C'mon, Wired. Hacker?
He logged into the web interface from home using a password.
The better headline would have been "Poor Security Allows Disgruntled Employee to Disable Over 100 Cars Remotely."
He logged into the web interface from home using a password.
The better headline would have been "Poor Security Allows Disgruntled Employee to Disable Over 100 Cars Remotely."
That was Mitnick's MO and most have long since ceded him the epithet "hacker".
That said: > "Omar was pretty good with computers" If he really was, he'd have used Tor and they'd have never known it was him.
Well... I haven't ;-)
It would be interesting to see how exactly he got the password, but I guess that is "part of an ongoing investigation."
When I was doing penetration tests a decade ago, some of my best client engagements required little technical skill to gain access to some of the most prized data on the network (HR, Payroll, access to update the website). You'd be surprised how far you can get in many organizations without exploiting a single software or technology weakness.
When access to other people's stuff is controlled by a given account, unless that there is good protections on every level, you're in trouble, you have poor security.