🏳️‍🌈 Tobi ❤️🍀🍁🍂

DevSecOp 💾 • Payments 💳 • Inf@tuda • red-haired 🔥 • Gamer ❤️ • ISTJ-T • Vegetarier 🥗 • @mcforumDE • 10 Tattoos • Linked with @Arcardus • 🚲 • 📷

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

Geht sogar. Willkommen #ApplePayDeutschland 🥳🎉

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@Petroon362495 Glad you found a way :3 Did this also update the certs on the autopilot mcu?

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@Petroon362495 @teslaeurope @Tesla Nothing there yet :D

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@MarmeDev @Petroon362495 @elonmusk @TeslaService @Tesla I understand. Yeah in that context without knowing it this is confusing. But unlocking it is rather easy if you have the car key and iirc toolbox.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@ostap_stad @Petroon362495 @imwesking @elonmusk @TeslaService @Tesla But when I have an MCU I can just power it up every time the timer runs out.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@Petroon362495 @ostap_stad @imwesking @elonmusk @TeslaService @Tesla It is not a blacklist. Rather a whitelist and your car is no longer on it.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@Petroon362495 @joelmarold @elonmusk @TeslaService @Tesla Mainproblem for me is that I was not able to find a firmware dump of the MCU. With that and a lot of time it might be possible to at least understand which code part does update the certificate and from where.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@hackerswagger @yipopov @Petroon362495 @elonmusk @TeslaService @Tesla This is irrelevant. This is/was the problem with that hiccup. As long as the OS on the Tesla MCU or other devices what ever you think of trusts the root from eMudhra and does not check revocation it will pass as valid!

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@Johan__Vroonen @Petroon362495 @elonmusk @TeslaService @Tesla Did you test that or just theory?

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@Johan__Vroonen @Petroon362495 @elonmusk @TeslaService @Tesla Flash is fine. This is a software problem.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@hackerswagger @adam_cypher @Petroon362495 @elonmusk @TeslaService @Tesla It seems that this is quiet easy since the eMMC is unencrypted. But the researcher did not check if the image is validated at boot. But the client certs are easy to copy and thus replace. You "just" need to desolder the eMMC from the MCU and solder it on an adapter.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@Johan__Vroonen @Petroon362495 @elonmusk @TeslaService @Tesla Do you have access? From how I understand it, the car gets an odin token every 24h. The toolbox uses this token to authenticate to the car. But since the car can't connect to the backend, no new odin token is downloaded. So no way to connect this way.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@Mlapplications_ @Petroon362495 @elonmusk @TeslaService @Tesla Tesla Model 3 Backend "https://t.co/LYswy28Acq" asks for Client Cert, so unless they allow the expired cert "whitelisted" no way for the car to connect.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@PlamenTachev @Petroon362495 @Mlapplications_ @elonmusk @TeslaService @Tesla @grok Disconnect Modem and connect Car to Hotspot where you spoof NTP packets seems to change the clock after some time/reboot.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@0xrootRE @Mlapplications_ @Petroon362495 @elonmusk @TeslaService @Tesla Model 3 uses "hermes_proxy" to connect to https://t.co/LYswy282mS no VPN like on the Model S.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@C8Luna @Petroon362495 @elonmusk @TeslaService @Tesla This is a server side check not a client side one.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@TobiDawg1337 @Petroon362495 @elonmusk @TeslaService @Tesla It still drives.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@MarmeDev @Petroon362495 @elonmusk @TeslaService @Tesla you can unlock it. But this would not help here.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@GrizleyPaper @Petroon362495 @elonmusk @TeslaService @Tesla car works fine with a key card.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@2speedy4ya216 Did you test that? Never heard it. Slow charging only happens if the console is off or in Hekate. Beeing in hekate actually drains my battery.

[🏳️‍🌈 Tobi ❤️🍀🍁🍂 @Knightyyyy1]

@joelmarold @Petroon362495 @elonmusk @TeslaService @Tesla Not possible unless you find a security issue or the firmware is old enough where one is known. SSH to the vehicle via Ethernet is locked with Certificates too. For everything else you need toolbox access to force flash the firmware.