21–30 of 108 posts
Earlier quoted context omitted.
TCS also contracts for Marks & Spencer, and the Co-op, both of which were also taken offline by hacking earlier this year.
At what point is it more believable that these are inside jobs done on purpose vs. incompetence? I guess that’s just Hanlon’s Razor though.
So the author got nothing but a thank you out of it? That's a shame.
> September 1, 2023: Tata Motors shared with CERT-IN (who then shared with me) that the issues are remediated. September 3, 2023: I confirm only 2/4 issues were remediated and the AWS keys were still present on the websites, and active. October 22, 2023: After no updates and finding the AWS issues still not remediated, I send over some more specific steps on what must be done. October 23, 2023: They confirm receipt and are working on taking action. After this date and up until January 2, 2024, there were various back and forth emails trying to get Tata Motors to revoke the AWS keys. I am not sure if something was lost in translation, but it took a lot of pestering and specific instructions to get it done.
Stay classy TCS.
Security for most Indian companies - even conglomerates is a joke. Look at the websites - most look like they've not been upgraded since the 90s, with endless popups
> endless popups Ypu get popups? What are you using to browse? IE5? I sometimes get 'this site is trying to open another window -allow/ block?': answer is always 'No'.
Another example, financial services publicly traded company with a recent 99% profit decline:
Security for most Indian companies - even conglomerates is a joke. Look at the websites - most look like they've not been upgraded since the 90s, with endless popups
> endless popups Ypu get popups? What are you using to browse? IE5? I sometimes get 'this site is trying to open another window -allow/ block?': answer is always 'No'.
So the author got nothing but a thank you out of it? That's a shame.
At least there was a "thank you". Some go on to sue such researchers.
Related: Jaguar Land Rover hack cost UK economy an estimated $2.5 billion, report says: https://news.ycombinator.com/item?id=45668008 The 'tech' for both these is by guess who? TCS! Edit: For those who don't know the relation. Tata[1] is a conglomerate, which owns both Tata Motors (Jaguar, Land Rover) and also TCS (Tata Consultancy Services) [1] https://en.wikipedia.org/wiki/Tata_Group
TCS also contracts for Marks & Spencer, and the Co-op, both of which were also taken offline by hacking earlier this year.
Earlier quoted context omitted.
TCS also contracts for Marks & Spencer, and the Co-op, both of which were also taken offline by hacking earlier this year.
At what point is it more believable that these are inside jobs done on purpose vs. incompetence? I guess that’s just Hanlon’s Razor though.