Security Leftovers
-
Remote Vulnerabilities in Automobiles - Schneier on Security
This group has found a ton of remote vulnerabilities in all sorts of automobiles.
It’s enough to make you want to buy a car that is not Internet-connected. Unfortunately, that seems to be impossible.
-
Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More | Sam Curry
During the fall of 2022, a few friends and I took a road trip from Chicago, IL to Washington, DC to attend a cybersecurity conference and (try) to take a break from our usual computer work.
While we were visiting the University of Maryland, we came across a fleet of electric scooters scattered across the campus and couldn't resist poking at the scooter's mobile app. To our surprise, our actions caused the horns and headlights on all of the scooters to turn on and stay on for 15 minutes straight.
-
Reproducible Builds (diffoscope): diffoscope 231 released
The diffoscope maintainers are pleased to announce the release of diffoscope version 231. This version includes the following changes:
* Improve "[X] may produce better output" messages. Based on a patch by Helmut Grohne. (Closes: #1026982)
-
Qualcomm UEFI Flaws Expose Microsoft, Lenovo, Samsung Devices to Attacks
[Ed: But it is 'secure' according to Microsoft's troll army] -
Public Knowledge Commends FCC Vote To Strengthen Data Breach Notification Requirements - Public Knowledge
Today, the Federal Communications Commission released a Notice of Proposed Rulemaking to update data breach reporting requirements for telephone services. The proposed rules would strengthen the agency’s requirements for notifying consumers and federal law enforcement following discovery of a breach involving customer proprietary network information (CPNI). Public Knowledge applauds the Commission for this important, bipartisan effort to keep our personal telephone data safe, and ensure timely notice to law enforcement and the public of any breach.