• @Petter1@lemm.ee
    link
    fedilink
    English
    825 months ago

    90 days till release of Zero-Days 😉 don’t update your tesla 😂 so you can gain root and really own that car

      • @xthexder@l.sw0.com
        link
        fedilink
        English
        185 months ago

        There actually are a lot of really cool EV conversion builds on YouTube using fairly open parts. So I’d say this is perfectly accurate.

  • @maness300@lemmy.world
    link
    fedilink
    English
    275 months ago

    Wow. Imagine paying $1.4mil to find 49 zero days instead of hiring an actual security team.

    The people who did this are fucking idiots.

    • @uriel238@lemmy.blahaj.zone
      link
      fedilink
      English
      415 months ago

      White hats can be prosecuted via the CFAA. they usually aren’t (most of us are guilty of CFAA penalties) but some companies got sour to fixing their web security and instead would sue and push to prosecute.

      So in the early 2010s the white hat community went gray to survive. And companies that don’t pay their bounties oe cause trouble don’t get pen tested by white hats (at least not when wearing a white hat).

    • @WallEx@feddit.de
      link
      fedilink
      English
      27
      edit-2
      5 months ago

      Thats what white hats would do and what these contests are usually for

      But its more like a bughunt with an open Bounty then selling afaik

  • @DreadPotato@sopuli.xyz
    link
    fedilink
    English
    10
    edit-2
    5 months ago

    So, all these exploits seemingly still require physical access to the car/product electronics? If so, that seems to make it somewhat less of an issue (but still an issue of course) than if they could gain e.g. root access without physical access to the car or even proximity at all.

    • @PrettyLights@lemmy.world
      link
      fedilink
      English
      255 months ago

      I’m not that worried about my laptop in regards to physical access because I don’t usually leave it in public unattended for long.

      My car? Sometimes that thing sits in a parking spot or paid garage for weeks when traveling. I also leave it unattended in public most times I go brick and mortar shopping.

      • @DreadPotato@sopuli.xyz
        link
        fedilink
        English
        3
        edit-2
        5 months ago

        Someone still needs to physically break in to the car, which will usually trigger alarms and attention. Like I said, it is still cause for concern, but moderate concern IMO. I would be a hell of a lot more worried if it was possible from anywhere in the world to take over my car remotely. The need for physical direct access to electronics inside the vehicle makes it less vulnerable.

        Are you worried about leaving your laptop in your house/apartment? Because anyone could also just break in there and have physical access to your stuff, arguably with even more privacy during the act than with a car parked out in public plain view.

        • @webghost0101@sopuli.xyz
          link
          fedilink
          English
          2
          edit-2
          5 months ago

          Fair argument

          There is one additional factor though which is that the majority of crimes happen on impulses and depend on perceived potential for reward. A tesla, if you know where to sell it is a clear reward. Cars also tend to be very standard. If you can steal one you know how to steal plenty.

          For a house (tend to be more career criminals) you can never be sure there isn’t someone home, a dog. Layouts are unknown, chance of leaving identifiable evidence goes up as you take time. Escape routes may be limited. There is definitely some additional risk Involved, creative skill required.

          I am gonna go on a limb and say for criminals there as advantages and disadvantages to both types of thievery.

          Goes without saying that appropriating/breaking items, invading living space from others for any other reason then life/death survival isn morally repulsive and wrong.

        • @PrettyLights@lemmy.world
          link
          fedilink
          English
          15 months ago

          Have you seen how fast car thieves can steal cars now? Through repeater attacks or special devices, they can be gone in 60 seconds.

          Car alarms only deter the most casual of thieves.

    • body_by_make
      link
      fedilink
      English
      165 months ago

      People said this about the Jeep vulnerabilities until they found a way to exploit them remotely.

      Where there’s smoke, there’s fire.

    • Zuberi 👀
      link
      fedilink
      English
      85 months ago

      It’s a good thing people don’t leave their cars unattended ever.

  • Zuberi 👀
    link
    fedilink
    English
    -415 months ago

    White hat shit like this is lame as fuck lol

    Hack a 1%s car and run it off a cliff (ransomware breaks, hello?)

    • @jeremyparker@programming.dev
      link
      fedilink
      English
      95 months ago

      That’s some sociopath shit right there. But tbh white hat is better – the people that did this are guaranteed steady paychecks for the rest of their lives, with a lot lower stress than getting one big payday and having to look over your shoulder your whole life

        • @jeremyparker@programming.dev
          link
          fedilink
          English
          35 months ago

          Tell me you’ve never actually engaged in any real criminal activity without telling me you’ve never actually engaged in any real criminal activity

    • partial_accumen
      link
      fedilink
      English
      05 months ago

      Hack a 1%s car

      A Tesla costs about the same as a Ford F-150 pickup. You want all those F150 drivers killed too?

      • @nilloc@discuss.tchncs.de
        link
        fedilink
        English
        25 months ago

        I’d love to hack into all F-150s and remap the maximum throttle opening to maybe 1/2. Also set speed limits to 70 maybe. Or add GPS based limits to keep the fuckers from basically drag racing down my narrow sidewalk less street.

        Actually doing Rams is probably best, and remapping diesels to prevent coal rolling would be high on the list too.

      • Zuberi 👀
        link
        fedilink
        English
        -15 months ago

        (the car could be any of the hundreds of digitalized luxury cars, or a Tesla, sure)