2016 Tesla Model X 90d on 2040-cars

Auto blog

Tesla Model S vulnerable to hackers?

Next time you walk by a parked Tesla and its sunroof is opening and closing with nobody sitting inside or around it, you could be witnessing a hacker moment. For all of its strengths as a car, the Model S reportedly has a weak spot: the security of its API (application programming interface) authentication, according to an article in the O'Reilly Community by George Reese, executive director of cloud management at Dell. Tesla develops and uses its own API authentication protocols, which have made access to certain Model S functions too easy for hackers, Reese says - himself a Model S owner.
At question is the Tesla REST API, which is accessed via a web-based portal, usually by Model S owners with their iPhone or Android-based smartphone, to perform a variety of menial tasks and check the status of the car. The Tesla-registered e-mail and password of the car owner is used to access the API through a web portal, which creates a "token" that lasts for three months. During that period, owners access the Tesla REST API via the token without the use of their log-in information. Unfortunately, the tokens and their respective cars are stored on website databases that are all too easy to hack, Reese explains, and if a hacker gains access, "it has free access to all of that site's cars for up to three months with no ability for the owners to do anything about it." On top of that, there is no way to revoke access of a compromised application.
Reese says that "there's nothing in the API that (can? should?) result in an accident if someone malicious were to gain access." The API can check the car's battery charge, operate climate control, operate the sunroof, identify car location, honk the horn, open the charge port, and perform other similar operations. But, he cautions, "Perhaps the scariest bit is that the API could be used to track your every move."

Recharge Wrap-up: Tesla firmware update videos, Mercedes S500 Plug-In Hybrid

See the Tesla Model S with Firmware 6.0 in action in new videos from Teslarati. The large software update includes improved traffic-based navigation, a calendar function, updated power management, "Location-Based Smart Air Suspension" as well as other improvements. Drivers get more route options to save energy, and more control over how the car saves energy. The car can also remember ride height settings when driving in those same locations again. Additionally, you can start and drive the car without a key, just using the smartphone app. See how it all works in the videos below, the second of which focuses on pairing with the updated phone app. The California Public Utilities Commission (CPUC) has deemed ride-hailing app Uber's carpooling service illegal. The way the UberPool service is categorized by the CPUC, charging multiple riders separate fares for a single ride runs afoul of the law. The technical details are a bit convoluted, and what supporters could deem arbitrary, but Forbes delves into the details a bit further to try to make sense of California's intentions (even considering the possibility of other ride services, such as airport shuttle companies, fueling the fire). Lyft - which operates a similar service called LyftLine - and Sidecar have also received notices from the CPUC. Read more at Forbes. China's recent enthusiasm for electric vehicles could be largely attributed to a single person, Ma Kai. After the Politburo member was named vice premier, he encouraged maintaining and increasing EV subsidies when China sought to decrease them. He also seems ready to fight for more EV deregulation to encourage more clean vehicles. Read more about Ma Kai and what he's done for China's EV legislation at Automotive News. Mercedes-Benz begins deliveries of the S500 Plug-In Hybrid this month. The high-tech luxury PHEV features energy saving modes based on driver, route and traffic, and features a haptic accelerator that can signal when the driver should ease off to save power. It's powered by a biturbocharged V6 and 85-kW electric motor. Its 8.7-kWh battery offers about 20 miles of electric driving. The S500 plug-in starts at about $146,000. Read more in the press release below. This content is hosted by a third party. To view it, please update your privacy preferences. Manage Settings. This content is hosted by a third party. To view it, please update your privacy preferences. Manage Settings.

Recharge Wrap-up: Shell stops AK ocean drilling, Lego Tesla Model S

Shell says it will halt exploratory drilling near Alaska's coast. While the oil giant has found some oil and gas below the waters, the amount it is finding is not worth the high costs of drilling. Shell also cites "the challenging and unpredictable federal regulatory environment in offshore Alaska" as part of its decision to move on from drilling in the Chukchi Sea, but it is possible public protests had an impact, too. Read more at Treehugger, and in the press release from Shell below. The University of Central Florida's Electric Vehicle Transportation Center will host the EV Transportation and Technology Summit from October 20 to 22 in Cocoa, Florida. The summit is geared toward businesses and organizations with the goals of increasing EV awareness, reviewing current and near future technology, and pointing out deployment achievements and challenges. While its coverage will be more general, the event will focus especially on planning and infrastructure requirements. Learn more at Hybrid Cars, or at the event website. The Tesla Model S still looks good when scaled down for a Lego minifig. A man named Cole Edmonson created a tiny brick version of the iconic EV, and managed to retain the car's distinguishing good looks. Edmonson provides a write-up detailing the process of creating the small, plastic Tesla copy. It's considerably more complicated than one would think. Check out the whole process at Brick Replicas, and read more from The Brothers Brick. Renault and Donfeng will build an electric car in China based on the Fluence ZE. The joint venture between the two automakers - called Dongfeng Renault Automotive Company (DRAC) - will produce the car in its Wuhan plant in 2017. The car will be sold solely in the Chinese market under a local Dongfeng brand. "This EV agreement illustrates Renault's engagement as partner of COP 21," says DRAC CEO Jacques Daniel. Read more at Green Car Congress, or in the press release below. Dongfeng and Renault agree to produce electric vehicles in China On the occasion of the visit of ZHU Yangfeng, Chairman of Dongfeng Group, at the Renault R&D center, Dongfeng Renault Automotive Company (DRAC) announces the production of its first electric vehicle in China. As part of the Joint Venture between Dongfeng and Renault, DRAC will produce an electric vehicle that is based on the Fluence Z.E.