Another day passed
Posted: Wed Feb 12, 2025 8:14 am
A week has passed.
- Rita, what's wrong with the scooter?
— Boss, alas, as I thought, this is murder. Electric scooters of this model are vulnerable. I think they will even have to be recalled across the country. Expert M from the company Z, which sells exploits, discovered that the security flaw allows an attacker to remotely control such devices. Including braking or accelerating the vehicle. According to him, the problem lies in the way users are authenticated.
- Even so? Can we talk to him in more detail?
- Chief, I have already invited him to us to conduct an examination. He promised to come tomorrow with his calculations and a video of the experiment.
- Good afternoon!
- Good afternoon, Johann! Rita ivory coast whatsapp data that you needed me?
- Yes! And it turns out you know each other?
— We studied together and knew each other from university.
— Can you explain in more detail what the matter is here?
— Easy. Passwords required for authentication in the scooter system are used incorrectly, since they are checked only on the application side. The scooter itself does not monitor the authentication process, which leads to a serious bug — all commands can be executed without the need to enter a password.
— Have you posted the code of the application exploiting the vulnerability anywhere?
- Johann, do I look like an idiot? There were three of us working on the hacking app. Me and two of my subordinates. One of them is on vacation now, but as far as I know, he hasn't left town.
- I see! For all of you, you were at the doctor's today. Here's a certificate from the hospital. You understand that it's better to keep your visit to us a secret for now.
- Rita, what's wrong with the scooter?
— Boss, alas, as I thought, this is murder. Electric scooters of this model are vulnerable. I think they will even have to be recalled across the country. Expert M from the company Z, which sells exploits, discovered that the security flaw allows an attacker to remotely control such devices. Including braking or accelerating the vehicle. According to him, the problem lies in the way users are authenticated.
- Even so? Can we talk to him in more detail?
- Chief, I have already invited him to us to conduct an examination. He promised to come tomorrow with his calculations and a video of the experiment.
- Good afternoon!
- Good afternoon, Johann! Rita ivory coast whatsapp data that you needed me?
- Yes! And it turns out you know each other?
— We studied together and knew each other from university.
— Can you explain in more detail what the matter is here?
— Easy. Passwords required for authentication in the scooter system are used incorrectly, since they are checked only on the application side. The scooter itself does not monitor the authentication process, which leads to a serious bug — all commands can be executed without the need to enter a password.
— Have you posted the code of the application exploiting the vulnerability anywhere?
- Johann, do I look like an idiot? There were three of us working on the hacking app. Me and two of my subordinates. One of them is on vacation now, but as far as I know, he hasn't left town.
- I see! For all of you, you were at the doctor's today. Here's a certificate from the hospital. You understand that it's better to keep your visit to us a secret for now.