Difference is that now you develop the hack once and you can just steal all the cars from the brand without it being obvious that you’re doing anything wrong. Picking a lock is work you have to do for every vehicle, plus it looks pretty sketchy.
Also, you got in completely legitimately as far as the car knows, so no need to worry about alarms or anything like it.
Many cars use loose tolerance wafer locks[1] which are vulnerable to "raking". Picking a lock involves setting each tumbler individually by feel, and requires significant skill. Raking, on the other hand, is basically just rapidly jiggling a bumpy stick in the lock until all the tumblers bounce around enough to get caught on the edge of the cylinder and the lock opens. It's fairly low-skill, and can be quick enough that it looks almost like using a key[2]. (picking for comparison [3])
Lots of pin tumbler locks like you would find in a door on a house are also vulnerable to raking. It's easy to mitgate; you just use some bumpy pins (security pins) that are more likely to get caught in way that won't let the lock open than will, but lock manufacturers just … don't.
At the end of the day, with both writeups combined, we could send remote commands such as unlocking and turning the engines on, for any of the automaker's vehicles in Australia, the United States, and Canada.
In modern vehicles with remote start, "starting the engine" leaves the immobilizer engaged.
If you have a car with factory remote start, try this yourself -- try remote starting the car, then getting in without the keys and driving away. You can't.
> At the end of the day, with both writeups combined, we could send remote commands such as unlocking and turning the engines on, for any of the automaker's vehicles in Australia, the United States, and Canada.
> OTOH I heard that the culprits didn't steal the private keys of the affected customers. If this is true the stolen cryptocoins are worthless.
You’re misunderstanding where these coins were taken from/are now. Of course they did not get access to customer private keys, because in an exchange there isn’t really such a thing. You’re trusting the exchange to hold the coins for you, and they get put into a shared wallet that they manage with the exchange’s key.
Even if they did not have access to the exchange’s private keys and only got access to some API that let them execute the transfers, it doesn’t matter anyway, as the attackers transferred the coins into new addresses with keys controlled by them, so they’re free to move them now.
…well, mostly, the stolen USDC and USDT coins got frozen by the issuers, but those are not really decentralized as much as they are built on top of decentralized infrastructure.
One thing I never see mentioned, probably because it’s not very common, is that on some languages the Mac has a completely different position for symbol keys! This makes using a Mac keyboard on Windows (or vice-versa) extremely annoying (Linux tends to support the Mac layout as well so it’s fine).
For instance, in Portuguese, the Mac keyboard [1] has the
+ key two keys to the right of 0, and you use shift to input *. Meanwhile, on Windows [2], this key is one row below next to P, with the place it is on Mac occupied by «/». Most of the AltGr keys are also in different spots (particularly { and }), which makes this a major pain if you consistently switch between Windows and Mac.
Frankly I prefer the Mac layout, in part due to the Cmd/Ctrl split, but also because I believe it assigns more meaningful symbols to keys (I have literally never used «/», the internet will tell you that’s how quotations are done in Portuguese but everyone, books included, uses “/”).
I never saw any explanation as to why these differ. Does anyone know of any other languages where this happens? It doesn’t seem to be very common!
Another difference I remembered, this time a Microsoft-only idiocy: core Windows and Microsoft (Office) apps TRANSLATE shortcuts! Ctrl+A (“All”) becomes Ctrl+T (“Tudo”) in Notepad if the computer is in Portuguese. Ctrl+S also stops saving and is replaced by Ctrl+G (“Guardar”).
I can see why Microsoft thought this was a good idea, but the problem is that ONLY Microsoft apps do this, so you have two sets of shortcuts to remember. I don’t know a single person who likes this.
French AZERTY on Windows and on Mac have quite some differences in symbol locations, also drives me crazy when switching to my mechanical keyboard.
In AZERTY, the number row works differently. Unshifted gives symbols and commonly-used accented letters like "é" and "à", hold Shift to get a number.
In Windows keyboard, the unshifted "number 8" key corresponds to a "_" while it's a "!" in Mac. The key below Esc on Windows is literally just the superscript 2 for some reason, on Mac it's "@" unshifted, "#" shifted. We also have a key for "μ" and for "§" in Windows.
French AZERTY on Mac doesn't make sense. It doesn't fully map the locations for common shortcuts. Example: cmd + ` on a lot of systems switches windows inside an app (very useful with macOS where cmd + tab circles through apps, not windows). But on the French version, the ` key is somewhere on the right of the 'm' and the shortcut is not replaced with whatever key is above tab.
I haven’t seen anyone mention this yet, but… other than the Duo, the iPhones have been the same size since the iPhone X? Obviously not counting the Max/Plus/Mini lines, but the standard ones have had 6”-ish screens for almost a decade now (and the screen itself has increased in size, but that’s because they decreased the bezels), so they’ve hardly made a new phone that is larger than the one before since then.
Personally, I quite like the size of the standard iPhones, fits in my pocket, can use it one handed well enough, and the display is big enough to comfortably view content. I have quite small hands though and I can see how someone bigger than me would like the size of the Pro Max line.
Also this size clearly works, because basically all phones now are this exact same size give or take a few mm.
I’ve found that those sites tend to charge insane amounts for shipping (20€+ to Portugal at least) which considering the price of the parts in question generally makes it not worth it unfortunately. Maybe it’s better now, I haven’t tried in a few years.
In Portugal at least, all (I think? At least all the major ones like Benfica, Sporting and Porto) of the clubs are sports associations and are controlled by the club members. This does not mean that there isn’t major money in this, but a club president can get removed by fans, which happened with Porto recently (due to corruption… the club almost went bankrupt).
These clubs are often very old as well, and often were small regional clubs that got big, so they are significant in their cities and do a ton more than just football.
I've used it on trains a bit and it does turn off when the train is going straight ahead. You might be going 200km/h, but if the speed isn't changing and you're always going forward you don't really feel any force, and neither does the phone, so the dots don't need to be there any more.
A lot of banks won’t even give you the option of a non-instant transfer now, at least here in Portugal. Though non-instant transfers can in theory be recalled since there is some time before the money gets to the destination account, my bank even gives a warning now when doing a transfer to ensure I have the details right because they can not recall a transaction after the money arrives.
Also, you got in completely legitimately as far as the car knows, so no need to worry about alarms or anything like it.
reply