Hardcoded credentials and other issues in Tata Motors App

(cert-in.org.in)

61 points | by qtqtqt 7 hours ago ago

13 comments

  • qtqtqt 7 hours ago ago

    Tata says the issue has been fixed and there were no leaks: https://auto.timesofindia.com/news/cars/tata-motors-says-ira...

    • AdamN 6 hours ago ago

      The problem is that hardcoded credentials is such a bad smell that we can be confident that the code quality is extremely poor.

      • navigate8310 6 hours ago ago

        tbh, you can't expect much from them in general

      • tyrabound 5 hours ago ago

        [flagged]

        • 5 hours ago ago
          [deleted]
      • ActionHank 44 minutes ago ago

        "Nah it's fine our engineers now keep them in config files now."

  • 7 hours ago ago
    [deleted]
  • tpowell 2 hours ago ago

    I feel like I just got a telegram... love the website.

  • richbell 3 hours ago ago
  • Titan2189 7 hours ago ago

    Page doesn't load for me

    • dspillett 4 hours ago ago

      Come on, you can file a better problem report than that. “Doesn't load” can cover a great many issues: link not valid at all (NXDOMAIN, 404), some sort of error from the server (404, 401, 500, 200 but with error in arbitrary text), no connection, looped redirects, …

      The best you'll get from just saying “doesn't work for me” is people like me saying “its fine here”, like so: it is working fine for me from here.