Flipper Zero WiFi attack can unlock and steal Tesla cars | Hacker News Reader

Flipper Zero WiFi attack can unlock and steal Tesla cars

bleepingcomputer.com

16 pointsmikece13 comments

Accurate headline: "The credentials on a Tesla account are used to operate one's car. You can steal a car by tricking someone into giving you their credentials."

How about

“Tesla cars vulnerable to takeover attack with cheap hardware” instead of making it seem like the tool is to blame? Tesla is entirely to blame for security mistakes, not the tools

That is not going to drive clicks. You can achieve the same using $5 bucks (seed) device with a battery. I bought the transparent version of flipper. It is collecting dust. It is good for teaching the curious minds.

Same here. I was so excited by it, I still like it. Great product but it is not enabling anything you couldn't do with an ESP32 and some peripherals. It is a shame it is getting so much regulatory zeal as if it is enabling attacks that would otherwise not be possible.

My fear is that banning the Flipper will lead to making it easier to ban similar devices and eventually make using things like the ESP32 more difficult.

Clicks or no, it's a title that can cause additional inflammation where government(s) are already looking to ban devices like the Flipper Zero instead of addressing the issue. Governments don't care if it's the Flipper or not, and this sort of thing gives them ammunition.

Mysk used a Flipper Zero to broadcast the WiFi network but notes that the same can be accomplished using a Raspberry Pi or other devices that come with WiFi hotspot capabilities.

... which is to say, almost any laptop made over the past couple of decades.

I think the Flipper Zero is a super-fun design thing - "what if Teenage Engineering were RF hackers as opposed to audio people" - but there's nothing in the design of the device that poses any more of a security risk than any number of mainstream devices on the market today. "Oh no, it has a Dolphin mascot! It's got a fun UI!"

This is just standard phishing and you could even do it off your phone. I was hoping the hack used one of the other RF protocols which the device supports.

I'm sorry is this really a spoofed AP for wifi lol jesus this isn't unlocking and stealing a tesla car with a wifi attack lol

This is like saying calling a person and telling them you're google and you need their password and getting their password and calling it "hacking google oauth"

> Flipper Zero [169$]

Save the money friends and use an esp8266 for less then 2$

Or any literally any laptop

I was confused by a bunch of Reddit posts asking, "what software should I run on my M5?" M5Stack is a development system, why are people asking what software to load onto it?

Then I discovered that there's a Flipper clone that runs on an M5 Stick and it's become popular among whatever the script kiddie crowd is calling themselves these days.

Ohh. Interesting. Thanks for sharing.

(don't actually ofc)

Reply on news.ycombinator.com