Hardcoded credentials and other issues in Tata Motors App

(cert-in.org.in)

63 points | by qtqtqt 8 hours ago ago

11 comments

  • qtqtqt 7 hours ago

    Tata says the issue has been fixed and there were no leaks: https://auto.timesofindia.com/news/cars/tata-motors-says-ira...

    • AdamN 6 hours ago

      The problem is that hardcoded credentials is such a bad smell that we can be confident that the code quality is extremely poor.

      • navigate8310 6 hours ago

        tbh, you can't expect much from them in general

      • ActionHank an hour ago

        "Nah it's fine our engineers now keep them in config files now."

  • tpowell 3 hours ago

    I feel like I just got a telegram... love the website.

  • Titan2189 7 hours ago

    Page doesn't load for me

    • dspillett 5 hours ago

      Come on, you can file a better problem report than that. “Doesn't load” can cover a great many issues: link not valid at all (NXDOMAIN, 404), some sort of error from the server (404, 401, 500, 200 but with error in arbitrary text), no connection, looped redirects, …

      The best you'll get from just saying “doesn't work for me” is people like me saying “its fine here”, like so: it is working fine for me from here.

      • ktm5j 3 minutes ago

        This isn't really the place to file any kind of report.. saying the page doesn't load is a perfectly valid comment IMO.

      • denysvitali 4 hours ago

        Times out after the TLS handshake.

        https://pastebin.com/raw/mncT5drA

      • muragekibicho an hour ago

        The link is clicked but I remain here on Hacker News. It's not loading, like, it's not taking me to the website.

  • richbell 3 hours ago