• 0 Posts
  • 855 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle

  • In January 2023, they published the initial results of their work, an enormous collection of web vulnerabilities affecting Kia, Honda, Infiniti, Nissan, Acura, Mercedes-Benz, Hyundai, Genesis, BMW, Rolls Royce, and Ferrari—all of which they had reported to the automakers. For at least half a dozen of those companies, the web bugs the group found offered at least some level of control of cars’ connected features, they wrote, just as in their latest Kia hack. Others, they say, allowed unauthorized access to data or the companies’ internal applications. Still others targeted fleet management software for emergency vehicles and could have even prevented those vehicles from starting, they believe—though they didn’t have the means to safely test out that potentially dangerous trick

    So not just Kia then.






  • They chose not to make this feature opt-in because they know that nobody in their right mind would opt into it

    Nobody would opt into it because like your OP said, there’s an astroturfing campaign to make sure that people completely misunderstand what the feature is and what it does.

    When everyone around you lies to you and tells you that seatbelts are “unsafe” and then the Feds come in and say “no they’re not”, you’re still gonna believe everyone around you even if they’re patently false. Hence forcing it so people see there isn’t a problem.














  • Conflating a Ruby on Rails app to all of Ruby is just not really fair. It’s like comparing Lombok to Java. Lombok is a hot fucking mess and Java app with it is gonna have difficulty at later points.

    Aside from that (I think rails is honestly terrible), just looking at the repo I can see that RedMine doesn’t use bundler, which is the singular standard in the Ruby community, so it’s like saying “a project I use uses Ant under the hood so Java is bad”. Like I said, there’s a reason that Rust and Elixir based their build tools off of Ruby’s.