Connect with us

Tech News

Hackers conquer Tesla’s in-car web browser and win a Model 3 – TechCrunch

Published

on

A pair of security researchers dominated Pwn2Own, the annual high-profile hacking contest, taking home $375,000 in prizes including a Tesla Model 3 — their reward for successfully exposing a vulnerability in the electric vehicle’s infotainment system.

Tesla handed over its new Model 3 sedan to Pwn2Own this year, the first time a car has been included in the competition. Pwn2Own is in its 12th year and run by Trend Micro’s Zero Day Initiative. ZDI has awarded more than $4 million over the lifetime of the program.

The pair of hackers Richard Zhu and Amat Cam, known as team Fluoroacetate, “thrilled the assembled crowd” as they entered the vehicle, according to ZDI, which noted that after a few minutes of setup, they successfully demonstrated their research on the Model 3 internet browser.

The pair used a JIT bug in the renderer to display their message — and won the prize, which included the car itself. In the most simple terms, a JIT, or just-in-time bug, bypasses memory randomization data that normally would keep secrets protected.

Tesla told TechCrunch it will release a software update to fix the vulnerability discovered by the hackers.

“We entered Model 3 into the world-renowned Pwn2Own competition in order to engage with the most talented members of the security research community, with the goal of soliciting this exact type of feedback. During the competition, researchers demonstrated a vulnerability against the in-car web browser,” Tesla said in an emailed statement. “There are several layers of security within our cars which worked as designed and successfully contained the demonstration to just the browser, while protecting all other vehicle functionality. In the coming days, we will release a software update that addresses this research. We understand that this demonstration took an extraordinary amount of effort and skill, and we thank these researchers for their work to help us continue to ensure our cars are the most secure on the road today.”

Pwn2Own’s spring vulnerability research competition, Pwn2Own Vancouver, was held March 20 to 22 and  featured five categories, including web browsers, virtualization software, enterprise applications, server-side software and the new automotive category.

Pwn2Own awarded a total of $545,000 for 19 unique bugs in Apple Safari, Microsoft Edge and Windows, VMware Workstation, Mozilla Firefox, and Tesla.

Tesla has had a public relationship with the hacker community since 2014 when the company launched its first bug bounty program. And it’s grown and evolved ever since.

Last year, the company increased the maximum reward payment from $10,000 to $15,000 and added its energy products as well. Today, Tesla’s vehicles and all directly hosted servers, services and applications are now in scope in its bounty program



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published.

Tech News

The Real Reason Betamax Lost The Format Wars

Published

on

JVC officially announced the VHS-format VCR in 1976 and with two formats on the market, both sides dug in (via Sony). Mitsubishi Electric, Matsushita, Hitachi, Sharp, and Akai Electric went with JVC’s VHS format, while Toshiba, Sanyo Electric, NEC, Aiwa, and Pioneer sided with Sony’s Beta format. Sony visited Matsushita’s Osaka headquarters at the end of 1976 to try and persuade them to adopt Betamax. Sony placed one of its players next to a JVC player with both lids off, and Matsushita went with JVC’s player because they had fewer components and could be made for less money.

It wasn’t just the recording media themselves that were better; Sony’s videotape players and recorders were better because they manufactured most of them themselves. And if Sony didn’t build them, it was done by manufacturers they closely monitored, so quality was never an issue. But according to Grunge, JVC wanted to do things differently and licensed its VHS technology to any manufacturer that wanted to make its VCRs. Sony wouldn’t allow its players to be made without direct oversight. This decision ultimately helped lead to the demise of the Beta format as it fostered competition between the various companies making the VHS players and, in turn, eventually drove the prices down to a level far more affordable choice than Sony’s high-priced machines.

Continue Reading

Tech News

How To Fix Your OnePlus When It’s Charging Slowly

Published

on

First, examine your phone’s USB port under a bright light from different angles. Unless you scrub the port every few months, you’ll find dirt and grime lodged into its crevices. Moisture can also harden the build-up, making it difficult to scrape off. But with the right tools and a bit of elbow grease, you can wipe all the dust and debris from your OnePlus charging port.

You’ll need a flashlight or lamp, a toothpick or a cotton bud, and a compressed air duster or bulb syringe. Experts recommend using wooden toothpicks or cotton swabs because they’re non-conductive and don’t interfere with the circuitry. Sharp metal implements like thumbtacks and safety pins can scratch and damage the fragile USB port (via Asurion). Also, avoid blowing air on the phone because your breath contains moisture, making the cleaning even trickier.

To get started, turn off your OnePlus. And use the compressed air duster or bulb syringe to clear out any loose dust and dirt. Next, gently and carefully scrape the build-up with the toothpick or cotton bud. Use a flashlight or lamp to reach the tight corners. You can also tilt the phone or give it slight taps to clear out the scrapings. Finish off with a few more bursts of compressed air. Turn your phone on and test if the slow charging is fixed.

Continue Reading

Tech News

The 10 Best Aftermarket Parts For Your Ford Bronco

Published

on

For those unfamiliar with the tools of the great outdoors, a winch is a device that employs a spool, a length of cable, usually steel braided, and a hook of some kind to aid in several tasks. The most common use of a winch on a 4X4 is to help it get out of a stuck situation. Should your Bronco get mired in mud or fail to overcome a big rock, letting out the winch cable and hooking it onto something solid, like a stout tree, enables the winch to pull it to freedom.

Winches come with various levels of power and cable types and can be installed in various locations. For the purposes of an offroad Bronco, the front bumper is ideal. Not only can it get itself out of a sticky situation, but you can also help a friend by pulling them to safety. Winches can also be set to task as tools. In an emergency, for example, a winch can help to remove a fallen limb somewhere or to drag a heavy object from a body of water.

The Drive notes that winches can be electric, which is handy as the Bronco comes with auxiliary switches for accessories, or hydraulic, running off a power steering pump. Cost ranges from around $350 to $900 and some of the most popular brands are Warn and Superwinch.

Continue Reading

Trending