By bruteforcing the 4-digit PIN?I guess
Although Tesla thinks they are protected from the Relay attack with PIN2Drive. But we are still able to open the door. So risk still there. Anyway, we just purely enjoy the research. I hope you guys like this one :ppic.twitter.com/NY3iOjbMrT
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Are you doing this with the Key Card or Key Fob?
-
we tested with Model 3 Keyfob and NFC key tag. Both are working fine
- Show replies
New conversation -
-
-
Good one :) But to be fair - relay on NFC is less an issue of Tesla, and more an issue of NFC-based solutions in general. Question: how close you need to be to the key with your transceiver and for how long, to successfully perform the unlock?
-
Thanks. the full details coming up soon.
- Show replies
New conversation -
-
-
I love the classic “ape hanger” style technique for catching the signal btw!pic.twitter.com/CPMed35OhD
End of conversation
New conversation -
-
Not used to Tesla, does this mean "Pin2drive" only prevents starting the engine? Also wondering how close you have to get to the real key (or to be precise, how far away from the key you could relay reliably with which antenna size)?
-
... and I'm interested if it is really impossible or too expensive to implement relay detection based 9n response timings or sth similar for mitigation
End of conversation
New conversation -
-
-
Does this also apply when using your phone as a key?
-
Phone as key is Bluetooth Low Energy based... so handles a bit differently.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.