Summary of DEF CON 23 - Marc Rogers and Kevin Mahaffey - How to Hack a Tesla Model S

00:00:00 - 00:45:00

Marc Rogers and Kevin Mahaffey show how they were able to hack a Tesla Model S at DEF CON 23. They found a number of interesting components, including test points and diagnostic interfaces, and were able to control various aspects of the car's operation. Tesla released an OTA update that fixes several security vulnerabilities.

• 00:00:00 The talk discusses how the team hacked Tesla's Model S and how best practices can be followed by other companies when building systems. The team was happy to see that the lemmings survived, and notes that it is often difficult to change an existing system after it has been shipped.
• 00:05:00 The DEF CON 23 presentation "How to Hack a Tesla Model S" discusses the Tesla Model S' architecture and discusses how to hack it. The presentation also discusses the car's bug bounty program and rules of engagement.
• 00:10:00 The video discusses the project that Marc Rogers and Kevin Mahaffey undertook at DEF CON 23, which was installing a remote SSH backdoor on a Tesla Model S. They found a number of interesting components, including test points and diagnostic interfaces, and were able to control various aspects of the car's operation.
• 00:15:00 The Tesla Model S was vulnerable to a remote attack that allowed access to the car's interior and battery. The hackers were not able to take control of the car, but were able to read files stored on the car's internal memory.
• 00:20:00 The authors of the video discuss how they were able to hack a Tesla Model S, using tools and techniques they learned from DEF CON 23. Among the things they discovered are vulnerabilities in old versions of open x11 software and access to firmware downloads.
• 00:25:00 Marc Rogers and Kevin Mahaffey demonstrate how to hack a Tesla Model S by accessing the car's firmware and private keys. They also note that the car uses a security token that is rotated every 24 hours.
• 00:30:00 Marc Rogers and Kevin Mahaffey demonstrate how to access a Tesla Model S' CID and infotainment system, after gaining root on the instrument cluster. They also show how to access the vehicle's firmware systems, and how to spoof a Tesla's Wi-Fi network using a Wi-Fi key obtained from a service center.
• 00:35:00 The video shows how to hack a Tesla Model S, and concludes with discussing ways to secure the car. Test cat is used to identify unusual packets, and cutting-edge features of the car's infotainment system are explained.
• 00:40:00 Tesla released an OTA update that fixes several security vulnerabilities. Marc Rogers and Kevin Mahaffey demonstrate how to hack a Tesla Model S, and JB Straubel, the CTO of Tesla, is on hand to talk about the company's security efforts.
• 00:45:00 The speaker reports that Tesla did well in their bug bounty program, with one notable exception: passwords are rotated every 24 hours. They also recommend strong isolation of the vehicle's infotainment system and drive Critical systems, and the importance of controlling who has access to an embedded system.