What lesson is there to learn?
Why do you single out Tesla?
The title is wrong, this is a generic attack against BLE.
Why do you single out Tesla?
The title is wrong, this is a generic attack against BLE.
The lesson should have been to 1) pick or come up with an adequate protocol that includes tight time-of-flight checks or 2) not use proximity auth at all, if it is impossible to mitigate against relay attacks, in terms of physics and maths.
I'm saying Tesla's engineers should have known better, by 1) paying attention to news in the industry; and 2) properly understanding BLE before choosing it as the auth protocol.