Exploiting Volvo/Eicher's fleet platform to gain control over all users/vehicles
VE Commercial Vehicles’ My Eicher platform had a critical vulnerability that let you take over anyone’s account and gain control over their vehicle fleets.
The latest blog posts to take off on Hacker News. 3,699 posts.
VE Commercial Vehicles’ My Eicher platform had a critical vulnerability that let you take over anyone’s account and gain control over their vehicle fleets.
Spies, war, industrial subterfuge and secret recipes. And it all really happened. Honestly, what more could you ask for?
I have a small solar farm and the panels have got visibly dusty. Is cleaning them worthwhile? How much difference does it make? Let's find out.
Abel Jansma is a scientist studying emergence, higher-order interactions, information theory, and complex systems across biology and artificial intelligence.
I think it’s important to be very Canny when someone makes a claim that supports a company’s large valuation.
Let's design the successor to email on top of HTTP, fixing the design flaws SMTP has been dragging along for 40 years. Piece by piece. The goal is…
In 1914 Hamburg built a park for people to use rather than admire, and more than a century later that is still what it is.
An independent, non-commercial educational visualization of PostgreSQL internals. Not affiliated with Electronic Arts.
Forth is uncommonly used to teach programming to kids. Scripting languages like Python and visual environments like Scratch are far more popular options. But when I got the opportunity to introduce middle and high school students to programming, I chose the stack-oriented concatenative language from 1970. I was…
I've long had a soft spot for dependently-typed languages like Coq Rocq and Lean. They offer the possibility of a type system capable of encoding and enforcing arbitrarily subtle invariants. The sort of thing that, in regular languages, ends up (at best) as a comment, and which quickly gets lost as the size of the…
Right now, there are thousands of repositories on GitHub distributing malware. Any of you can find these repositories, and you don’t need any special knowledge to do so. All you have to do is use the standard search function on the GitHub website. These repositories have been around for
With all the July runs in, dynamical models give a ~90% chance of a record-setting event
I think behind a lot of the enthusiasm around AI is a dream of being able to manifest things into reality without having to get into the details.
This chapter is a culmination of many macro techniques we have looked at so far in this book. Using macro abstractions we have developed, we create an implementation of one of my favourite programming languages: forth . Although this implementation embodies most of the important ideas of forth, it is very different…
A collection of Maroš Grego's works.
Compromise is neither good nor bad, it’s something we do every day. It’s decision making. Prioritizing. It’s finding the right balance between two competing ...
Burnout is on the rise again, with an ironic twist.
Plane radar is a neat little project that pulls nearby ADS-B traffic, plots each aircraft by distance and bearing, and shows the details directly on a cute little screen.
a guide to interactive rebasing.
When seeing the title of this post, I bet in some people's minds, the first thought was "Rust devs!". This connection is not unfounded. Rust devs tend to be passionate about memory safety. Some of it, I'm sure, may have been caused by a classic language wars attitude: my language is better than yours, and here is why…
What are we really doing?
I have been a director of engineering for a bit over three years now, and I still hear and read what I call the "old rules" repeated over and over: a director should not spend time coding, good work takes time, protect the team from the business, get consensus before
Open-weight models are becoming the foundation for the next AI ecosystem. The US should compete in it, not wall itself off.
Calibrate your enthusiasm
I've written more shell scripts than I can count, but I still stumble upon tricks that honestly blow my mind far too often than I care to admit. Latest thing that blew my head clean off? The shell colon.
This is a walkthrough of how Fedora turns source code and packages into the artifacts you download and install. It follows the a package from a packager’s git push to a composed release: ISOs, cloud images, container images, and OSTree deployments.
Go 1.26 made Green Tea the default GC. We observe its cache-friendliness with perf, visualize the heap to see how Go allocates, and poke at a sparse-page problem a non-moving collector like Go's struggles with.
Changes proposed for ADB could kill an entire ecosystem of open-source power-user apps, mobile developer setups, and rootless privacy tools based on Shizuku.
tldr: I uncovered Y Combinator was scoring 100k+ founders around the world through Paxel, I broke it (possible easter egg) + found a vulnerability that let anyone forge and push any score to their ranking database, courtesy of an unvalidated hmac