Tesla only implemented code-signed updates *now*? WTF? What is this, the 90s? https://www.wired.com/2016/09/tesla-responds-chinese-hack-major-security-upgrade/ …pic.twitter.com/QSzceZoGgB
-
To be slightly fairer to them, my understanding is that they pulled updates over TLS.
-
-
I'm aware of that, obviously, but my point is that most attack vectors are going to be focusing on MitM'ing the OTA updates.
-
I'm not disagreeing that firmware signing is needed, but once physical access is gained, most threat models break down anyway.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.