The Tesla Motors Inc. Model X sport utility vehicle (SUV).
David Paul Morris | Bloomberg | Getty Images
A Tesla Model X totaled in the U.S. late last year suddenly came back online and started sending notifications to the phone of its former owner, CNBC executive editor Jay Yarow, months later.
The car or its computer was suddenly online in a Southern region of war-torn Ukraine, he found by opening up his Tesla app and using a geolocation feature. The new owners in Ukraine were tapping into his still-connected Spotify app to listen to Drake radio playlists, he also discovered.
When Yarow posted about this to the social network X, formerly known as Twitter, his post went viral, and followers wanted to know why this this happening and whether it was a security risk.
According to the CTO of automotive security firm Canis Labs, Ken Tindell, there can indeed be a security risk with totaled cars that are restored.
He explained in an e-mail to CNBC, “The credentials to internet services are clearly left in the vehicle electronics and then can be used by whoever gets hold of the electronics.” He added, “In general it’s possible to get data out of working electronics — it’s merely a question of how much effort that takes.”
This is far from a Tesla-specific issue, he said. Cars, like laptops, smartphones, and even refrigerators and TVs, are now internet-connected devices that can store personal data.
“I think it needs to be more widely understood by dealers and owners that there is this issue of private data within the vehicle,” Tindell said.
Overseas demand for totaled Teslas
How did the vehicle end up in Ukraine?
CNBC found that after the car was totaled, online auction site Copart listed it for sale, according to website listings. The company, which currently has more than 1,600 Tesla vehicles listed for sale, is connected to salvage yards across the U.S., including one in New Jersey where the car ended up.
Copart specializes in damaged or totaled vehicles that have what’s called a “salvage title,” issued when an insurance company declares it a total loss, warning future buyers that there was a significant problem. Copart sells more than 2 million vehicles a year, with operations in 11 countries, according to the company’s website.
Such vehicles cannot legally drive on U.S. roadways, but some countries aren’t as stringent.
“Cars go to the repair shop or junk yard then find their way to a second market and then are suddenly being shipped overseas,” said Mike Dunne, a former General Motors international executive who now serves as CEO of auto consulting firm ZoZoGo.
The practice has been going on for decades and accelerated with the rise of digital auctions, according to Steven Lang, an auctioneer and founder of used car marketplace 48 Hours And A Used Car.
“Starting in the Y2K era, the digital auction site took over. So now you can have someone in Ukraine bidding on it. And then someone else from Norway bidding on it … and you haven’t even touched an American border or an American bidder,” said Lang, who has been in the vehicle auction business for more than 24 years.
“Virtually all of the vehicles that are totaled will end up at a salvage auction,” he said.
One online auction website that specializes in such sales estimated the winning bid for the vehicle would be between $27,400 and $29,400. A final sale price was not immediately known. Neither the salvage yard nor Copart immediately responded for comment about the vehicle and who bought it.
What owners can do after the fact
Tesla support staff told Yarow he should disconnect his car from his account, offering the following instructions via email:
1. Open the Tesla app Tap profile icon in top-right corner
2. Tap ‘Add/Remove Products’ > ‘Remove’ > ‘Vehicle’
3. Select the VIN, then tap ‘Get Started’
4. Enter the vehicle and sale details, then tap ‘Next’
5. Enter the new owner information, then tap ‘Next’
6. Enter security code from e-mail, then tap ‘Confirm’
7.Submit the request by clicking on ‘Remove Vehicle’
Reminder: If it asks if you sold the vehicle say yes.”
Tesla didn’t tell him how he was supposed to obtain the new owner information as he hadn’t sold the car.
According to Canis Labs CTO Ken Tindell, disconnecting one’s account from a totaled vehicle can help stop others from using apps that had been connected, such as Spotify in Yarow’s case. However, data could still be extracted from the totaled vehicle’s electronics.
“What would the trip history and phone book of a celebrity be worth to a blackmailer or a kidnapper?” Tintell asked.
He and other security experts compared the situation having an Apple laptop stolen. In some cases, Apple can wipe the laptop or device clean remotely when it comes online. But “a malign repair shop can take out the hard drive and copy all the data off it before scrapping a broken laptop.”
This is why Apple routinely encrypts its hard drives, the CTO noted. “It’s the only way to prevent the data being stolen by someone with physical access to an offline device.”
An automotive cybersecurity veteran and the founder of RightHook, Warren Ahner, said that ideally a company like Tesla would “Have a portal where a user can sign in with online credentials and say ‘remove all my info, then disconnect my vehicle from the account,’ and would be able issue a remote-wipe command to the car when it comes online, deleting it all including GPS, saved locations and the rest.”
However, he said, owners can be their own “personal risk police,” and avoid giving their vehicles or rental cars that they use lots of personal info.
“Always purge your data after you are done with the vehicle and try not to share more info with the car than you absolutely need to share,” Ahner recommended. “If I pair my phone with the car I’m renting or owning I don’t allow it to synch location and contacts. I only give it Bluetooth access to talk over the top of my music and so I can us whatever music streaming app I like.”
An automotive white hat hacker who uses the handle Green the Only has been sounding the alarm about data on cars for years. “All the phone directory and calendar stuff might be valuable,” he said.
Once a car or car computer has changed possession is back online, he says that the previous owners “can’t do much.” One problem is that an old owner can “accrue charges for Supercharging,” and other items Tesla — or other vehicle makers — may sell on a subscription or pay-per-charge basis. They can always submit a request to Tesla to remove the car from their account, but that’s it.
Green the Only agreed with Tindell and Ahner — Tesla “probably can add a ‘remote wipe and then remove from my account’ in addition to the ‘remove from my account’ option they have now. They probably should have added that long ago.”
A logo hangs on the building of the Beijing branch of Semiconductor Manufacturing International Corporation (SMIC) on December 4, 2020 in Beijing, China.
After trading on Thursday, the company reported a first-quarter revenue of $2.24 billion, up about 28% from a year earlier. Meanwhile, profit attributable to shareholders surged 162% year on year to $188 million.
However, both figures missed LSEG mean estimates of $2.34 billion in revenue and $225.1 million in net income, as well as the company’s own forecasts.
During an earnings call Friday, an SMIC representative said the earnings missed original guidance due to“production fluctuations” which sent blended average selling prices falling. This impact is expected to extend into the second quarter, they added.
For the current quarter, the chipmaker forecasted revenue to fall 4% to 6% sequentially. Gross margin is also expected to fall within the range of 18% to 20%, compared to 22.5% in the first quarter.
Still, the first quarter saw SMIC’s wafer shipments increase by 15% from the previous quarter and by about 28% year-on-year.
In the earnings call, SMIC attributed that growth to customer shipment pull in, brought by changes in geopolitics and increased demand driven by government policies such as domestic trade-in programs and consumption subsidies.
In another positive sign for the company, its first-quarter capacity utilization— the percentage of total available manufacturing capacity that is being used at any given time— reached 89.6%, up 4.1% quarter on quarter.
“SMIC’s nearly 90% utilization rate reflects strong domestic demand for semiconductors, likely driven by smartphone and consumer electronics production,” said Ray Wang, a Washington-based semiconductor and technology analyst, adding that the demand was also reflected in the company’s strong quarterly revenue growth.
Meanwhile, the company said in the earnings call that it is “currently in an important period of capacity construction, roll out, and continuously increasing market share.”
However, SMIC’s first-quarter research and development spending decreased to $148.9 million, down from $217 million in the previous quarter.
Amid increased demand, it will be crucial for SMIC to continue ramping up their capacity, Simon Chen, principal analyst of semiconductor manufacturing at Informa Tech told CNBC.
SMIC generates most of its revenue from older-generation semiconductors, often referred to as “mature-node” or “legacy” chips, which are commonly found in consumer electronics and industrial equipment.
The state-backed chipmaker is critical to Beijing’s ambitions to build a self-sufficient semiconductor supply chain, with the government pumping billions into such efforts. Over 84% of its first-quarter revenue was derived from customers in China.
“The localization transformation of the supply chain has been strengthened, and more manufacturing demand has shifted back domestically,” a representative said Friday.
However, chip analysts say the chipmaker’s ability to increase capacity in advance chips — used in applications that demand higher levels of computing performance and efficiency at higher yields — is limited.
This is due to U.S.-led export controls, which prevent it from accessing some of the world’s most advanced chip-making equipment from the Netherlands-based ASML.
Nevertheless, the chipmaker appears to be making some breakthroughs. Advanced chips manufactured by SMIC have reportedly appeared in various Huawei products, notably in the Mate 60 Pro smartphone and some AI processors.
In the earnings call, the company also said it would closely monitor the potential impacts of the U.S.-China trade war on its demand, noting a lack of visibility for the second half of the year.
Phelix Lee, an equity analyst for Morningstar focused on semiconductors, told CNBC that the impacts of U.S. tariffs on SMIC are limited due to most of its revenue coming from Chinese customers.
While U.S. customers make up about 8-15% of revenue on a quarterly basis, the chips usually remain and are consumed in Chinese products and end users, he said.
“There could be some disruption to chemical, gas, and equipment supply; but the firm is working on alternatives in China and other non-U.S. regions,” he added.
SMIC’s Hong Kong-listed shares have gained over 32.23% year-to-date.
Close-up of a hand holding a cellphone displaying the Amazon Pharmacy system, Lafayette, California, September 15, 2021.
Smith Collection | Gado | Getty Images
Amazon is expanding its online pharmacy to fill prescription pet medications, the company announced Thursday.
The company said it has added “hundreds of commonly prescribed pet medications” to its U.S. site, ranging from flea and tick solutions to treatments for chronic conditions.
Prescriptions are purchased via Amazon’s storefront and must be approved by a veterinarian. Online pet pharmacy Vetsource will oversee the dispensing and delivery of medications, said Amazon, adding that items are typically delivered within two to six days.
Amazon launched its digital drugstore in 2020 with the added perk of discounts and free delivery for Prime members. The company has been working to speed up prescription shipments over the past year, bringing same-day delivery to a handful of U.S. cities. Last October, Amazon set a goal to make speedy medicine delivery available in nearly half of the U.S. in 2025.
The new pet medication offerings puts Amazon into more direct competition with online pet pharmacy Chewy, as well as Walmart, which offers pet prescription delivery.
Amazon Pharmacy is part of the company’s growing stable of healthcare offerings, which also includes One Medical, the primary care provider it acquired for roughly $3.9 billion in July 2022. Amazon’s online pharmacy was born out of the company’s 2018 acquisition of online pharmacy PillPack.
Coinbase agreed to acquire Dubai-based Deribit, a major crypto derivatives exchange, for $2.9 billion, the largest deal in the crypto industry to date.
The company said Thursday that the cost comprises $700 million in cash and 11 million shares of Coinbase class A common stock. The transaction is expected to close by the end of the year.
Shares of Coinbase rose nearly 6%.
The acquisition positions Coinbase as an international leader in crypto derivatives by open interest and options volume, Greg Tusar, vice president of institutional product, said in a blog post – which could allow it take on big players like Binance. Coinbase operates the largest marketplace for buying and selling cryptocurrencies within the U.S., but has a smaller share of the global crypto market, where activity largely takes place on Binance.
Deribit facilitated more than $1 trillion in trading volume last year and has about $30 billion of current open interest on the platform.
“We’re excited to join forces with Coinbase to power a new era in global crypto derivatives,” Deribit CEO Luuk Strijers said in a statement. “As the leading crypto options platform, we’ve built a strong, profitable business, and this acquisition will accelerate the foundation we laid while providing traders with even more opportunities across spot, futures, perpetuals, and options – all under one trusted brand. Together with Coinbase, we’re set to shape the future of the global crypto derivatives market.”
Tusar also noted that Deribit has a “consistent track record” of generating positive adjusted EBITDA the company believes will grow as a combined entity.
“One of the things we liked most about this deal is that it’s not just a game changer for our international expansion plans — it immediately diversifies our revenue and enhances profitability,” Tusar told CNBC.
The deal comes at a time when the crypto industry is riding regulatory tailwinds from the first ever pro-crypto White House. Support of the industry has fueled crypto M&A activity in recent weeks. In March, crypto exchange Kraken agreed to acquire NinjaTrader for $1.5 billion, and last month Ripple agreed to buy prime broker Hidden Road.
Don’t miss these cryptocurrency insights from CNBC Pro: