HNLobsters🔥2seen ×10NEW
Unlocking any car from X brand in most of the world(shubs.io)
A security researcher, who is also a co-founder of Assetnote, discovered a vulnerability in the connected car platform of a major automaker, referred to as "X brand", which allows for unlocking any of their cars in most of the world. The researcher, who has a personal affinity for the brand, collaborated with Sam Curry to investigate the security of the automaker's systems, focusing on the internet-facing web applications and infrastructure. By exploiting weaknesses in the system, including bypassing the web application firewall (WAF) and skipping multi-factor authentication (MFA), the researcher was able to gain unauthorized access and unlock cars, highlighting significant security concerns with the connected car platform.