Hacking cars in JavaScript (Replay attacks in the browser with the HackRF)(charliegerard.dev)

104 points by rmason 2 years ago | 4 comments

Your MCU likely escaped the eMudhra intermediate CA compromise(danielmangum.com)

47 points by hasheddan 5 days ago | 28 comments

Blog post explaining why microcontroller-based IoT devices are likely unaffected by the eMudhra intermediate CA private key compromise, due to minimal pinned root CA bundles.

Hackers manage to unlock Tesla software-locked features(electrek.co)

760 points by 1970-01-01 3 years ago | 677 comments

Electrek article reporting that hackers found a way to unlock Tesla's paid software-locked vehicle features worth up to $15,000.

Hacking Subaru: Tracking and controlling cars via the admin panel(samcurry.net)

493 points by ramimac 1 year ago | 283 comments

Sam Curry's writeup on exploiting Subaru's STARLINK admin panel to remotely track, unlock, and control Subaru vehicles.

Hacking the largest airline and hotel rewards platform (2023)(samcurry.net)

259 points by DavidChouinard 2 years ago | 90 comments

Making Magic Leap past Nvidia's secure bootchain and breaking Tesla Autopilots(fahrplan.events.ccc.de)

68 points by rguiscard 9 months ago | 16 comments

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

Internet-connected cars fail privacy and security tests conducted by Mozilla(gizmodo.com)

474 points by rntn 3 years ago | 496 comments

Gizmodo article on a Mozilla report finding that internet-connected cars fail privacy and security tests and collect extensive personal data.

Your MCU likely escaped the eMudhra intermediate CA compromise(danielmangum.com)

47 points by hasheddan 5 days ago | 28 comments

Blog post explaining why microcontroller-based IoT devices are likely unaffected by the eMudhra intermediate CA private key compromise, due to minimal pinned root CA bundles.

Hacking millions of modems and investigating who hacked my modem(samcurry.net)

795 points by xrayarx 2 years ago | 164 comments

Sam Curry's blog post on discovering vulnerabilities that allowed hacking millions of ISP modems, and investigating who compromised his own modem.

How we hacked McKinsey's AI platform(codewall.ai)

420 points by mycroft_4221 7 months ago | 168 comments

CodeWall blog post describing how its autonomous offensive agent found vulnerabilities in McKinsey's internal AI platform Lilli.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.