Once logged in, the hackers could even create a new “phone key,” allowing them to come back to the vehicle later and drive off with it without raising suspicion.

That’s because Tesla doesn’t actually notify the user if a new key is created, as Mysk and Bakry point out in their video.

Mysk tested out the vulnerability on his own Tesla and found that he was easily able to create new phone keys without ever having access to the original, physical key card. That’s despite Tesla promising that wasn’t possible in its owner’s manual.

Once he told Tesla about his findings, the EV maker underplayed the vulnerability, telling him it was all by design and “intended behavior,” an assertion that Mysk called “preposterous” in his interview with Gizmodo.

“The design to pair a phone key is clearly made super easy at the expense of security,” he said.

Mysk argues it would be easy for the automaker to plug the vulnerability by simply notifying users if a new phone key is created.

Weird the dudes name is so close to Musk, but it sounds like this would be something incredibly easy for Tesla to fix, they’re just not doing it and denying it’s a problem…