I can't fathom why anyone who can afford a Tesla Model S would buy something else.
Yes, it's electric. But it's also the best damn car on earth.
The only thing Nissan could do to make me consider a Leaf is make it a clone of the Tesla. I don't think they are going to achieve it at the Leaf's price point.
The Leaf's chief issue for its target market is range. And, as another posted, the Nissan dealers are Nissan's worst enemy in selling them.
I don't see the Tesla as competing with the Leaf. The Leaf basically competes with the Volt. It's biggest problem is range. The Leaf suits only a narrow market who either has a very short commute or a relatively short commute with charging at their destination.
There's nothing wrong with that, but it does mean there's necessarily a small audience for it.
I am in the middle of the polar vortex (-13F today) and haven't been having any issues charging my Tesla. I also haven't heard of anyone else in MN having charging issues. This really appears to be a Norwegian issue moreso than a general Tesla + cold issue.
You can't be coerced into providing witness testimony. You don't have to speak to the cops even if you are just a witness UNLESS the state offers you immunity. If you are offered immunity, then you can be coerced. But I doubt that's what the OP was talking about. If it is, then his diatribe makes even less sense that it tries to make.
Tesla doesn't want these buffoons selling Teslas because dealers don't really want to say them.
Sure, they'll pay lip service to the idea. But the problem is that Tesla's have very few moving parts. There's no money to be made off of Tesla services. And that's where these guys make their money. So they will use Tesla's to draw people in, but they'll sell something else.
By the way, who cares why? What if it is just because Elon hates TADA? In a free market, he should be able to sell direct if he wants.
They knew there was no way in hell they would get a blanket exemption or get the law repealed (Tesla's preference). So, they tried to craft the most palatable thing that could be passable.
If I were to try this attack, I would up the car to a range charge and turn air conditioning on full blast. Then I would go through cycles of charging the battery up full and discharging it.
The electricity will add up, but maybe not a lot for most who can afford an $80K+ car.
The bigger issue is that this will decrease the battery life.
Re: #1 What has logging in over SSL got to do with anything?
If a third-party is storing credentials that control everything, then you are screwed if that third-party is compromised. Twitter suffered greatly from these kinds of problems prior to adopting OAuth. The trick with OAuth is that the third-party never sees the primary credentials, just an application-specific set of credentials with very specific access rights. Because of the design of OAuth, it's also easy to revoke credentials on an app-by-app basis and thus not impact the other apps interacting with the OAuth system.
Re: #2
Tesla is blameworthy because they opted for a less secure approach than is commonly accepted practice. If a third-party is compromised in an OAuth environment, only that one token with the application's specific access rights are at risk. You can revoke them and re-issue without impacting anything else using those credentials.
Finally, there's no need for any panic at all. TFA is not pushing panic. It's pushing the facts of an architectural flaw that does not arise to the level of being an active vulnerability. A flaw that exists for no good reason at all.
In a world of interconnected devices (the Internet of Things), it's not about hypothetical sites. It's about real, interconnected sites. There are real sites out there that talk to Teslas and provide value beyond what Tesla provides. If you are building a connected device in 2013, you should take this reality into account.
Slashdot Mirror
Tesla has opened their patents up. So, no, these are not Tesla-specific and not of fleeting usefulness.
Who could possibly have anything positive to say about an electronic payment systems designed by marketers around QR codes and data mining?
Other than MCX shills, that is.
Cadillac has a luxury version of the Volt that sells for approximately the same price as the Tesla. No one buys it.
The fact is, comparing Tesla sales to Volt sales is idiotic. They aren't remotely similar cars and they aren't remotely competitive.
The Tesla Model S is outselling every single brand in its class. Porsche Panamera sales in California have fallen to non-existent.
I'd bet damn near no one shopping for a car in that price range who drives a Tesla would buy anything else. It's that good.
The idea that you must have a technical degree to be "worthy" of the CTO title is idiotic. Stupidest Slashdot submission ever.
And then there's cold weather. A 50 mile range becomes 25 really quickly in the cold.
I can't fathom why anyone who can afford a Tesla Model S would buy something else.
Yes, it's electric. But it's also the best damn car on earth.
The only thing Nissan could do to make me consider a Leaf is make it a clone of the Tesla. I don't think they are going to achieve it at the Leaf's price point.
The Leaf's chief issue for its target market is range. And, as another posted, the Nissan dealers are Nissan's worst enemy in selling them.
I don't see the Tesla as competing with the Leaf. The Leaf basically competes with the Volt. It's biggest problem is range. The Leaf suits only a narrow market who either has a very short commute or a relatively short commute with charging at their destination.
There's nothing wrong with that, but it does mean there's necessarily a small audience for it.
Once a warrant is issued, the statue of limitations goes out the door.
If you destroy the value of something the minute you fork it, it isn't open. Period.
There's nothing under the hood other than what you put there. It's a trunk.
Funny point of driving a Tesla covered in a light layer of snow is that the snow on the hood doesn't melt like it does with a gas car.
It is designed into the Tesla.
As a side note, the battery on my wife's BMW is reporting issues and she's having to leave it running :)
Gas cars have batteries too!
Summary: Tesla doing fine in the cold, BMW having issues
I am in the middle of the polar vortex (-13F today) and haven't been having any issues charging my Tesla. I also haven't heard of anyone else in MN having charging issues. This really appears to be a Norwegian issue moreso than a general Tesla + cold issue.
Derp. Of course, I go and accidently type "4th".
You can't be coerced into providing witness testimony. You don't have to speak to the cops even if you are just a witness UNLESS the state offers you immunity. If you are offered immunity, then you can be coerced. But I doubt that's what the OP was talking about. If it is, then his diatribe makes even less sense that it tries to make.
Actually, in other states where the battle can work, they have consistently lobbied for wider changes.
Tesla doesn't want these buffoons selling Teslas because dealers don't really want to say them.
Sure, they'll pay lip service to the idea. But the problem is that Tesla's have very few moving parts. There's no money to be made off of Tesla services. And that's where these guys make their money. So they will use Tesla's to draw people in, but they'll sell something else.
By the way, who cares why? What if it is just because Elon hates TADA? In a free market, he should be able to sell direct if he wants.
That's not what they were doing.
They knew there was no way in hell they would get a blanket exemption or get the law repealed (Tesla's preference). So, they tried to craft the most palatable thing that could be passable.
If I were to try this attack, I would up the car to a range charge and turn air conditioning on full blast. Then I would go through cycles of charging the battery up full and discharging it.
The electricity will add up, but maybe not a lot for most who can afford an $80K+ car.
The bigger issue is that this will decrease the battery life.
1. Only if there is a vulnerable third-party site with whom the user has shared their credentials. Out of the box, no.
2. I would consider that a flaw in the car if you could do that. The API and the fact it resulted from a hack would be incidental to the whole thing.
Re: #1
What has logging in over SSL got to do with anything?
If a third-party is storing credentials that control everything, then you are screwed if that third-party is compromised. Twitter suffered greatly from these kinds of problems prior to adopting OAuth. The trick with OAuth is that the third-party never sees the primary credentials, just an application-specific set of credentials with very specific access rights. Because of the design of OAuth, it's also easy to revoke credentials on an app-by-app basis and thus not impact the other apps interacting with the OAuth system.
Re: #2
Tesla is blameworthy because they opted for a less secure approach than is commonly accepted practice. If a third-party is compromised in an OAuth environment, only that one token with the application's specific access rights are at risk. You can revoke them and re-issue without impacting anything else using those credentials.
Finally, there's no need for any panic at all. TFA is not pushing panic. It's pushing the facts of an architectural flaw that does not arise to the level of being an active vulnerability. A flaw that exists for no good reason at all.
When done right, OAuth is more secure and equally usable.
Usability issues crop up when OAuth is applied to contexts in which it makes no sense (systemsystem authentication).
In a world of interconnected devices (the Internet of Things), it's not about hypothetical sites. It's about real, interconnected sites. There are real sites out there that talk to Teslas and provide value beyond what Tesla provides. If you are building a connected device in 2013, you should take this reality into account.
I have one of those as well as a 7-year old. They are much more interested in the Slacker access from the 17" screen.
I've done it before.