Hacking India's largest automaker: Tata Motors

Re:Hacking India's largest automaker: Tata Motors by speckx on Wednesday October 29, 2025 @11:49AM (#45748482)

The fact that they put their AWS secret keys on their website is incredible.

[ Parent | on HN ]

Re:Hacking India's largest automaker: Tata Motors by YetAnotherNick on Friday October 31, 2025 @03:55PM (#45776036)

Sending it with AES encryption(with the key that the client has access to) makes it even worse, as someone knew this shouldn't be shared to client yet they shared it anyway.

[ Parent | on HN ]

Re:Hacking India's largest automaker: Tata Motors by horns4lyfe on Friday October 31, 2025 @04:19PM (#45776255)

If you’ve ever worked with Indian outsourcing firms it’s not

[ Parent | on HN ]

Re:Hacking India's largest automaker: Tata Motors by quickthrowman on Friday October 31, 2025 @04:35PM (#45776419)

That’s exactly the kind of work I’d expect from TCS, I’m not sure why you are surprised.

[ Parent | on HN ]

Re:Hacking India's largest automaker: Tata Motors by darth_avocado on Friday October 31, 2025 @04:48PM (#45776536)

Even more importantly, why do the root keys expose EVERYTHING? Do they just have one account for all of their infra?

[ Parent | on HN ]

Re:Hacking India's largest automaker: Tata Motors by Linkd on Friday October 31, 2025 @11:19PM (#45778992)

The fact that it's nicely commented is even more so. Check out the other environment configs commented out, are they doing this by hand? Wild.

[ Parent | on HN ]