4 ms·
From the article: > Responsible disclosure > All the two vulnerabilities we presented above are reported to Tesla in March 2019. Tesla already fixed them in v
by close04 7y ago
From the article:
> Responsible disclosure
> All the two vulnerabilities we presented above are reported to Tesla in March 2019. Tesla already fixed them in version 2019.36.2, and the Marvell also has deployed a fix and published a security advisory[4] to the issue. The disclosure of the vulnerability research report had been communicated to Tesla, and Tesla is aware of our release.
- monocasa 7y agoRight... They shared the 0 day. NSA and Comment Crew just sit on them like a dragon hording gold.
- rrdharan 7y agoI believe it’s less black and white than that - all of these organizations have both offensive and defensive priorities and sometimes choose to disclose exploits publicly after calculating their remaining value. See e.g. https://foreignpolicy.com/2017/09/25/is-the-nsa-doing-more-harm-than-good-in-not-disclosing-exploits-zero-days/ https://foreignpolicy.com/2017/09/25/is-the-nsa-doing-more-h... https://www.npr.org/sections/alltechconsidered/2017/11/17/564755961/government-outlines-when-it-will-disclose-or-exploit-software-vulnerabilities https://www.npr.org/sections/alltechconsidered/2017/11/17/56...