Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
janvidar
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
9 ms
·
31.
▲
by
janvidar
10y ago
Am I the only one finding it weird that they call it a render engine?
32.
▲
by
janvidar
10y ago
1. The free burger malware was hosted from Google Play 2. The attack was performed at a restaurant near a Tesla super charger, offering a free Wifi which pushed the Google Play link as ads. 3. The app must not root the phone, but this is pr
33.
▲
by
janvidar
10y ago
You are right, if the security sandbox is broken, then you have lost control. But at the same time, you also know that only 0.3% of the Android user base is using this year's version, and less than 25% are using last year's versio
34.
▲
by
janvidar
10y ago
There are lots of ways to get access to this data, installing an app is a pretty convenient and common way to do so. Any app can be hacked with enough effort. The Tesla app provided absolutely no resistance, and technically no privilege esc
35.
▲
by
janvidar
10y ago
I'm not sure where this quote came from, but I can say that the Tesla app should avoid storing the OAuth token in cleartext. Disclaimer: I work for Promon. See our blog post: https://promon.co/blog/
36.
▲
by
janvidar
10y ago
Yes, in our case we did MITM to display ads for a "free burger" app containing malware. The app was hosted on Google Play. And, you're right. Once we have access to the phone we can probably do a lot worse than just stealing
37.
▲
by
janvidar
10y ago
At the end of the day, a username and password is everything you need to drive off with any app enabled Tesla. You can perform your attack in a number of different ways to achieve this, but setting up a free wifi hotspot near a Tesla super
38.
▲
by
janvidar
10y ago
The OAuth token is also stored in plain text on the device. This is by itself enough to locate, track and unlock the car. The app prompts the user for the username/password in order to start the car. Mandatory disclaimer: I'm affi
39.
▲
by
janvidar
10y ago
I don't want Facebook Messenger, and the Facebook app cannot be uninstalled on my device since it came preinstalled with the Android OS on it (HTC One - it can however be disabled). Now, if someone uses Facebook Messenger to send me
40.
▲
by
janvidar
10y ago
Isn't this really just a sign of flawed hardware design? In my opinion hardware should be designed so that the camera LED lamp should always be lit if the camera is used. If there is a malfunction with the LED, then the camera should a
41.
▲
by
janvidar
10y ago
UDP (and TCP) are built on top of IP. You can add other things on top of IP also, but they will be blocked by your average firewall.
42.
▲
by
janvidar
10y ago
I must add Asciidoctor. Which is mostly compatible with Asciidoc, but even more powerful. I have spent a lot of time trying to make Asciidoc create beautiful PDFs for technical documentation, but Asciidoctor makes it all a lot easier to cus
43.
▲
by
janvidar
10y ago
These are the EU mandated car safety checks, focusing on breaks, tires, lights, visibility and exhaust. It is required every 2nd year starting from when the car is 4 years old. Most car manufacturers will do this as part of the standard ser
44.
▲
by
janvidar
10y ago
The problem here is that most libraries need to integrate into some sort of main loop somehow, and unfortunately there are lots of different ways of doing the main loop of the application. Some libraries integrate other things which are not
45.
▲
by
janvidar
10y ago
The average car tax in Norway is on average 102%. Electric cars, and Hydrogen cars have no tax. The effect is that the Tesla model S cost roughly the same as a BMW 5-series, or Mercedes E-class. Non-zero-emission cars aren't exactly fi
46.
▲
by
janvidar
10y ago
This was precisely addressed by Sir Alexander Fleming's 1945 Nobel Prize speech: “But I would like to sound one note of warning. Penicillin is to all intents and purposes non-poisonous so there is no need to worry about giving an overd
47.
▲
by
janvidar
10y ago
The problem is that antibiotics is simply too cheap. The next generations will be a lot more expensive due to the cost of developing it. Sadly, this means that many will die not affording the medicine.
48.
▲
by
janvidar
10y ago
Norway was not affected by WW1 directly, but Hitler occupied Norway during WW2. When the Soviets came to the rescue, the Germans burned down everything as they withdrew from the northern parts. The most populated areas were largely not affe
49.
▲
by
janvidar
11y ago
I suppose this depends on your machine.
50.
▲
by
janvidar
11y ago
I wish for a developer edition with Ubuntu.
51.
▲
by
janvidar
11y ago
I use client side TLS certificates for several things, but usually not in a browser. This allows me to check on my server that there is no MITM between the user/device and the server. The user may be inclined to click "OK" an
52.
▲
by
janvidar
11y ago
Maybe, but in the mean time we have C++.
53.
▲
by
janvidar
11y ago
C doesn't even have strings, but you would typically be using char arrays instead. All you need is a pointer to the array in order to access it. However, if you just have the pointer then you are lacking to essential pieces of informat
54.
▲
by
janvidar
11y ago
Where did you get that number from?
55.
▲
by
janvidar
11y ago
It is up in the double digits in India.
56.
▲
by
janvidar
11y ago
Well, I suppose you can #define your own?
57.
▲
by
janvidar
11y ago
It is not entirely irrelevant. Given that there are more developers familiar with HTML development, it may lower the barrier to developing plug-ins, or providing patches.
58.
▲
by
janvidar
11y ago
Really? I don't remember Windows Mobile having any relevance. Symbian was pretty much alone at the throne for years before iOS and Android.
59.
▲
by
janvidar
11y ago
Probably doesn't, but it does currently contain a copy of lua, which is written in C.
60.
▲
by
janvidar
11y ago
How about a virtual machine? E.g. kvm, virtualbox, or similar?
More ›