Hackers take home free Tesla Model 3 for exposing flaw in its infotainment system

ZDI says that the duo that took home a Tesla Model 3 - Richard Zhu and Amat Cam called team Fluoroceatate - "thrilled the assembled crowd" as they entered the vehicle and successfully demonstrated their research on Model 3's internet browser.

By: | Published: March 25, 2019 4:50 PM
tesla model 3 Tesla Model 3

Pwn2Own, a high-profile hacking contest, saw two men taking away the big prize for pointing out a flaw in a Tesla Model 3's infotainment system. And the prize? Well, only a Tesla Model 3 along with additional cash. This was the first time this competition saw a car entering as a challenge. This was the 12th edition of the Pwn2Own competition that is run by Trend Micro Zero Day Initiative which has over the years awarded more than $4 million in prizes.

ZDI says that the duo that took home a Tesla Model 3 - Richard Zhu and Amat Cam called team Fluoroceatate - "thrilled the assembled crowd" as they entered the vehicle and successfully demonstrated their research on Model 3's internet browser.

The two used a JIT (Just-in-Time) bug to display their message on the screen. A JIT bug bypasses memory randomisation data that keep data protected. Tesla told TechCrunch that it would release a software update to fix the flaw discovered by Zhu and Cam.

"We entered Model 3 into the world-renowned Pwn2Own competition in order to engage with the most talented members of the security research community, with the goal of soliciting this exact type of feedback. During the competition, researchers demonstrated a vulnerability against the in-car web browser,” Tesla said in an emailed statement.

“There are several layers of security within our cars which worked as designed and successfully contained the demonstration to just the browser while protecting all other vehicle functionality. In the coming days, we will release a software update that addresses this research. We understand that this demonstration took an extraordinary amount of effort and skill, and we thank these researchers for their work to help us continue to ensure our cars are the most secure on the road today.”

Do you know What is Automated Manual Transmission (AMT), Electronic Brakeforce Distribution (EBD), Anti-Lock Braking System, Power Steering? FE Knowledge Desk explains each of these and more in detail at Financial Express Explained. Also get Live BSE/NSE Stock Prices, latest NAV of Mutual Funds, Best equity funds, Top Gainers, Top Losers on Financial Express. Don’t forget to try our free Income Tax Calculator tool.

Get the latest cars price and upcoming bikes price in India exclusively at Financial Express. Stay tuned for new cars and bikes reviews, follow us on twitter, Facebook and subscribe us on YouTube for latest auto news.

Next Stories
1Cheap Chinese Range Rover Evoque copy sale banned in rare lawsuit victory!
2Royal Enfield Trials 350, 500 India launch tomorrow: Top things about RE’s new Scrambler
3Kawasaki bikes to get expensive starting 1st April: Buy now and save this much on your dream Kwacker