Hola 👋
Soy Daniela y me gusta apoyar a la gente, estás iniciando tu carrera en ciberseguridad y no tienes cómo costear tu primera certificación, estoy regalando esta de aquí @TheSecOpsGroup comenta si quieres participar y dale RT para ayudarme a llegar a esa personita 🙏
Brave has added Email Aliases to its desktop browser.
The feature lets you create unique email addresses when signing up for websites and online services so you don’t have to give them your personal email address.
>Emails sent to an alias are automatically forwarded to your main inbox.
>If an alias starts getting spam or unwanted messages, you can disable it without affecting your real email address.
someone just plugged a cable into a Tesla charger and turned it into a computer virus.
@ScepticCtf compromised a Tesla Universal Wall Connector through the charging cable itself.
the chain:
→ compromise the Tesla Wall Connector through the charging cable itself (SWCAN protocol on the Control Pilot line, the wire that's supposed to just talk power levels)
→ the charger then hacks the car's infotainment system over wifi. on its own
→ the car parks near chargers from other brands
→ the infotainment system hacks an Autel MaxiCharger and a ChargePoint Home Flex over bluetooth. also on its own
one plug-in. four vendors. zero clicks after the first move.
but the exploit isn't the interesting part.
the wall connector firmware is bare metal ARM, binary only, no source, no symbols.
testing it live on the device gets you one attempt every few seconds and a single bit of feedback: did it crash.
they built an emulator to run the firmware off the actual hardware. same testing, 1000x faster. that's the difference between "this chip is unfuzzable" and finding a critical bug in hours.
the bug: a signed integer read from the firmware header turns into a memory write past where it should stop, during the exact step meant to verify the firmware is legit. it had been sitting there through however many people read that code.
slides in the reply.
this might be my favorite Black Hat talk this year.