Tesla cars, Bluetooth locks, vulnerable to hackers - researchers


FILE PHOTO: Visitors wearing face masks check a China-made Tesla Model Y sport utility vehicle (SUV) at the electric vehicle maker's showroom in Beijing, China January 5, 2021. REUTERS/Tingshu Wang

LONDON (Reuters) - Millions of digital locks worldwide, including on Tesla cars, can be remotely unlocked by hackers exploiting a vulnerability in Bluetooth technology, a cybersecurity firm said on Tuesday.

In a video shared with Reuters, NCC Group researcher Sultan Qasim Khan was able to open and then drive a Tesla using a small relay device attached to a laptop which bridged a large gap between the Tesla and the Tesla owner's phone.

"This proves that any product relying on a trusted BLE connection is vulnerable to attacks even from the other side of the world," the UK-based firm said in a statement, referring to the Bluetooth Low Energy (BLE) protocol - technology used in millions of cars and smart locks which automatically open when in close proximity to an authorised device.

Although Khan demonstrated the hack on a 2021 Tesla Model Y, NCC Group said any smart locks using BLE technology, including residential smart locks, could be unlocked in the same way.

Tesla did not immediately respond to a request seeking comment.

NCC Group said such a vulnerability was not like a traditional bug which could be fixed with a software patch and added BLE-based authentication was not originally designed for use in locking mechanisms.

"In effect, systems that people rely on to guard their cars, homes and private data are using Bluetooth proximity authentication mechanisms that can be easily broken with cheap off-the-shelf hardware," the firm said.

"This research illustrates the danger of using technologies for reasons other than their intended purpose, especially when security issues are involved".

(Reporting by James Pearson; Editing by Mark Potter)

Article type: metered
User Type: anonymous web
User Status:
Campaign ID: 46
Cxense type: free
User access status: 3
Join our Telegram channel to get our Evening Alerts and breaking news highlights

   

Next In Tech News

Vodafone, Google look to extend Wear OS smartwatch battery life
Apple eyes fuel purchases from dashboard as it revs up car software
Basel revises bank crypto capital plan to include blockchain
EU extends roaming regulations for telecom providers until 2032
It's alive! How belief in AI sentience is becoming a problem
US needs to do more to protect companies against state-sponsored cyberattacks, experts say
Carousell rides sustainability trend in Hong Kong, aims to make buying and selling of second-hand items ‘as frictionless as possible’
Fewer billionaires in mainland China as ultra-wealthy feel pain of Beijing’s tech, property crackdowns, study says
France's Thales creates cloud services company powered by Google
Chinese team implants brain sensor without cracking skull

Others Also Read