Can Injection: keyless car theft (2023)(kentindell.github.io)

57 points by fanf2 1 year ago | 31 comments

I also hacked my car(goncalomb.com)

223 points by goncalomb 2 years ago | 69 comments

Ken Shirriff Tracks Down Intel's Infamous Pentium FDIV Bug in the Silicon Itself(hackster.io)

24 points by voxadam 1 year ago | 8 comments

TPM GPIO fail: How bad OEM firmware ruins Intel TPM security(mkukri.xyz)

168 points by osks 2 years ago | 105 comments

Two interesting XOR circuits inside the Intel 386 processor(righto.com)

82 points by _Microft 2 years ago | 13 comments

VIN: The 17-character code that runs the automotive world(cardog.app)

31 points by samsullivan 1 year ago | 13 comments

Your MCU likely escaped the eMudhra intermediate CA compromise(danielmangum.com)

47 points by hasheddan 5 days ago | 28 comments

Blog post explaining why microcontroller-based IoT devices are likely unaffected by the eMudhra intermediate CA private key compromise, due to minimal pinned root CA bundles.

Car companies are in a billion-dollar software war(insideevs.com)

407 points by rntn 1 year ago | 710 comments

InsideEVs feature on how car companies are spending billions on in-house software efforts, with most struggling and some faring better than others.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.

Hackers manage to unlock Tesla software-locked features(electrek.co)

760 points by 1970-01-01 3 years ago | 677 comments

Electrek article reporting that hackers found a way to unlock Tesla's paid software-locked vehicle features worth up to $15,000.

Belgium legalises ethical hacking(law.kuleuven.be)

394 points by jruohonen 3 years ago | 57 comments

A KU Leuven CiTiP blog post discussing Belgium's new legal framework legalising ethical hacking and whether it threatens or helps cybersecurity.

Bypassing airport security via SQL injection(ian.sh)

1859 points by iancarroll 2 years ago | 403 comments

Ian Carroll's blog post describing how a SQL injection flaw let researchers add arbitrary people to the TSA Known Crewmember program, bypassing airport security screening.