Hackers Stealing Cars Through Headlight Wiring

[DavidKFla]

https://www.theepochtimes.com/hacke...html?utm_source=partner&utm_campaign=imctgm01

 

[Bobo]

Imagine how successful some of these thieves could be in a legitimate business!
I know, I know that’s too much work for the measly income☹️

 

[fumanchu182]

Imagine how successful some of these thieves could be in a legitimate business!
I know, I know that’s too much work for the measly income☹️

It doesn't pay. I was a bug bounty finder for Dodge's bugcrowd program. They were paying shit for the vulnerabilities found. Not to mention they tried to sue me once. People sell these vulnerabilities/hacks on the markets and get paid what they rightfully deserve.

 

[BULL]

It doesn't pay. I was a bug bounty finder for Dodge's bugcrowd program. They were paying shit for the vulnerabilities found. Not to mention they tried to sue me once. People sell these vulnerabilities/hacks on the markets and get paid what they rightfully deserve.

Sue?

Why?

 

[Unholy707]

Must have been slimey and used the “hacking is hacking “ clause

 

[MikeD1]

Hmm, article says they have to pull the front bumper to do it. Why would anyone go to that much trouble for a low level car when there are soooo many easy pickings around ?

 

[Unholy707]

Which btw now there’s protection and if you discover a vulnerability and notify a company they can’t turn around and file criminal charges. That is unless you extract files and what not. White hat stuff is very grey

 

[Unholy707]

Hmm, article says they have to pull the front bumper to do it. Why would anyone go to that much trouble for a low level car when there are soooo many easy pickings around ?

I didn’t read it. Was it criminals or security researchers? Big difference, cybersecurity researchers typically have physical (legal) access to something they are trying to find a vulnerability in so that they can report their findings to the company, typically as part of a bug bounty program like fuman said (meaning you get paid for discovering/disclosing the vulnerability). Some companies don’t pay up, and typically you can release your findings after a certain amount of time wether they patch it or not.