Skip to content

Product2 publishers3 min readPublished

Industry paid a federal lab to test Chinese lidar. The buyers weighing it say they didn't know.

Idaho National Laboratory's review is funded by unnamed electric and autonomous vehicle companies, per TechCrunch's sources. Seven firms reported to be considering Hesai and RoboSense parts were unaware of it.

The Product Desk · Product desk

Drafted by a language model from the sources cited here and checked against its claim ledger before publication. How we use AISend a correction

What happened

  • Idaho National Laboratory is examining whether Chinese lidar would pose a security risk if widely fitted to US vehicles, according to two people familiar with the effort.
  • The lab has said the work is paid for by a company or group of companies in the electric and autonomous vehicle industries, and it will not identify them.
  • The two sources said the work centres on cybersecurity and could end with the sensors receiving a clean bill of health in that area.
  • Two separate bans are being drafted in Congress, one led by Senators Baldwin and Budd, another co-sponsored by Representative Moolenaar.

Compiled by The Product DeskSomething wrong?How this is made

Why it matters

  • exposure The findings will belong to whoever commissioned them, so one buyer's due diligence becomes a competitor's blind spot on the same part number.
  • decision Anyone choosing a lidar supplier this year has to price both a possible statutory ban and a technical assessment they are not allowed to read.
  • constraint A cybersecurity pass from a DOE lab would not bind Congress, so the cleanest possible result still leaves the legal risk on the sensor.
  • contradiction The sharpest account of the exfiltration threat comes from a rival lidar vendor, while the mass-disabling scenario has no demonstrated fleet-scale mechanism.

The funding arrangement is the load-bearing detail. A Department of Energy lab is testing parts, and the bill is being paid by a company or a group of companies in the electric and autonomous vehicle business, according to what the lab told two people familiar with the effort [3]. The result is a finding owned by whoever wrote the check, produced at an institution that told TechCrunch in June and again in July that this was not a project it was at liberty to discuss with reporters [6]. A published federal safety finding is a rule everyone can plan around. A privately commissioned one is leverage.

Then there is the awkward part. Rivian, General Motors, Ford, Kodiak, Lucid, Nuro and Uber are all reported to be considering Chinese lidar, and all told TechCrunch they had not heard of the review [4]. Nvidia, Zoox and Aurora did not answer the question [5]. That is ten firms in the frame with nobody claiming the work [16]. Either the funder sits outside that list, or someone inside it is buying due diligence quietly enough that peers evaluating the same sensors cannot use the answer. Omer Keilaf, who runs the Israeli lidar maker Innoviz, said he also did not know about the review until TechCrunch raised it [10].

Keilaf supplied the most detailed threat model in the reporting, and he sells the alternative. His scenarios are sensors disabled at scale, disrupting vehicles in motion and bricking the ones parked [17], and lidar's dense returns compressed and pushed out over a cellular chip, which he said his seven years in Israeli intelligence tell him is not difficult to do [18][19]. The first has only partial precedent: researchers have disabled individual sensors with lasers, and how a fleet-wide disruption of robotaxis in active use would work is not obvious [12]. He also named a risk requiring no covert intent, which is that Beijing has deemed lidar strategically important, so an autonomy stack built on Chinese supply is exposed on its own terms [11].

According to the same two people, the review may end up clearing the sensors on cybersecurity [20]. That outcome is the one that shows how little the technical question now decides. The bills from Baldwin and Budd and from Moolenaar are built on espionage and back-door arguments [8][9], and a statute does not read lab reports. The commercial pull runs the other way: lidar started far above radar and cameras on price and has fallen sharply over the past decade [13][14], which is why anyone is looking at Hesai and RoboSense in the first place, and neither company responded to TechCrunch [15].

None of this has to resolve to change a sourcing decision. A sensor that might be prohibited in two years [7], whose only serious American examination is unpublished and belongs to a party you cannot identify, does not need to fail the test to lose the socket. It needs one program manager to decide the part is not worth the paperwork.

What to watch

  • Whether any of the ten companies contacted, or Hesai and RoboSense, eventually confirm involvement in the review or access to its conclusions.
  • Whether Idaho National Laboratory's finding is published or stays with its funders, which decides if it can be cited in a procurement file at all.
  • Whether either bill reaches a vote, and whether it restricts federal purchases only or commercial fleets as well.
Loading claim ledger
Loading source directory links
Loading share composer
Loading topic controls
Loading related stories