Martin Herfurt, a security researcher, disclosed a new hack that lets you steal a Tesla car in 130 seconds using the owners NFC key cards.

As reported by WIRED, the hack also lets anyone create their own personal key in the process. First, what is the Tesla NFC key cards?

The NFC key cards allowed Tesla owners to unlock their cars and drive it by placing it on the center console. In a 2021 update, once the owner used the card to open their cars, they could start operating them immediately.

The cars automatically start in 130 seconds once the NFC key cards are used. It no longer requires any authentication and also lets the car accept new keys.

Also read:
– iPhone 14 launch: key September dates to mark on your calendar
– Asus ROG Phone 6D specs appear online, to be faster than Asus ROG Phone 6 Pro
– Google faced with lawsuit over sending spam emails.

“The authorization given in the 130-second interval is too general… [it’s] not only for drive,” Martin Herfurt said. “This timer has been introduced by Tesla… in order to make the use of the NFC card as a primary means of using the car more convenient. What should happen is that the car can be started and driven without the user having to use the key card a second time. The problem: within the 130-second period, not only the driving of the car is authorized, but also the [enrolling] of a new key.”

Also, while the phone app prevents enrolling new keys unless it is connected to an owners account, their is still a way around this. Since the car accepts communication from any Bluetooth Low Energy, or BLE, device, Herfurt claimed to build his own app that speaks the same language that the official Tesla app uses. With the new app, he was able to enroll a new key.

So, all a bad actor needs to do is to be near the car during the 130-seconds that the NFC key card is used to unlock it and they can create a new key and steal the Tesla.

For your daily dose of tech, lifestyle, and trending content, make sure to follow Plat4om on Twitter @Plat4omLive, on Instagram @Plat4om, on LinkedIn at Plat4om, and on Facebook at Plat4om. You can also email us at info@plat4om.com and join our channel on Telegram at Plat4om. Finally, don’t forget to subscribe to OUR YOUTUBE CHANNEL.