Live data from Hacker News

Someone hacked YandexTaxi and ordered all available taxis to the same location

twitter.com

121–130 of 163 posts

Re: Someone hacked YandexTaxi and ordered all available taxis to the same location

#121

Earlier quoted context omitted.

Better question is, will they be able to outlaw t-shirts with 20km/h speed limit signs on the back or people walking on the sidewalk wearing them.

Pfft. I’ve already got my collection of t shirts ready: -1km/h NULL km/h false km/h alert() km/h

don't forget 50/0 mph

Re: Someone hacked YandexTaxi and ordered all available taxis to the same location

#122
post #67
post #62

Earlier quoted context omitted.

Seems like a great way to stock up your firewood supply for the next winter, if you manage to target it in a way that doesn't cause half the city to show up, but maybe a little less than that?

It's not. You don't want to burn softwoods; they're resinous and create a ton of smoke.

Properly dried they are pretty smoke-free

Re: Someone hacked YandexTaxi and ordered all available taxis to the same location

#123

Earlier quoted context omitted.

I think you are right. I think the unknowns are, how tiny will the script be that commands all the cars into a lake and will it be a cloud hack or a local broadcast hack?

How about just driving you by billboards on, or for, Alphabet controlled properties?

They do it the way around, personalise the billboard content to the people near it.

Re: Someone hacked YandexTaxi and ordered all available taxis to the same location

#124
post #65

Earlier quoted context omitted.

Pine is really smokey and burns fast

It's worse than that. The sap in it will collect in the chimney and then cause a chimney fire. You really don't want to burn that stuff in a fireplace.

I'd say that is a symtom of bad combustion (too little air). Not what kind of wood you use. Sap burns just fine.

Re: Someone hacked YandexTaxi and ordered all available taxis to the same location

#125

Earlier quoted context omitted.

This is a great way to get free firewood

softwood is horrible to use. The resin in it burns up and gums up in the chimney and can cause chimney fires. Ya its free but also burns quick and doesn't put out enough heat.

Chop it, split it, dry it for a year and it’s fine. I’ve burnt huge amounts of pine in my Jøtul.

Re: Someone hacked YandexTaxi and ordered all available taxis to the same location

#126
post #39

Earlier quoted context omitted.

low pain outcomes All your customers thinking your app isn't secure any more isn't "low pain".

That's got nothing to do with what we're talking about. The first comment didn't say they should have spent more time on security, it said they should have spent time creating a system to detect if too many taxis were in one spot. I think we can all agree that security is valuable and should be prioritized, but spending time worrying about how to stop who is already in your system from sending all the cabs to the wro…

Maybe they managed to also steal or encrypt data, and now the media attention in a sense helps the hackers claim extortion money? Since the showlights are now on that company?

Re: Someone hacked YandexTaxi and ordered all available taxis to the same location

#127
post #83

The message on driver's screen says something like "Note from passenger: Guys and girls, stop feeding the yellow [Yandex], switch to Wheely!"

Many drivers do not read the passengers' comments on the order. Anyone who took a second to read this comment would've understood that there is something fishy here.

Re: Someone hacked YandexTaxi and ordered all available taxis to the same location

#128
post #39
post #21

Earlier quoted context omitted.

It’s already so hard to build a large company, you just don’t have the resources to chase super rare, low pain outcomes. This is the first time this has happened and the total cost of it is at most a few hours revenue. They’ll likely add safeguards to prevent such a thing now, but if they ran the company preparing for every possible way things could go wrong, they’d get absolutely nothing done.

low pain outcomes All your customers thinking your app isn't secure any more isn't "low pain".

Equifax lost millions of credit files, no consequences for them.

The Us government lost the completed forms that people who want a security clearance have to fill and that lists all their hidden skeletons (they must disclose them in the form so the govt can assess the likelihood of them being successfully leveraged by an enemy) and nothing changed[0]:

> In 2018, the OPM was reportedly still vulnerable to data thefts, with 29 of the Government Accountability Office's 80 recommendations remaining unaddressed. In particular, the OPM was reportedly still using passwords that had been stolen in the breach. It also had not discontinued the practice of sharing administrative accounts between users, despite that practice having been recommended against as early as 2003.

Not to mention the breaches happening at regular interval. I’m concerned about them and even I can’t remember them.

People don’t care. It happened to many times. It’s too abstract for a lot of people just like “Facebook and gmail can read my messages, nothing to hide”. There is little to no penalty for not being secure enough/getting breached.

[0]: https://en.m.wikipedia.org/wiki/Office_of_Personnel_Manageme...

Re: Someone hacked YandexTaxi and ordered all available taxis to the same location

#129
post #19

I'd like to think Ukrainan hackers were behind this.

A related - today is the first, and thus kind of celebrated, day of school in the former-USSR territories, like Russia and Ukraine, and the top Russian TV channels in Crimea were hacked to broadcast Zelenskiy speech congratulating schoolchildren there with the first day of school https://focus.ua/voennye-novosti/527684-hakery-postaralis-ob...
Post reply on HN