3 ms·
Detailing how this works publicly makes nobody more secure. Public release of the general problem is still worthwhile as information, but there is a net "secur
by kllrnohj 11y ago
Detailing how this works publicly makes nobody more secure.
Public release of the general problem is still worthwhile as information, but there is a net "security" loss here.
- josu 11y agoI disagree. Making a security flaw known forces manufacturers to fix it. As the article states, they went "to the manufacturer of the affected chip in February 2012 and then to Volkswagen in May 2013". Two years later the problem hasn't been fixed, because a recall would be too labor intensive. Meanwhile VWs are still being stolen using this exploit. Now that the exploit is out there VW is forced to act. And it's not like regular people are going to turn into car thieves because this exploit has been made public. Not even house burglars will turn into car thieves. I would guess that car thieves are very specialized due to the seemingly complicated logistics behind these operations, so it's unlikely that they weren't aware of this exploit. I'm far from being an expert on the subject, but I don't see how this is a net loss. I see very little potential for a spike in thefts and a high probability of VW finally facing the problem.
- kllrnohj 11y agoThe specifics of how to exploit it do not contribute to pushing the manufacturers to fix it. Disclosing the general vulnerability does, the specifics does not. > Meanwhile VWs are still being stolen using this exploit Holy fucking [CITATION NEEDED] batman!
- Lawtonfogle 11y agoImmediately there is but what about long term? If industries know that researchers will post the vulnerabilities all over the net as soon as they find it, it may change their security behavior in a way that is a net positive to security.