On 7/25/15, Georgi Guninski wrote:

... Thanks. The link appears to contradict wired's claim of "wireless exploit",

incorrect. it was wireless, and not only that, it was remote incoming over Sprint infrastructure.

possibly because they are covering their corporate asses.

so much ass covering right now!

Fiat Chrysler said exploiting the flaw "required unique and extensive technical knowledge,

ahahahah

prolonged physical access to a subject vehicle and

lololololol

extended periods of time to write code" and added manipulating its software "constitutes criminal action".

motherfuckers, did you learn nothing? this is how not to respond to severe, critical, architectural defects in critical systems. guess auto industry gonna play it ugly. (too bad, we all lose!) best regards,

On Sat, Jul 25, 2015 at 03:58:48AM -0700, coderman wrote:

On 7/25/15, coderman wrote:

...

...

two points of clarification:

1. there is assumption that information is silo'ed, also cannot be shared. not!

2. the difficulty regarding SprintPCS is that their lease space spans class A's. see https://peertech.org/files/cidr-privacy-space-cell-data-2009.txt for a unique set sample across five devices for a month in a particular configuration at a single tower. for example.

this is why the mandatory Sprint block was actually an unconventional but exceptionally effective mitigation for this path to remote control.

best regards,

Do you mean for additional ownage one needs network sploits? Is Sprint's network equipment up to date and safe? (Having in mind Cisco/BGP and the like we doubt it)

On Sat, Jul 25, 2015 at 03:52:17AM -0700, coderman wrote:

...

extended periods of time to write code" and added manipulating its software "constitutes criminal action".

motherfuckers, did you learn nothing?

no, like every industry first hit by our train.

this is how not to respond to severe, critical, architectural defects in critical systems.

guess auto industry gonna play it ugly.

there was already this news item: "Fiat Chrysler Recalls 1.4 million Cars After Software Bug is Revealed" this is not very sustainable i guess. my bet for their next step is fixing this OTA. m( -- otr fp: https://www.ctrlc.hu/~stef/otr.txt