schlunker
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
slothrop@lemmy.ca to Cybersecurity@sh.itjust.worksEnglish ·
edit-2
1 day ago

Norway discovers that its Chinese electric buses can be remotely disabled

cybernews.com

external-link
message-square
43
fedilink
268
external-link

Norway discovers that its Chinese electric buses can be remotely disabled

cybernews.com

slothrop@lemmy.ca to Cybersecurity@sh.itjust.worksEnglish ·
edit-2
1 day ago
message-square
43
fedilink
Attention Required! | Cloudflare
cybernews.com
external-link

different source (Danish)

It’s no surprise, as kill switches are pretty much ubiquitous.

  • yetAnotherUser@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    1
    ·
    22 hours ago

    There’s a difference between consensual OTA updates (meaning the bus company would manually need to confirm the update) and non-consensual OTA updates (meaning it is done regardless of the bus company’s wishes).

    The Chinese buses are capable of the latter which is a gigantic security vulnerability. You do not want any operating system anywhere to update itself without consent.

    • Alcoholicorn@mander.xyz
      link
      fedilink
      English
      arrow-up
      1
      ·
      18 hours ago

      Does Iveco(41%) or any other manufacturer with a meaningful market share do that?

      • stray@pawb.social
        link
        fedilink
        English
        arrow-up
        3
        ·
        13 hours ago

        https://www.iveco.com/global/Press/PressReleases/2021/IVECO-Over-the-Air-Update-the-smart-timesaving-way-to-update-vehicle-software

        The language used here suggests to me that the user initiates the update, but that’s as far as I can guess.

        • Alcoholicorn@mander.xyz
          link
          fedilink
          English
          arrow-up
          1
          ·
          5 hours ago

          Operators of the chinese bus can pull the SIM card and reinsert it as desired as mentioned in the article, I’m not sure there is a meaningful difference if that is how the Iveco works.

Cybersecurity@sh.itjust.works

cybersecurity@sh.itjust.works

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersecurity@sh.itjust.works

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

  • Be respectful. Everyone should feel welcome here.
  • No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
  • No Ads / Spamming.
  • No pornography.

Community Rules

  • Idk, keep it semi-professional?
  • Nothing illegal. We’re all ethical here.
  • Rules will be added/redefined as necessary.

If you ask someone to hack your “friends” socials you’re just going to get banned so don’t do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 260 users / day
  • 621 users / week
  • 1.39K users / month
  • 3.96K users / 6 months
  • 1 local subscriber
  • 8.58K subscribers
  • 1.43K Posts
  • 1.59K Comments
  • Modlog
  • mods:
  • Kid@sh.itjust.works
  • Lanky_Pomegranate530@midwest.social
  • BE: 0.19.5
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org