Tesla's Bug Bounty Program: How a Tech Journalist Booted Up a Car Computer for Research

As part of Tesla’s bug bounty program, a tech journalist sought out real hardware—specifically, parts from a crashed Model 3—to participate in identifying security vulnerabilities. The journey began by scouring eBay for the necessary components: the Media Control Unit (MCU) and autopilot computer.

The Hardware Hunt

On eBay, the MCU was listed as part of salvaged crash vehicles, often with photos showing the original car’s damage. These sellers offered parts ranging from $200 to $300 USD, making it a worthwhile investment for research purposes. The autopilot computer, however, required additional pieces like power supplies and display screens.

The MCU itself is a substantial component, roughly the size of an iPad but thicker than a 500-page book. It’s housed in a water-cooled metal casing designed to withstand harsh conditions within the vehicle. For powering this complex setup, the journalist opted for an adjustable power supply from Amazon, choosing a 10A version with ample headroom.

The display screen was another challenge due to its high cost on eBay. A good deal of $175 USD was found but still represented a significant investment in the project. The final piece needed—a cable connecting the MCU and touchscreen—proved difficult, as most sellers had already cut off these cables just after their connectors.

Bootstrapping the Car Computer

The journalist’s next step involved booting up the car computer on a desk setup. With all components in place, including the power supply and screen, they connected everything to an old laptop for control purposes. The process was meticulous; every connection had to be perfect to ensure that both parts would communicate seamlessly.

Once powered on, the journalist observed how the system booted up, revealing a complex operating environment designed specifically for Tesla’s vehicles. This initial setup allowed them to explore potential security vulnerabilities and test various scenarios within the car computer's ecosystem.