Live data from Hacker News

Void captures over a million Android TV boxes

news.drweb.com

1–10 of 113 posts

Re: Void captures over a million Android TV boxes

#2
What's going to be even more fun is when the cars gets hacked, given that their are 100+ (200+) car makers, specially with ev cars (WSJ claimed 140+ makers in China) Bloomberg claimed 500+. I'm not dissing Chinese makers. I'm only sure that like everything there's an exponential curve of how serious companies take security. I'm guessing, of the car makers out there, Tesla and Rivan are near the top since they are new and have people with security experience? I'd expect traditional car makers (Ford, Chevy, Chrysler, Toyota, Honda, Nissan) to all be pretty mediocre. And then I'd expect all the tiny companies to be no different than the tiny companies that made the TVs above.

Re: Void captures over a million Android TV boxes

#3
post #2

What's going to be even more fun is when the cars gets hacked, given that their are 100+ (200+) car makers, specially with ev cars (WSJ claimed 140+ makers in China) Bloomberg claimed 500+. I'm not dissing Chinese makers. I'm only sure that like everything there's an exponential curve of how serious companies take security. I'm guessing, of the car makers out there, Tesla and Rivan are near the top since they are new…

> I'm guessing, of the car makers out there, Tesla and Rivan are near the top since they are new and have people with security experience?

From what little has been leaked, I really doubt Tesla should be enar the top.

Re: Void captures over a million Android TV boxes

#4
post #2

What's going to be even more fun is when the cars gets hacked, given that their are 100+ (200+) car makers, specially with ev cars (WSJ claimed 140+ makers in China) Bloomberg claimed 500+. I'm not dissing Chinese makers. I'm only sure that like everything there's an exponential curve of how serious companies take security. I'm guessing, of the car makers out there, Tesla and Rivan are near the top since they are new…

The sorry state of IOT security combined with V2V/V2X really worries me.

Re: Void captures over a million Android TV boxes

#5
post #3
post #2

What's going to be even more fun is when the cars gets hacked, given that their are 100+ (200+) car makers, specially with ev cars (WSJ claimed 140+ makers in China) Bloomberg claimed 500+. I'm not dissing Chinese makers. I'm only sure that like everything there's an exponential curve of how serious companies take security. I'm guessing, of the car makers out there, Tesla and Rivan are near the top since they are new…

> I'm guessing, of the car makers out there, Tesla and Rivan are near the top since they are new and have people with security experience? From what little has been leaked, I really doubt Tesla should be enar the top.

Tesla is amazingly good at software development practices. It’s the new Fords that are bricking themselves via updates, not Teslas.

Re: Void captures over a million Android TV boxes

#6
post #3
post #2

What's going to be even more fun is when the cars gets hacked, given that their are 100+ (200+) car makers, specially with ev cars (WSJ claimed 140+ makers in China) Bloomberg claimed 500+. I'm not dissing Chinese makers. I'm only sure that like everything there's an exponential curve of how serious companies take security. I'm guessing, of the car makers out there, Tesla and Rivan are near the top since they are new…

> I'm guessing, of the car makers out there, Tesla and Rivan are near the top since they are new and have people with security experience? From what little has been leaked, I really doubt Tesla should be enar the top.

[deleted]

Re: Void captures over a million Android TV boxes

#7
post #2

What's going to be even more fun is when the cars gets hacked, given that their are 100+ (200+) car makers, specially with ev cars (WSJ claimed 140+ makers in China) Bloomberg claimed 500+. I'm not dissing Chinese makers. I'm only sure that like everything there's an exponential curve of how serious companies take security. I'm guessing, of the car makers out there, Tesla and Rivan are near the top since they are new…

There's actually a strange tradeoff with automotive companies. Security requirements are a big forcing function driving vehicle electronics architectures to modernize and adopt similar security practices to consumer electronics, away from the traditionally developed and profoundly insecure embedded systems of yesteryear. That brings a lot of security features with secure communications, secure boot, signed updates, etc. It also means that all the exploit development that's been done on consumer electronics becomes applicable to vehicle systems.

The teams maintaining all of this usually have a LOC/headcount ratio approaching 1 million too. It's a very different threat model than the old days when every manufacturer had their own systems and trying to craft an exploit required individualized work for all of them.

Re: Void captures over a million Android TV boxes

#8
post #3

Earlier quoted context omitted.

> I'm guessing, of the car makers out there, Tesla and Rivan are near the top since they are new and have people with security experience? From what little has been leaked, I really doubt Tesla should be enar the top.

Tesla is amazingly good at software development practices. It’s the new Fords that are bricking themselves via updates, not Teslas.

That's not the impression I've gotten from Tesla's software. From the flash wear issue to the numerous vehicle opening issues, to the entire mess of their UDS implementation, there's quite a lot to complain about compared to a hypothetical "best practices" manufacturer, as opposed to the dumpster fire software of other OEMs.

Re: Void captures over a million Android TV boxes

#9
I wonder what SoC these are running?

Quite a few of them actually end up configured to preference SD boot over internal flash and/or have easily accessible buttons or shortable pads to trigger bootrom recovery modes.

Which at least, stops them being automatically consigned to e-waste.

Although, customising a LibreELEC image for the dozens of different models of TV box isn't great. Typically involves sorting out the dts for the device and remapping the remote.

Re: Void captures over a million Android TV boxes

#10

Earlier quoted context omitted.

Tesla is amazingly good at software development practices. It’s the new Fords that are bricking themselves via updates, not Teslas.

That's not the impression I've gotten from Tesla's software. From the flash wear issue to the numerous vehicle opening issues, to the entire mess of their UDS implementation, there's quite a lot to complain about compared to a hypothetical "best practices" manufacturer, as opposed to the dumpster fire software of other OEMs.

It's easy to complain since they're the only manufacturer who opens up your car as an API
Post reply on HN