3 ms·

Maybe fixed now, but there was someone who got around the 10 unsuccessful (an perhaps the last one as well) by shutting the device off after an attempt was fail

Maybe fixed now, but there was someone who got around the 10 unsuccessful (an perhaps the last one as well) by shutting the device off after an attempt was failed (like 0.001ms, not manually)

eridius 11y ago
By "shutting it off" you mean they inserted themselves in between the battery and device and instantly cut power at the right time. Not something that you can easily do to an arbitrary device (especially if you have to give the device back). And I don't know for sure, but I feel like that one was fixed at some point. Edit: Yep, superuser2 links to the CVE: https://news.ycombinator.com/item?id=10423257 https://news.ycombinator.com/item?id=10423257, https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4451 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4451