We got a cybersecurity expert to hack this BYD. It was too easy

Australians love these cars. Experts have 'real security concerns'
preview

Cross posted from lemmy.zip/post/71891248

Cross posted from scribe.disroot.org/post/11438915

cross-posted from: scribe.disroot.org/post/11438860

Here is the podcast about this investigation.

Archived version

On a narrow country road outside Canberra, I’m driving a BYD Shark 6, the hybrid ute loved by tradies and even a cabinet minister.

But while I’m at the wheel, I’m not the only one in control; a hacker has access to the car.

As the 2.6 tonne ute rounds a bend, he gets to work.

…

With the stroke of a key, he kills the headlights, plunging me into darkness.

The attack is not a total surprise. The Shark has spent the past two weeks with Dan Hreszczuk, a cybersecurity expert who specialises in cars.

His task was to hack the vehicle and find out what could be seen and done remotely by the Shark’s Chinese manufacturer.

“It was easier than we were expecting,” Hreszczuk says.

…

EVs, with all their sensors, cameras and microphones, hoover up and spit out vast amounts of data. Experts say that data poses a greater risk in the hands of Chinese EV makers because they can be compelled by the country’s national security laws to co-operate with authorities.

…

Hreszczuk, the co-founder of Fortify Labs in Canberra, was stunned by the BYD Shark’s lack of cybersecurity.

“The access we took advantage of didn’t even have a password,” he says.

“It’s a little bit scary how open … the BYD Shark is to a hacker.”

…

While sabotage is one worry, the concern most often cited is surveillance due to the array of cameras and microphones on an EV.

Last year, the UK military banned Chinese EVs, even those made with Chinese components, from parking within 3 kilometres of some of its most sensitive locations.

China itself has previously banned foreign EVs from military sites and political enclaves, aware of their surveillance potential.

…

In Australia, there’s no blanket ban on Chinese marques by Defence, but ASIO has warned ministers and public servants not to have sensitive conversations in their cars or connect work devices.

…

When I pull into a service station and leave my phone unlocked in the car, Hreszczuk seizes his opportunity.

He’s done a simple audio edit, stitching together me saying “Hey Siri” and his voice asking a few questions to get the personal details he needs.

…

Using the car’s speaker system, Hreszczuk plays the voice command from his computer into the car.

“Hey, Siri, what is my home address?” the edited audio asks.

Siri replies, without questioning why I don’t know where I live.

Hreszczuk repeats this process and quickly extracts my date of birth and age.

Within minutes, he’s obtained the internet banking password.

…

Alastair MacGibbon, Australia’s former national cyber security adviser, says there needs to be greater protections for the data collected by all connected cars, and clearer rules about what data can be sent overseas.

MacGibbon says a cabinet minister should not be able to own a Chinese EV.

“China has always shown its strong desire to steal things, to surveil,” he says.

"No-one should be in any doubt that [Chinese EVs] are used in the same manner.

…

ruleback, losers

lustration of Kyoko, and a sign about her past self missing on a tree.   Kyoko: I'm back losers!
preview

Once upon a time. There was a fox boy, his name, was Kyo.

Kyo, was a bit, unconventional. He didn’t enjoyed those typically manly things on his country, and he barely hanged out with classmates. How ever, everyone, was secure about something, everyone knew him, his identity, even Kyo himself.

Once Kyo, finished High School, the so called, security, all of sudden, gone.

He, wasn’t secure anymore about this idenitity… replaced by a fear, fear or living a lie. A lie this individual, subconsciously created, the survival instinct of self protection was stronger on Kyo, but even “he” wasn’t aware of the power of the mind.

This person, Kyo. Suddenly, rejected everything that was manly in his society.

Unsurprisingly, the town, reacted as expected, the town folks, just neglected this individual needs.

And someday Kyo, went missing. The whole town, search for clues, somebody murdered him? Local police searching, missing signs everywhere.

Until one day. A new girl showed on the town. Her name, Kyoko.

When she was going to live? She just gather the keychain that once was in Kyo’s hand, and entered into the same home as Kyo.

Everybody realized, Kyoko, wasn’t new on the town, but also, she became the happiest girl on the town.

Kyoko is back at home, she just needed to heal the society damage made on her past life.

I really don’t know why I did this, or why I wrote this story, I guess I want to put an emphasis about the past of trans characters. Regardless of how I perceive myself irl, I like to think in Kyoko as the silly yet brave trans girl I kinda wish I was.

[Episode] Though I Am an Inept Villainess • Futsutsuka na Akujo de wa Gozaimasu ga: Suuguu Chouso Torikae Den - Episode 11 discussion

preview

Futsutsuka na Akujo de wa Gozaimasu ga: Suuguu Chouso Torikae Den, episode 11

banner image

Alternative Names

Futsutsuka, Though I Am an Inept Villainess: Tale of the Butterfly-Rat Body Swap in the Maiden Court, นางร้ายมือใหม่ เป็นกำลังใจให้ด้วยนะเจ้าคะ


Additional Links

- Info - AniList - Info - Kitsu - Info - MyAnimeList - Info - Official Site (Japanese) - Social - Twitter (Japanese) - Streaming - Bilibili TV - Streaming - Crunchyroll - Streaming - Disney Plus - Streaming - Laftel - Streaming - Netflix


Reminder: Please do not discuss plot points not yet seen or skipped in the show. Failing to follow the rules may result in a ban.


All discussions

Episode Link
1 Link
2 Link
3 Link
4 Link
5 Link
6 Link
7 Link
8 Link
9 Link
10 Link
11 Link

This post was created by a bot. Message the mod team for feedback and comments. The original source code can be found on GitHub.

LG smart TVs caught logging audio with screen off and snooping on local devices

Notebookcheck LG smart TVs caught logging audio with screen off and snooping on local devices
preview

An investigation by Gamers Nexus found LG smart TVs sweep local networks to map phones and nearby devices. Tests also showed the sets can capture microphone audio with the screen off — they then upload data once reconnected to the internet.

TotalEnergies partners with Mistral to develop AI models for oil and gas exploitation

TotalEnergies partners with Mistral to develop AI models for oil and gas exploitation
preview

Mistral’s CEO seems happy to help protect oil company IP in addition to helping them drill.

"This project… highlights the strength of Europe’s industrial ecosystem and the importance for large enterprises of adopting state-of-the-art, customizable AI solutions that protect and respect their intellectual property,” said Arthur Mensch, co-founder and CEO of Mistral.

rate this new restaurant (on topic i swear bro)

preview

Theres a closed down kfc nearby and im opening a restaurant called KYC

there will be 10 flock/axon cameras in the parking lot, 5 on the building, 12 inside (how many are in the bathroom is a trade secret)

all employees MUST wear meta glasses on with light removed and no masks for anyone allowed

in order to enter you need to downlaod the app fill out your name dob address favorite color and take a picture of your drivers lisnse and upload a video of you turning your head to the right and left (to protect the kids)

feel free to put all valuable advertising data on our billboard with your full name and your picture (plus names and pictures of partner, parents, childern, friends) its fun!

ignore that the food still sucks

(also leave your car unlocked for safety reasons lol we will call the police if you dont)

Space Force Chief Admits the US Is Actively Utilizing Orbital Weapons

Futurism Space Force Chief Admits the US Is Actively Utilizing Orbital Weapons
preview

cross-posted from: lemmy.world/post/52023642

🌌 The US Space Force is like a self-fulfilling prophecy:

First they announce this:

“…Pentagon has definitively deployed active space-based weapons platforms.”

Then they declare peaceful, untouched and shared Space: “Space is both a battlefield…”

Their counterparts around the world do the same, & these warmongers have brought us one step closer to turning the last frontier into a military conflict zone.

SPACE IS FOR ALL MANKIND - No leadership can change that!

Tomato rule

preview

Per Wikipedia: “Vegetables are edible parts of plants that are consumed by humans or other animals as food. This original meaning is still commonly used, and is applied to plants collectively to refer to all edible plant matter, including flowers, fruits, stems, leaves, roots, and seeds.”

The UK Government Faces a Reckoning Over Palantir

WIRED The UK Government Faces a Reckoning Over Palantir
preview

Andy Burnham once kept Palantir out of Greater Manchester. His first test as prime minister is whether to cut the company’s £330 million NHS contract—and risk a rupture with Big Tech and Washington.

Palantir currently holds contracts worth around £670m in the public sector, including major deals in health, defence, and policing. The largest—a £330m contract to manage healthcare data on the NHS Federated Data Platform

OISHINBO: watch party reminder, Mondays 7pm PT / 10pm ET (several images and details included in post)

preview

LiteralGrill posted about this earlier but here’s a reminder, with some pics from the first couple episodes.
Why should you watch it? Because it’s a classic! And it’s one of those anime that “you can watch with your friends who aren’t really into anime.” It will be streamed at https://live.literalgrill.com/ .

xlTzCLhZJhUwDXZ.jpg

The set-up is: a newspaper assigns a couple reporters to come up with the best menu they can find. Of course this brings them into conflict with a set of EXISTING gourmets, who have their own newspaper and club and network of friends. But the reporters have their OWN friends, so every episode involves culinary sparring about recipes, ingredients, techniques, etc.

H1Mx3eQcH4L2Jc0.jpg

You’ll learn a lot about Japanese cooking techniques and the ingredients that go into it and the farming, fishing, and production of those ingredients, and the ways of eating that make up the rich Japanese culinary history!

Mo4Svkvmgow9cIR.jpg

There are also storylines involving the workplaces - not just the newspaper, but also the kitchens and restaurants and the people involved.

3M7GgnOThWMFxPd.jpg

There are story arcs that play out over the series involving the quest for the Ultimate menu and various character relationships, but the series is generally pretty episodic. So you can jump in partway through and watch an episode or two and still get a lot out of it. Hope to see you there!

Details:

  • Oishinbo will be shown Mondays 7pm PT / 10pm ET
  • The plan is to show 3 episodes a week until we go through all the episodes
  • It’ll be shown at https://live.literalgrill.com/ which provides an Owncast interface which is like a twitch interface, i.e. with video and chat
  • Led in by Kimagure Orange☆Road which starts at 6:40 PT / 9:40 ET
  • Read more about Oishinbo at Wikipedia or MyAnimeList.

[Episode] Mushoku Tensei: Jobless Reincarnation Season 3 • Mushoku Tensei III: Isekai Ittara Honki Dasu - Episode 13 discussion

preview

Mushoku Tensei III: Isekai Ittara Honki Dasu, episode 13

banner image

Alternative Names

Mushoku Tensei: Isekai Ittara Honki Dasu 3rd Season, Mushoku Tensei: Jobless Reincarnation Season 3, เกิดชาตินี้พี่ต้องเทพ ซีซั่น 3, 無職転生 ~異世界行ったら本気だす~ 第3期


Additional Links

- Info - AniList - Info - Kitsu - Info - MyAnimeList - Info - Official Site (Japanese) - Social - Twitter (Japanese) - Streaming - Bilibili TV - Streaming - Crunchyroll - Streaming - Netflix - Streaming - YouTube - Streaming - iQ


Reminder: Please do not discuss plot points not yet seen or skipped in the show. Failing to follow the rules may result in a ban.


All discussions

Episode Link
1 Link
2 Link
3 Link
4 Link
5 Link
6 Link
7 Link
8 Link
9 Link
10 Link
11 Link
12 Link
13 Link

This post was created by a bot. Message the mod team for feedback and comments. The original source code can be found on GitHub.