Post AmZX51WhXRVFHi5bVo by selea@social.linux.pizza
(DIR) More posts by selea@social.linux.pizza
(DIR) Post #AmZSpc8FGxLWMg2ya8 by selea@social.linux.pizza
2024-10-01T18:41:32Z
0 likes, 0 repeats
So what did I find in my EV-charger wifi-card?Basically, it is a raspberry pi.The SD-card contains goodies, like a private ssh-key that apparently gave me access to their jumphost (no restrictions in their shell either).The NTP was also not configured, it also contained the entire bash-history, including all the "failed commands" and apparently a password to something.I guess I'll spend some time on the phone tomorrow#linux #infosec #bored
(DIR) Post #AmZU704XcGwvUWAW9Y by martin@social.linux.pizza
2024-10-01T18:55:52Z
0 likes, 0 repeats
@selea OMG... 😅
(DIR) Post #AmZUVG4XmQbO43jkxs by momo@social.linux.pizza
2024-10-01T19:00:16Z
0 likes, 0 repeats
@seleaYou know, that reminds me of this foone story thread here: https://digipres.club/@foone/112990331505043510At least yours is an EV-charger and not a (checks notes) health care cloud service appliance with git repo keys and... I should not spoiler any further.
(DIR) Post #AmZUlJYObUgzUmM98S by selea@social.linux.pizza
2024-10-01T19:03:09Z
0 likes, 0 repeats
@momo oh god T_TAnd with the "AI" label on it too,,,
(DIR) Post #AmZV6E8hvfnamhJRfE by joacim@mastodon.melin.org
2024-10-01T19:06:56Z
0 likes, 0 repeats
@selea wtf?!
(DIR) Post #AmZVCFsgMpCjvIgvbs by joakimfors@mastodon.green
2024-10-01T19:08:03Z
0 likes, 0 repeats
@selea YOLO-engineering
(DIR) Post #AmZVZ49E9mc4C5J6i8 by selea@social.linux.pizza
2024-10-01T19:12:09Z
0 likes, 0 repeats
I am not an expert by any means, but it I can exploit it - imagine if someone smart found out.
(DIR) Post #AmZVbewMKmz0snWbVQ by momo@social.linux.pizza
2024-10-01T19:12:39Z
0 likes, 0 repeats
@seleaOf course! Because fucking up shit very fast is the startup way.
(DIR) Post #AmZVzCDql4t0lXvfpQ by Ryanteck@fosstodon.org
2024-10-01T19:16:52Z
0 likes, 0 repeats
@selea Wallbox / EO Mini or another one?
(DIR) Post #AmZX51WhXRVFHi5bVo by selea@social.linux.pizza
2024-10-01T19:29:09Z
0 likes, 0 repeats
@Ryanteck Another one :)
(DIR) Post #AmZXAJVe6bYCVQ7OPA by Ryanteck@fosstodon.org
2024-10-01T19:30:06Z
0 likes, 0 repeats
@selea Interesting, definitely not the first as one of those pretty much did the same thing.
(DIR) Post #AmZeytjGPo3wztYUme by sldrant@mastodon.social
2024-10-01T20:57:39Z
0 likes, 0 repeats
@selea oh wow. That's really... Special
(DIR) Post #AmZiDAfiWEBpSeOUfQ by dtelder@mastodon.nu
2024-10-01T21:33:51Z
0 likes, 0 repeats
@selea G... ?
(DIR) Post #AmZk0iFcYqgJkTNJAm by StampedingLonghorn@social.linux.pizza
2024-10-01T21:54:01Z
0 likes, 0 repeats
@selea Car tech is so insecure. I only want a radio in mine. A/C is nice but not necessary in Pennsylvania. Why does everything have to be full of tech that raises the price so high?
(DIR) Post #AmZvVvDlUILwRnahuq by LexPendragon@QuarteredCircle.net
2024-10-02T00:02:53Z
0 likes, 0 repeats
@selea This is fascinating, what type of charger? Now I want to go mess with mine.
(DIR) Post #Ama01z8UrnWXfmfgQq by blackknight95857669@social.linux.pizza
2024-10-02T00:53:33Z
0 likes, 0 repeats
@seleaI'm willing to bet you can remove the "if" from that sentence.
(DIR) Post #AmaoDFVXKiZNLH0qIa by darander@mastodon.social
2024-10-02T10:15:49Z
0 likes, 0 repeats
@selea Interesting, which charging station is it?
(DIR) Post #Amat749X8YaK9uakjY by selea@social.linux.pizza
2024-10-02T11:10:43Z
0 likes, 0 repeats
@darander I wont disclose yet, sadly
(DIR) Post #AmatDSzJiHIqvBrhQW by darander@mastodon.social
2024-10-02T11:11:54Z
0 likes, 0 repeats
@selea Fully understand. I hope you’ll disclose it once the manufacturer has had time to fix it, though.
(DIR) Post #AmaxKCDCsrL0jepIC8 by qwazix@bananachips.club
2024-10-02T11:57:47Z
0 likes, 0 repeats
@selea I'm not a security researcher, I'm not even an embedded engineer, I'm just a dude that was refreshing the page to order a raspberry pi one evening in 2012. The fact that it seems trivial to me to exploit such stuff scares me. (Both this, and the one in foone's thread)I've studied civil engineering and I assure you I cannot bring down a bridge, any bridge, regardless of how shoddily it was built, without significant amounts of explosives.
(DIR) Post #AmbIWABYLJgcxibHvs by selea@social.linux.pizza
2024-10-02T15:55:23Z
0 likes, 0 repeats
@dtelder 🫢