News for hackers. Stuff that matters.
Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by baybal2 on Wednesday May 05, 2021 @07:08AM (#27048460)
> Intel was also informed since the company was the original developer of ConnMan, but the researchers said the chipmaker believed it was not its responsibility.

...

Very strange position when Intel sinks 7 digit sums into salaries of top tier computer programmers working on it.

Does it do it for nothing then?

It's these situations when people can't tell what the heck they are doing what they do for for $200k a year which signal of company's dysfunction.

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by ajross on Wednesday May 05, 2021 @09:46AM (#27049713)
That's not fair. ConnMan was written primarily by Marcel Holtmann while paid by Intel to work on Moblin and Meego back when they were a thing. But it is, was, has been and was always intended to be a 100% open source effort provided to the community (including Tesla!) under the GPLv2 free of charge and with a warranty disclaimer included in the license.

Demanding that employers be somehow magically responsible for the community contributions of their employees in perpetuity is the easiest way to make sure employers never let their employees contribute to the community.

Whether ConnMan, which is semi-abandonware now, was a good choice for Tesla to have integrated is sort of a different question. Personally I was never a fan. But that's the magic of free software, we all get to choose what works for us.

Seriously, the warranty disclaimer is is really clear in the GPL. They even put it in caps:

NO WARRANTY

11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by boblivion on Wednesday May 05, 2021 @07:17AM (#27048505)
They weren't the maintainers anymore. That's the reason. OSS is tricky sometimes in that regard.
Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by baybal2 on Wednesday May 05, 2021 @07:19AM (#27048518)
Connman is maintained by Intel, it's pretty much nobody needs it, but them.

It's desktop usage is abysmal with no GUI supporting its up to date API.

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by LargoLasskhyfv on Wednesday May 05, 2021 @06:11PM (#27056471)
Hm. While I usually avoid Wifi where- and whenever I can, recently I couldn't. Booted some live Distro into RAM, fiddled whith settings(because not used to WiFi, got it?), almost had screaming fits, until I discovered I could switch from that Networkmanagercrap to Connman and everything worked. The GUI which enabled that was this https://github.com/andrew-bibb/cmst

Where the use-case was a simple connect to that fucking T-Offline hotspot at the edge of reception and automagically point some browser tab to the captive portal, FAST! Also RECONNECT fast!

That worked for me.

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by baybal2 on Thursday May 06, 2021 @04:20AM (#27060452)
CMST is the most up to date GUI for connman, but the upstream is far ahead of current GUI features.