this post was submitted on 04 Dec 2023
45 points (100.0% liked)

Security

5005 readers
1 users here now

Confidentiality Integrity Availability

founded 4 years ago
MODERATORS
[email protected]
45
Insecure Password allowed Administrative Access to Electric Vehicle Chargers (industrydecarbonization.com)
submitted 11 months ago by hanno to c/[email protected]
4 comments fedilink hide all child comments
top 4 comments
sorted by: hot top controversial new old
[–] [email protected] 9 points 11 months ago

Hardcoding passwords in factory firmware is so early-2010's. You would think the long list of routers, cameras, and IOT devices listed on Shodan would be a cautionary tale.

But nooo.

[–] LUHG_HANI 1 points 11 months ago (1 children)

For the price of a few coffees they could have generated one using a password manager. Bitwarden or anything.

[–] WetAndFlummoxed 1 points 11 months ago (1 children)

For the price of free they could generate one. Though they shouldn't be hard coded regardless of how good it is.

[–] ggppjj 1 points 11 months ago

I'm sure the things have network adapters, using the MAC address would be marginally more secure than this.