9 ms·
When I cared, I found out that a lot of OBD-II dongles shipped with the same MAC, which gave you access to everything on a bunch of websites. You can curse the
by RyJones 2mo ago
When I cared, I found out that a lot of OBD-II dongles shipped with the same MAC, which gave you access to everything on a bunch of websites.
You can curse the storm, but the wind will come.
- netsharc 2mo agohow did "same MAC" lead to "access to everything"? Was the website's security based on MAC, which presumably is supplied by the client? If so, I guess.. typical IoT.
- RyJones 2mo agobuy any dongle that sells for under $100 on amazon. they all have the same mac, and come with 'bespoke' apps to let you do things to your car. those apps are all thin wrappers on code widely shared; they use the MAC of the dongle as the keystone for ID. Short story: buy one cheap dongle on Amazon, dump the MAC (00:11:22:AA:BB:CC IIRC; it's been 15 years since I cared) and you have auth to all of the apps everywhere. Reminder: the Bluetooth logo comes, mostly, from self-certification.
- andreareina 2mo agoAmazing! I have the same MAC address on my luggage!
- walrus01 2mo agoI made things easier by setting the permission action link on all my nuclear weapons to zero https://www.google.com/search?client=firefox-b-d&q=permission+action+link+set+to+zero https://www.google.com/search?client=firefox-b-d&q=permissio...
- tclancy 2mo agoRemind me to rotate my GitHub tokens.
- pak9rabid 2mo ago00:11:22:33:44:55
- londons_explore 2mo agoI bought 3 from 3 different vendors and they all have totally different Mac addresses. Internally they're all Bluetooth to serial chips, and another pic16xxxx chip which does serial to canbus. I guess the Bluetooth serial chips probably have programmable Mac addresses, but equally they normally ship with a globally default one unless you flash a different one onto it.
- inigyou 2mo agoWhy do the apps need auth?
- 1718627440 2mo agoHow does this even work? A website doesn't know your MAC, that is only known in your local network.
- deleted 2mo ago[deleted]
- deleted 2mo ago[deleted]