Tesla's new hack inobvumira mbavha kuvhura uye kuba mota mumasekonzi gumi
Zviri mukati
Mumwe muongorori pane imwe kambani huru yekuchengetedza awana nzira yekuwana nayo mota yeTesla pasina muridzi wemotokari aripo. Kuita uku kunonetsa sezvo kuchibvumidza mbavha kubira mota mukati menguva diki semasekonzi gumi vachishandisa tekinoroji yeBluetooth LE.
Muongorori wezvekuchengetedza akabudirira kushandisa kusazvibata kwakavabvumira kwete chete kuvhura iyo Tesla, asiwo kutyaira vasina kubata imwe yemakiyi emotokari.
Tesla akabiwa sei?
Muvhidhiyo yakagovaniswa neReuters, Sultan Qasim Khan, muongorori kukambani yecybersecurity NCC Group, anoratidza kurwiswa kwe2021 Tesla Model Y. Kuburitswa kwayo pachena kunotaurawo kuti kusazvibata kwakashandiswa zvakabudirira ku3 Tesla Model 2020. Uchishandisa mudziyo wekutumira wakabatana nelaptop, anorwisa anogona kuvhara pasina waya mukaha uripo pakati pemotokari yemunhu anenge abatwa nefoni nekunyengedza mota kuti ifunge kuti foni iri mukati memotokari apo inogona kunge iri mazana emamaira, tsoka (kana kunyange mamaira. ) kure. ) Kubva kwaari.
Kupaza mune izvo zvekutanga zveBluetooth Low Energy
Kana iyi nzira yekurwisa ichinzwika seyakajairwa kwauri, inofanirwa. Mota dzinoshandisa rolling code authentication kiyi fobs dzinokwanisa kudzorera kurwisa kwakafanana neTesla yakashandiswa naKhan. Uchishandisa kiyi yechinyakare fob, vaviri vevatsotsi vanowedzera masaini ekubvunzurudza asina kiyi yemotokari kusvika . Nekudaro, iyi Bluetooth Low Energy (BLE) yakavakirwa kurwiswa inogona kurongwa nembavha dzinoverengeka kana mumwe munhu anoisa diki diki-yakabatana relay kune imwe nzvimbo iyo muridzi anofanira kuenda, sechitoro chekofi. Kana muridzi asingafungire ari mukati meiyo relay, zvinongotora masekondi mashoma (gumi masekonzi, maererano naKhan) kuti anorwisa atyaire.
Takaona kurwiswa kwerelay kunoshandiswa mumakesi mazhinji ekubiwa kwemotokari munyika yose. Iyi nyowani yekurwisa vector inoshandisawo renji yekuwedzera kunyengedza mota yeTesla kuti ifunge kuti foni kana kiyi fob iri pakati. Nekudaro, pachinzvimbo chekushandisa yechinyakare kiyi yemota fob, uku kurwiswa kwakanangana nenharembozha yemunhu akabatwa kana BLE-inogonesa Tesla kiyi fobs dzinoshandisa tekinoroji yekutaurirana senharembozha.
Mota dzeTesla dziri panjodzi yerudzi urwu rwekusabatika tekinoroji.
Kurwiswa kwacho kunoitwa kwakabatana nekusagadzikana kunowanikwa muBLE protocol iyo Tesla inoshandisa foni yayo sekiyi uye fobs yeModel 3 uye Model Y. Izvi zvinoreva kuti nepo Teslas ari panjodzi yekurwisa vector, ivo vari kure chinangwa chete. Zvakare zvinokanganisika ndeveimba smart makiyi, kana chero chero mudziyo wakabatana unoshandisa BLE senzira yekuona padhuze nemudziyo, chimwe chinhu icho protocol yaisamboitirwa, maererano neNCC.
"Chaizvoizvo, masisitimu ayo vanhu vanovimba nawo kuchengetedza mota dzavo, dzimba uye data remunhu anoshandisa Bluetooth contactless authentication michina inogona kubiwa nyore nemutengo wakaderera, kunze-pasherufu Hardware," iyo NCC Boka yakadaro mukutaura. "Chidzidzo ichi chinoratidza njodzi yekushandisa zvisirizvo tekinoroji, kunyanya kana iri nyaya dzekuchengetedza."
Mamwe mabhureki akadai seFord neLincoln, BMW, Kia neHyundai anogona zvakare kukanganiswa neaya hacks.
Zvichida zvinotonyanya kunetsa ndezvekuti uku kurwiswa kweprotocol yekutaurirana, uye kwete chaiyo bug mumotokari inoshanda system. Chero mota inoshandisa BLE runhare sekiyi (senge dzimwe mota dzeFord neLincoln) inogona kurwiswa. Tichifunga, rudzi urwu rwekurwisa runogonawo kubudirira kumakambani anoshandisa Near-Field Communication (NFC) yefoni yavo sechinhu chakakosha, seBMW, Hyundai, uye Kia, kunyangwe izvi zvisati zvaratidzwa kupfuura Hardware. uye kurwisa vector, ivo vanofanirwa kunge vakasiyana kuitira kuti vaite kurwisa kwakadaro muNFC.
Tesla ane Pini mukana wekutyaira
Muna 2018, Tesla akaunza chinhu chinodaidzwa kuti "PIN-to-drive" iyo, kana yagoneswa, inoita seyakawanda-factor layer yechengetedzo kudzivirira kuba. Nekudaro, kunyangwe kurwiswa uku kwakaitwa kune munhu asingafungire akabatwa musango, anorova angangofanira kuziva PIN yakasarudzika yemotokari kuti atyaire mumotokari yake.
**********
:
