Tesla’s retrofitting service for media control units (MCU) and Autopilot hardware may not go far enough in protecting owners’ personal data. That’s according to white hat hacker GreenTheOnly, whom obtained four units of these Tesla computers off eBay and found the previous owners’ personal data still on them. Even more worryingly, though, Tesla have failed to notify customers that might be affected.
Bad news Sunday. If you had infotainment computer in your Tesla replaced (model3 FSD upgrade, mcu2 retrofit, mcu1 emmc fix or any other fixe requiring computer swap) – consider all accounts you logged into from the car compromised and change pwds.https://t.co/sCs7elRoyk
— green (@greentheonly) May 3, 2020
Experts Comments
May 05, 2020
Businesses and consumers need to recognize that, just like with laptops, any piece of software is capable of collecting personal data. The more sophisticated and connected the device, the greater the potential for it to contain logs and settings which could place the consumer at risk when the device is resold or recycled. With cars becoming ever more connected and offering increasing information to drivers and passengers, manufacturers like Tesla, dealer networks supporting any manufacturer and .....Read More
Like(
May 05, 2020
Second-hand electronics can be a treasure trove of information for criminals. If organisations do not adequately wipe previous information, any information stored relating to previous owners or organisations can be viewed, resulting in a security and privacy breach. It's therefore essential that organisations which provide devices have mechanisms that allow users to easily and securely erase all data contained prior to returning or selling it.
May 05, 2020
Tesla seems to have an operational security issue at its service centres that allow its computers to be resold without wiping the previous owners data. The service centres are either not destroying them well enough to make data unrecoverable, or technicians are selling the old computers to make a profit, or both. If you plan on upgrading the computer in your Tesla, be sure to use the factory reset option to wipe all of the data beforehand.
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.
Be part of our growing Information Security Expert Community (1000+), please register here.
Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Mark Bower, Senior Vice President, provides expert commentary at @Information Security Buzz.
"There are new data security methods that are ideal for dynamic edge telemetry systems and online analytic platforms...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-insight-on-tesla-data-leak-old-components-containing-personal-info-end-up-on-ebay
Facebook Message
@Mark Bower, Senior Vice President, provides expert commentary at @Information Security Buzz.
"There are new data security methods that are ideal for dynamic edge telemetry systems and online analytic platforms...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-insight-on-tesla-data-leak-old-components-containing-personal-info-end-up-on-ebay