The Big Tesla Hack: A hacker gained control over the entire fleet • Hacker News Board

Re: The Big Tesla Hack: A hacker gained control over the entire fleet

#191

Post by wglb » Tue, Sep 01, 2020, 1:02 AM UTC

everfree wrote: post #108

bookmarkable wrote: post #85

Earlier quoted context omitted.

I wonder why they aren’t paid in vesting stock. $50k in Tesla stock in 2017 would be a nice pay day. It would also align hackers interest with the businesses they are helping secure.

I wouldn't necessarily want the stock of a company that I just found a critical vulnerability with.

It's not very often that serious vulnerabilities affect the stock price.

Check out the stock price of Bank of America after their servers got rooted several years back. Or that Breach that Deloitte had. How about Cloudflare?

Re: The Big Tesla Hack: A hacker gained control over the entire fleet

#192

Post by bolasanibk » Tue, Sep 01, 2020, 6:46 AM UTC

cnst wrote: post #141

Now imagine someone takes over your Neuralink... And that's how we get the Zombie Apocalypse, kids!

The Feed (https://en.m.wikipedia.org/wiki/The_Feed_(British_TV_series)) is based on this premise.

Re: The Big Tesla Hack: A hacker gained control over the entire fleet

#193

Post by pydry » Tue, Sep 01, 2020, 4:56 PM UTC

tptacek wrote: post #187

pydry wrote: post #180

Earlier quoted context omitted.

I rather thought it was honesty that kept it from being bid on by bad guys. Even if they wouldn't bid more it's a big risk to pay so low. It's kind of a treasure trove to be able to read all passwords from a user of lastpass simply by showing them a website. It made me think that the next zero day on lastpass would probably be sold to someone else.

Who would buy it? That's the question I'm asking.

Scammers, fraudsters, governments

Re: The Big Tesla Hack: A hacker gained control over the entire fleet

#194

Post by tptacek » Wed, Sep 02, 2020, 5:26 AM UTC

pydry wrote: post #193

tptacek wrote: post #187

Earlier quoted context omitted.

Who would buy it? That's the question I'm asking.

Scammers, fraudsters, governments

Tell a story about the "scammer" or "fraudster" that buys this. What do they do with it? What do they win, how many times do they win it, and with what likelihood of success? How much work goes into realizing value from the vulnerability before they get their first dollar, or whatever it is they're getting? Is that work already done, or do they have to do it speculatively on this one vulnerability?

Reason your way through it all the way, and you'll see why real vulnerabilities sold on darker markets are paid in tranches, and why nobody pays real money for one-off serversides.

Re: The Big Tesla Hack: A hacker gained control over the entire fleet

#195

Post by [deleted] » Fri, Sep 04, 2020, 7:32 PM UTC

filleduchaos wrote: post #60

abledon wrote: post #12

Earlier quoted context omitted.

the guys who make power drills are writing the software for Self-Driving Cars[1]? Who is running that ship lol [1] https://www.bosch.com/stories/future-vehicles/

Perhaps due to knowing quite a few people whose careers were spent working with Siemens and Bosch machines in heavy industry, it seems unfathomable and mildly alarming to me that one can - know of the existence of Bosch, - be completely ignorant of the company being an absolute giant in the engineering space, and - be confident enough that they're some tiny power drill manufacturer to mock them publicly without pausi…

[deleted]