• 0 Posts
  • 15 Comments
Joined 1 year ago
cake
Cake day: October 4th, 2023

help-circle
  • There is no mode switch for brakes. We’ve had ABS and emergency brake assist features in cars for decades. Having a computer actuate the brakes vs a person requires absolutely nothing to change or ‘switch’. Pressure is applied to the hydraulic system manually through the brake pedal or automatically through an electric pump. Both are always in the system at all times.

    Some cars have the ability to pre-charge the brake booster to apply more braking force in the event it determines you’re performing a ‘panic stop’. This feature was developed because most people tend to not apply the brakes hard enough in these situations. That is almost certainly what happened here. Not the switch between driving modes.




  • They posted a link to their blog post down in the comments of the gist…

    We also want to address the Bug Bounty program associated with this case. Although the researcher did initially submit the vulnerability through our established process, they violated key ethical principles by directly contacting third parties about their report prior to remediation. This was in violation of bug bounty terms of service, which are industry standard and intended to protect the white hat community while also supporting responsible disclosure. This breach of trust resulted in the forfeiture of their reward, as we maintain strict standards for responsible disclosure.

    They failed to mention that the report was closed for being out of scope. Any reasonable person would expect that to mean a remediation was not coming. So really he didn’t give up his bounty because he wasn’t getting one to begin with.

    Edit: cause autocorrect is dumb.







  • FedEx pointed out that shippers of high-value goods "can request Hold at Location or Direct Signature Required services, or redirect a package to FedEx Office”

    Can’t tell you how many times FedEx has just completely ignored the direct signature required part. If it’s not something like alcohol where the government will crack down on them then they don’t care.

    You can look up the signature for the package on their app. I can’t sign my name in Times New Roman…so clearly I didn’t sign for that. If I do sign for it then it’s an image of my actual signature.

    They also have a bad habit of delivering stuff to my neighbor without ever setting foot on my property because apparently they can’t read house numbers…FedEx is terrible in my area.