Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them

91
14
Favorite

Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them

Bloomberg2022-01-25

The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Report

Comment（14）

StayHome
·2022-02-05
He can work as a intern in Tesla or maybe Tesla can give him some kinda rewards ....
Reply
1
Report
Troytan
·2022-01-25
What if hacker takes control of the car remotely?Dangerous
Reply
1
Report
Skygeemusic
·2022-01-25
Hahaha
Reply
3
Report
LIM97
·2022-01-25
Like
Reply
4
Report
KDL
·2022-01-25
Amazing that he didn't exploit further. Gain respect for him and hope Tesla would reward him.
Reply
2
Report
amosgsk
·2022-01-25
👍
Reply
3
Report
carroll
·2022-01-25
hallo
Reply
1
Report
Kiwii
·2022-01-25
good stock
Reply
3
Report
Wuqian98
·2022-01-25
The hero we never knew we needed
Reply
2
Report
jingsheng
·2022-01-25
whoah
Reply
3
Report
cmg76
·2022-01-25
Yes
Reply
3
Report
MayTan
·2022-01-25
Interesting
Reply
6
Report
Annie_ann29
·2022-01-25
Like plz
Reply
3
Report
klostany
·2022-01-25
Woah
Reply
5
Report

Most Discussed

7x24

All

Terms and Conditions·Privacy Policy

Company: TTMF Limited. Tech supported by Xiangshang Yixin.

Email：uservice@ttm.financial

{"i18n":{"language":"en_US"},"data":{"share":"https://ttm.financial/m/news/2206157889?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2022-01-25 10:51","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2206157889","market":"us","top_or_hot":-1,"title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","media":"Bloomberg","content":"<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Source Link</a>\n\n</div>\n","source":"lsy1584095487587","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BK4533","symbol_name":"AQR资本管理(全球第二大对冲基金)","start_time":0,"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","article_id":"2206157889","we_media_id":null,"thumbnails":[],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","pubTimestamp":1643079102,"sourceInfo":{"source_id":"lsy1584095487587","name":"Bloomberg"},"weMediaInfo":null,"summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","collect":0,"end_time":0,"defaultTopTitle":"bloomberg.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"BK4533":"AQR资本管理(全球第二大对冲基金)","BK4527":"明星科技股","TWTR":"Twitter","BK4550":"红杉资本持仓","BK4099":"汽车制造商","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","TSLA":"特斯拉","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"translate_title":"青少年特斯拉黑客访问车主的电子邮件地址以警告他们","themeId":"","isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"TSLA":1,"TWTR":0.6},"content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","kind":null,"is_publish_news":true,"is_publish_highlight":true,"is_publish_live":null,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[{"id":9098838569,"gmtCreate":1644075347802,"gmtModify":1676533888140,"author":{"id":"3586303845668227","authorId":"3586303845668227","name":"StayHome","avatar":"https://static.tigerbbs.com/a2090cc80fca211990d8fc4e216f75b7","vip":1,"hat":"https://static.tigerbbs.com/b073a07f77dbe6b3bec6b12311fde6bd","crmLevel":2,"crmLevelSwitch":0},"htmlText":"He can work as a intern in Tesla or maybe Tesla can give him some kinda rewards ....","listText":"He can work as a intern in Tesla or maybe Tesla can give him some kinda rewards ....","text":"He can work as a intern in Tesla or maybe Tesla can give him some kinda rewards ....","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":1,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9098838569","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090375662,"gmtCreate":1643102322875,"gmtModify":1676533774155,"author":{"id":"3571482048865852","authorId":"3571482048865852","name":"Troytan","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":4,"crmLevelSwitch":0},"htmlText":"What if hacker takes control of the car remotely?Dangerous","listText":"What if hacker takes control of the car remotely?Dangerous","text":"What if hacker takes control of the car remotely?Dangerous","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":1,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090375662","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090327352,"gmtCreate":1643090935805,"gmtModify":1676533773321,"author":{"id":"3581586064432892","authorId":"3581586064432892","name":"Skygeemusic","avatar":"https://static.tigerbbs.com/3f99d0ab8a8308e7405bd556cee37483","vip":1,"crmLevel":2,"crmLevelSwitch":0},"htmlText":"Hahaha&nbsp;","listText":"Hahaha&nbsp;","text":"Hahaha","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090327352","repostId":2206157889,"repostType":2,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090363067,"gmtCreate":1643085060494,"gmtModify":1676533772843,"author":{"id":"3581419265926610","authorId":"3581419265926610","name":"LIM97","avatar":"https://static.tigerbbs.com/6e8b924a13e75ddd5dcb294949bced1f","vip":1,"hat":"https://static.tigerbbs.com/4c5ceab71416b120bab4604c0754b52a","crmLevel":2,"crmLevelSwitch":0},"htmlText":"Like","listText":"Like","text":"Like","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090363067","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090360416,"gmtCreate":1643084819984,"gmtModify":1676533772812,"author":{"id":"3555537259700212","authorId":"3555537259700212","name":"KDL","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":4,"crmLevelSwitch":0},"htmlText":"Amazing that he didn't exploit further. Gain respect for him and hope Tesla would reward him.","listText":"Amazing that he didn't exploit further. Gain respect for him and hope Tesla would reward him.","text":"Amazing that he didn't exploit further. Gain respect for him and hope Tesla would reward him.","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090360416","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090387183,"gmtCreate":1643084448224,"gmtModify":1676533772780,"author":{"id":"3584773678023009","authorId":"3584773678023009","name":"amosgsk","avatar":"https://static.tigerbbs.com/cb697cbb195408faec9dcf685dd31e35","vip":1,"crmLevel":1,"crmLevelSwitch":0},"htmlText":"👍","listText":"👍","text":"👍","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090387183","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090385441,"gmtCreate":1643084241139,"gmtModify":1676533772756,"author":{"id":"3581250367192554","authorId":"3581250367192554","name":"carroll","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":1,"crmLevelSwitch":0},"htmlText":"hallo","listText":"hallo","text":"hallo","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":1,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090385441","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090386219,"gmtCreate":1643083632164,"gmtModify":1676533772694,"author":{"id":"3579735899676546","authorId":"3579735899676546","name":"Kiwii","avatar":"https://community-static.tradeup.com/news/c31b2d8301c0e367c9f368c3506dad90","vip":1,"crmLevel":1,"crmLevelSwitch":0},"htmlText":"good stock","listText":"good stock","text":"good stock","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090386219","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090314099,"gmtCreate":1643081917741,"gmtModify":1676533772499,"author":{"id":"4101372154330430","authorId":"4101372154330430","name":"Wuqian98","avatar":"https://static.tigerbbs.com/9284b1218b2034d87a05e8a145005238","vip":1,"crmLevel":2,"crmLevelSwitch":0},"htmlText":"The hero we never knew we needed","listText":"The hero we never knew we needed","text":"The hero we never knew we needed","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090314099","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090316444,"gmtCreate":1643080969927,"gmtModify":1676533772448,"author":{"id":"3581677245508986","authorId":"3581677245508986","name":"jingsheng","avatar":"https://static.tigerbbs.com/d8033cad6345c7bb7d312f5a8020404a","vip":1,"crmLevel":2,"crmLevelSwitch":0},"htmlText":"whoah","listText":"whoah","text":"whoah","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090316444","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090316213,"gmtCreate":1643080888230,"gmtModify":1676533772448,"author":{"id":"3581589405041654","authorId":"3581589405041654","name":"cmg76","avatar":"https://static.tigerbbs.com/7bce68ec0cb45bf31e79e66a7fa376ad","vip":1,"crmLevel":2,"crmLevelSwitch":0},"htmlText":"Yes","listText":"Yes","text":"Yes","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090316213","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090313893,"gmtCreate":1643080134869,"gmtModify":1676533772318,"author":{"id":"3573019619191060","authorId":"3573019619191060","name":"MayTan","avatar":"https://static.tigerbbs.com/808e2dbe5d70103ebf181c1496a31644","vip":1,"hat":"https://static.tigerbbs.com/b0a2963eb37c60c5d6d4a8dbcd266952","crmLevel":3,"crmLevelSwitch":1},"htmlText":"Interesting","listText":"Interesting","text":"Interesting","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":6,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090313893","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090337718,"gmtCreate":1643079507926,"gmtModify":1676533772261,"author":{"id":"4088678216292640","authorId":"4088678216292640","name":"Annie_ann29","avatar":"https://static.tigerbbs.com/74b75bf973f051fd1f70b054cc66a45c","vip":1,"crmLevel":4,"crmLevelSwitch":0},"htmlText":"Like plz","listText":"Like plz","text":"Like plz","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090337718","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9090334886,"gmtCreate":1643079311113,"gmtModify":1676533772236,"author":{"id":"3572052161634400","authorId":"3572052161634400","name":"klostany","avatar":"https://static.tigerbbs.com/7eba482ad1e1cde10397c8710a080df0","vip":1,"hat":"https://static.tigerbbs.com/b073a07f77dbe6b3bec6b12311fde6bd","crmLevel":4,"crmLevelSwitch":0},"htmlText":"Woah","listText":"Woah","text":"Woah","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":5,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9090334886","repostId":2206157889,"repostType":4,"repost":{"id":"2206157889","pubTimestamp":1643079102,"share":"https://www.laohu8.com/m/news/2206157889?lang=&edition=full","pubTime":"2022-01-25 10:51","market":"us","language":"en","title":"Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them","url":"https://stock-news.laohu8.com/highlight/detail?id=2206157889","media":"Bloomberg","summary":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through","content":"<html><head></head><body><p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.</p><p>Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.</p><p>Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a <a href=\"https://laohu8.com/S/TWTR\">Twitter</a> user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.</p><p>“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”</p><p>The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.</p><p>Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Teen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nTeen Tesla Hacker Accessed Owners’ Email Addresses to Warn Them\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-01-25 10:51 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"BK4099":"汽车制造商","BK4550":"红杉资本持仓","BK4548":"巴美列捷福持仓","BK4551":"寇图资本持仓","BK4533":"AQR资本管理(全球第二大对冲基金)","TSLA":"特斯拉","BK4527":"明星科技股","TWTR":"Twitter","BK4534":"瑞士信贷持仓","BK4555":"新能源车"},"source_url":"https://www.bloomberg.com/news/articles/2022-01-25/teen-tesla-hacker-accessed-owners-email-addresses-to-warn-them?srnd=premium-asia","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2206157889","content_text":"The 19-year-old cybersecurity researcher who remotely accessed dozens of Tesla Inc. vehicles through a third-party flaw, has a new trick: hacking the car owners’ email addresses to notify them they’re at risk.Earlier this month, David Colombo discovered a flaw in a piece of third-party open source software that let him remotely hijack some functions on about two dozen Teslas, including opening and closing the doors or honking the horn. In trying to notify the affected car owners, he then found a flaw in Tesla’s software for the digital car key that allowed him to learn their email addresses.Colombo said the defect was in a Tesla application programming interface, or API. After he publicized his first discovery, a Twitter user suggested contact details for the affected owners could be found in the code that allows two pieces of software to communicate with each other, also known as an API endpoint.“Once I was able to figure out the endpoint, I was indeed able to carry the email address associated with the Tesla API key, the digital car key,” Colombo said in an interview Monday with Bloomberg Television. “You shouldn’t be able to carry sensitive information like an email address using an access that is already expired or revoked.”The teenager, from Dinkelsbühl, Germany, said he has shared the additional vulnerability with Tesla, and the car company’s engineers have written a fix to prevent it from happening in the future.Tesla didn’t respond to a request for comment. Colombo said his additional discovery should be eligible for a “bug bounty” from Tesla -- consistent with the company’s policy -- but officials there haven’t confirmed an amount with him. He joked that he hopes the sum is big enough to cover the coffee bill he’s amassed working on the original flaw the last two weeks.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"}],"hasMoreComments":true,"newsSizeData":{"likeSize":91,"commentSize":14,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false}}