2 ms·
reminder, these vendors like Volvo etc., don't really want you to report vulns, you should just sell them to a broker instead and get some actual money as well,
by r_lee 3mo ago
reminder, these vendors like Volvo etc., don't really want you to report vulns, you should just sell them to a broker instead and get some actual money as well, it's a win win.
- cromka 3mo agoreminder, Volvo is Chinese.
- loloquwowndueo 3mo agoHow so? Sources?
- solarkraft 3mo agoGeely bought it from Ford in 2010. https://www.reuters.com/article/business/geely-signs-18-billion-deal-for-volvo-idUSTRE62Q1EH/ https://www.reuters.com/article/business/geely-signs-18-bill...
- dhathorn 3mo agoThat would be Volvo cars. tfa is about Volvo group, which is Swedish and makes among other things Volvo trucks. (Or HGVs as they might be called in Europe)
- cromka 3mo agoOh, fair. I assumed this was consumer cars.
- solarkraft 3mo agoOh, great point!
- johanmrtnsn 3mo agoAre you thinking about Volvo cars? There are two Volvo companies, Volvo cars and Volvo group. This seems to be about Volvo group which makes commercial vehicles like trucks and busses.
- ashu1461 3mo agoAlso the exploit is not directly via volvo but with a third party
- mpdpsycho 3mo agoI don’t know why particularly here over elsewhere, but this thought really makes me feel disappointment in the whole chain of humans responsible for the cost optimization away of product integrity. Though in this case, with all the tracking being thrown into newer cars, maybe a bit of a gap is a good thing for the future. Jailbreaking vehicles would be a cool thing to see become widespread.
- r_lee 3mo agothere's no point in being moral when these companies with their immense resources will just ignore you or refuse to give a measly bounty things won't change until they have to make an effort
- voakbasda 3mo agoThis. If they don’t feel pressure to pay, they won’t. More people should make them pay.