[seanmcdirmid]

It only works when this is the first sign TACC sees. If TACC was previously engaged and saw other signs previously, the exploit doesn’t work. I’m sure Tesla fixed this, but given the nature of the edge case, it wasn’t simply a matter of sanity checking.

[tjoff]

Why would it only work if it is the first sign?

[seanmcdirmid]

Maybe because they were probably already doing sanity checking, but the kind that relied on some previous context? That seems reasonable, I’m sure they’ve thought about this kind of attack before, missing an obscure edge case.