a reason why there needs to be any replay protection here. That port is supposed to open without unlocking the car. You can approach a locked Tesla and press the button on a charging connector and it’ll open. The whole thing is unauthenticated by design.

Yeah. The charging port on my Volvo never locks, and I see that as a good thing - it means I can get out of the car, lock it, then go around and plug the charging cable in. Don't really see any issue with it.

Off topic, I'm curious, as a Volvo owner, do you think Volvo is Swedish owned?

Re: Tesla's charging ports use a standard msg to open on 315MHz and can be replayed

#23

Post by gambiting »

natch wrote: post #22
gambiting wrote: post #14

Earlier quoted context omitted.

Yeah. The charging port on my Volvo never locks, and I see that as a good thing - it means I can get out of the car, lock it, then go around and plug the charging cable in. Don't really see any issue with it.

Off topic, I'm curious, as a Volvo owner, do you think Volvo is Swedish owned?

I think it's a Swedish car. Even though my particular one was actually made in China.

And I know what you're hinting at but I don't actually care. Just like a Land Rover is a British car even though it's owned by an Indian corporation.

Re: Tesla's charging ports use a standard msg to open on 315MHz and can be replayed

#24

Post by antsar »

adrianN wrote: post #18
nexuist wrote: post #17

Earlier quoted context omitted.

I also believe this is not an issue right now, but I'll throw this out to ponder: Since supercharging is paid and tied to the VIN, that implies that there is some kind of data transfer occurring between the vehicle and the charging station, right? It's not just a dumb terminal connection. Given that this is the case, could a theoretical exploit use that data connection to gain access to the vehicle and e.g. unlock th…

One would hope that the part of the car that communicates with the charger and the part that controls the doors are separate.

One can hope. I await the CVE.

Re: Tesla's charging ports use a standard msg to open on 315MHz and can be replayed

#25

Post by gatlin »

cmeacham98 wrote: post #6
andsbf wrote: post #5

Earlier quoted context omitted.

But it is Tesla, so people has to make a drama about it

The OP on twitter says its not going to help you pwn Teslas, and as of the time of commenting every comment on this post has the same opinion that this is ok. Where's the drama?

None, this is astroturfing from the reverse extreme.

Re: Tesla's charging ports use a standard msg to open on 315MHz and can be replayed

#26

Post by LinuxBender »

I do not know much about EV's. Can you steal power from the car by only having access to the charge port or can you interface with the cars computer through this port? I know that some people power their homes with their car but does that require doing something with the cars computer or does the car have default and secure settings one can or should change?

Re: Tesla's charging ports use a standard msg to open on 315MHz and can be replayed

#28

Post by toomuchtodo »

roeles wrote: post #27

I wonder how well protected the charging circuits are against damage from malicious chargers. If it is at all possible to damage the car, then I can image this turns out to be a problem.

The vehicle power controls can handle up to and over 300kw of DC current.

Re: Tesla's charging ports use a standard msg to open on 315MHz and can be replayed

#30

Post by blamazon »

somedude895 wrote: post #15
blamazon wrote: post #8

Earlier quoted context omitted.

On my 2017 model x the charging port is locked shut when the car is locked. I get a strange amount of vitriol from anti-EV folks where I live, I could imagine somebody putting a metaphorical potato in the metaphorical tailpipe. Although that type of person is more likely to use a screwdriver than a replay attack.

Is it really locked? I don't know the Model X well enough, but on my 2018 Model S the charging port is underneath the reflective part next to the brake light, which you can open by pressing down on it. I only found out I didn't have to use my key to open it a couple months ago.

Yep, it's really locked. If the car is locked pressing the little reflective thing does nothing. The flap has a lock and a servo to flip it open and closed - I can open and close it from the MCU touchscreen.

Makes sense that they'd ditch this as unnecessary complication.

Post reply on HN