Same way reverse engineer get access to internals of other devices - a bunch of tricks. :^)
In one case, greentheonly realized some fraction of Tesla’s cars are shipped out of the factory still in dev mode, with debug mode enabled and increased privileges. He found someone with a car like this who was down to helped and swapped part of his cars hardware with their car, and from then on was able to get a much better view of what was running on his car.
Unfortunately twitter is awful to search and a lot of his info is buried deep in old threads, but a few (old) examples to illustrate that he regularly does this.
In one case, greentheonly realized some fraction of Tesla’s cars are shipped out of the factory still in dev mode, with debug mode enabled and increased privileges. He found someone with a car like this who was down to helped and swapped part of his cars hardware with their car, and from then on was able to get a much better view of what was running on his car.
Unfortunately twitter is awful to search and a lot of his info is buried deep in old threads, but a few (old) examples to illustrate that he regularly does this.
Visualizing the outputs of the models running in the car: https://x.com/greentheonly/status/1404164587927314435
Tesla’s dev debug menus circa 2020: https://x.com/greentheonly/status/1336467014727110656
It’s been a while since I’ve worked in the space so I haven’t followed green as closely.