Live data from Hacker News

Hackers manage to unlock Tesla software-locked features

electrek.co

371–380 of 773 posts

Re: Hackers manage to unlock Tesla software-locked features

#372

Earlier quoted context omitted.

I also change my facial hair style 4 times a year. Will start getting plastic surgery twice a year starting next year.

I just inked an adversarial CV tattoo onto my face, worked great until that image leaked into the training data.

Should have tattooed a QR code that auto downloads a malware that bricks A100s.

Re: Hackers manage to unlock Tesla software-locked features

#373

Pretty sophisticated attack vector: low voltage attack on AMD secure execution environment during boot. I wonder how many tries you need to get whatever bits you need in the right place. Also, I imagine you only need to cut 12V wires to do this, but I admire the willingness to get in there direct on these systems. I'd be a little nervous to make those cuts personally. Buried in the article is the claim that this will…

Isn’t this a huge risk to AMD’s confidential compute offering. It’s a major security flaw.

I have reviewed the threat model carefully before. AMD never claims that their confidential compute offering is immune to attacks involving physical access. I assume what you mean by confidential compute is technology like AMD SEV SNP? Those are very different in that they allow you to run a trusted virtual machine on an untrusted hypervisor. This attack is completely different; it's akin to breaking Secure Boot on a PC.

Re: Hackers manage to unlock Tesla software-locked features

#374

Earlier quoted context omitted.

Just like we used to have cable box guys willing to sell you an unlocked box for premium channels, we are eventually going to have feature unlock guys that you go do and for a small fee perform some slightly more technical hack to enable features that are already there.

The only hack on cable style TV I remember is you could buy modified satellite authentication cards for DirectTV for a time - usually on eBay or similar sites - and they worked. No idea how long, I had an uncle that had one though, got all the premium channels etc. I doubt any of this works anymore though

If you want a rabbit hole, start with Christopher Tarnovsky at Defcon https://www.wired.com/2008/05/tarnovsky/

Re: Hackers manage to unlock Tesla software-locked features

#375
post #351

Earlier quoted context omitted.

Fascinating article, didn't know skip lagging was a thing or that it is illegal. It definitely shouldn't be, just seems to be government protecting entrenched corporate interests at the cost of the populace. aka par for the course.

Skip lagging isn't illegal, iirc a recent court case reaffirmed that. Airlines don't like it though so they may cancel you.

So if you buy a Tesla and the T&Cs prohibit you from hacking it/modding it, then you decide to hack away at it anyway, what happens if Tesla were to brick the online features of your vehicle and/or completely cancel you as a customer?

Re: Hackers manage to unlock Tesla software-locked features

#376

Earlier quoted context omitted.

I don't understand the mental gymnastic here. They built car with heated seats. You paid for car with heated seats that are technically fully functional but you can't use them until you pay even more. No, doesn't make sense to me.

> I don't understand the mental gymnastic here. They built car with heated seats. You paid for car with heated seats that are technically fully functional but you can't use them until you pay even more. No, doesn't make sense to me. That's because you don't understand. The customer didn't pay for a car with heated seats. The manufacturer included them anyway, but disabled them in software. Presumably, a consumer coul…

> The customer didn't pay for a car with heated seats.

Well, when you buy a car your payment gives you ownership of the entire car.

There may not be a written contract or specification explicitly saying that the valves in the tyres are included in the deal, but they're your property nonetheless (in the absence of obvious errors like the dealer letting you drive the wrong car off the lot)

The customer paid for a car with heated seats present but inoperable. If the customer wants to modify their property, that's their business.

Re: Hackers manage to unlock Tesla software-locked features

#377
post #321

Earlier quoted context omitted.

Yes. You've already distributed the binary to their machine and are using their resources to store it. In my view, it belongs to them and they should have full access.

By that logic, do you think that after someone has paid for 1 month of netflix, and downloaded their entire catalog to your phone for offline viewing, that all the videos "belongs to them and they should have full access"?

No because Netflix is not a one time purchase, it allows to use the service for as long as you have an active subscription. Also you should know that the download function is limited to 100 titles.

If the game had a base cost of 0 and a monthly price to play it it would be acceptable. Quake Live worked like this and I believe Game Pass.

Re: Hackers manage to unlock Tesla software-locked features

#378

I'm torn. On one hand, I absolutely think that a capability available in the vehicle/device when you purchased it should be available for you to use, and not behind a software lock (heated seats, etc). On the other hand, an "upgrade" or 100% new software delivered via OTA (self driving, etc) seems a little more like it should be a separate thing.

From the perspective of a customer, what is the difference between a heated seat that doesn't work because it doesn't exist, and one that is locked out by software? Assuming the customer isn't paying up front for that feature. Some people don't want to pay for heated seats. Turns out the manufacturer found it cheaper to just include the hardware anyway rather than differentiate on the production line. What's the big…

  Some people don't want to pay for a 4th bedroom. Turns out the builder found it cheaper to just include the extra bedroom rather than differentiate on blueprints. What's the big deal? The ability to change your mind and increase your mortgage without having to deal with construction in the future seems like a nice bonus. Everyone wins.
Cars are property. It would be absurd to think portions of my property are off limits to me. The best part about all of this, is that none of these car manufacturers are going to win, it's a rat race and plenty of people are going to buy the cheapest car and mod the car software. I actually love it. I also love how the people doing this have physical access to their property and nobody can stop them.

Re: Hackers manage to unlock Tesla software-locked features

#379
post #321

Earlier quoted context omitted.

Yes. You've already distributed the binary to their machine and are using their resources to store it. In my view, it belongs to them and they should have full access.

By that logic, do you think that after someone has paid for 1 month of netflix, and downloaded their entire catalog to your phone for offline viewing, that all the videos "belongs to them and they should have full access"?

That would be a better comparison (with bundling a game and DLC into single binary) if Netflix insisted that you keep those files on disk past your subscription period. If they did that, yes. But since they don't, no.

Re: Hackers manage to unlock Tesla software-locked features

#380
post #163

Earlier quoted context omitted.

" Eschew flamebait. Avoid generic tangents. " https://news.ycombinator.com/newsguidelines.html

[flagged]

We don't care about any of that; we just care about HN discussions being fresh and interesting vs. tedious and boring. Generic flamewar tangents are the latter, especially when they're re-repeated as often as this one has, so please don't take threads in those directions.

If you have a substantive point to make about resale value, or something like that, that's totally fine, as long as you do it in a way that isn't flamefodder/snark/name-calling.

https://news.ycombinator.com/newsguidelines.html

Post reply on HN