Live data from Hacker News

Hacking India's largest automaker: Tata Motors

eaton-works.com

101–108 of 108 posts

Re: Hacking India's largest automaker: Tata Motors

#101
post #74

Users in India wouldn't care that much about privacy of their data as much as the Western folks do. This reduces the importance of this whole episode and I don't think this news flashed across TV screens or caused a debate anywhere. India is a karma society. Karma doesn't mean upvotes. It means, you get what you destined for, or what you deserve. People take things in their stride and keep moving, while keeping their…

The kind of cope certain people come up with to justify the faults (and lack of basic living standards) of a civilization are insane. India is not a "karma" society, India is a 'jugaad' society where everyone does just enough to get by. The lack of civilizational will power to fix things which slightly harm the entrenched elite is very well known. (case in point - the recent stray dogs issue where the life of common…

"jugaad" is very close to what I stated - not worrying too much about privacy, as it doesn't have immediate material implications. "Karma" philosophy helps it by believing in destiny, instead of blaming one's own lackings and worrying.

Re: Hacking India's largest automaker: Tata Motors

#102
post #74

Users in India wouldn't care that much about privacy of their data as much as the Western folks do. This reduces the importance of this whole episode and I don't think this news flashed across TV screens or caused a debate anywhere. India is a karma society. Karma doesn't mean upvotes. It means, you get what you destined for, or what you deserve. People take things in their stride and keep moving, while keeping their…

The kind of cope certain people come up with to justify the faults (and lack of basic living standards) of a civilization are insane. India is not a "karma" society, India is a 'jugaad' society where everyone does just enough to get by. The lack of civilizational will power to fix things which slightly harm the entrenched elite is very well known. (case in point - the recent stray dogs issue where the life of common…

Well said. I'm too offended by justification of it not to scold the author of the original comment, but the aggressive assumptions in the replies made it worthwhile. I share your guarded hope. I'm fairly sure India will put people like this in their place eventually.

Re: Hacking India's largest automaker: Tata Motors

#103
post #60

Earlier quoted context omitted.

> $60k-100k TC Really? I think your numbers for the local marker are overestimated.

For our portfolio companies, we are fine paying for quality instead of quantity. Giving a Rs 60-80 lakh TC offer in BLR or HYD makes it easier to identify and hire good talent, and ik peer security firms (private and public) that are product first are offering similar TC offers in BLR, HYD, and NCR. On top of that, there has been a reverse brain drain going on since the COVID layoffs in early 2020, so if we want to p…

Interesting.

Re: Hacking India's largest automaker: Tata Motors

#104

Earlier quoted context omitted.

Note that M&S dropped TCS in July following the recovery. https://www.ft.com/content/289ec371-2ed4-425a-9bd0-c34e6db39... and elsewhere.

> M&S chair, told MPs that hackers had used “sophisticated impersonation” to gain entry “involving a third party.” 20 bucks says this sophisticated impersonation was social engineering a $5/hour outsourced customer support employee > The attack is expected to lower operating profits by up to £300mn this year. that's not counting the reputation and brand damage. M&S is seen as a premium retailer and this whole hack ma…

That was pretty well documented earlier this year (e.g. https://www.bleepingcomputer.com/news/security/uk-shares-sec... about M&S and Co-Op). "the threat actors utilized the same social engineering attack to breach both M&S and Co-op."

Re: Hacking India's largest automaker: Tata Motors

#105
post #4

Security for most Indian companies - even conglomerates is a joke. Look at the websites - most look like they've not been upgraded since the 90s, with endless popups

It's a side effect of pay. Like every other company, you get what you pay for, and for organizations that view web security as a [edit:] Cost Center (eg. Tata Motors) there's no incentive to pay market rate for a Security Engineer - who in India can now demand $60k-100k TCs. Heck, firms that provide offensive security capabilities to Indian PDs can pay $40k-50k after poaching a junior pentester or exploit developer f…

I do also wonder if this is because Indian security engineers can get good remote jobs working for American companies who are much more profitable than Indian companies. It places non-startup Indian companies in an odd position.
Post reply on HN