After 90 female hackers seconds break the shared bike: brush other people's money to ride

Geek Pwn, known as the "Hacker Games," has launched an excellent mid-game match. Players from China, South Korea and Russia rely on hacking techniques. Recent hot shared bicycles have also become a target for hackers to display their talents. The 25-year-old female program Tyy demonstrated how to quickly crack the method of sharing bicycle user data at this GeekPwn great conference. Tyy said that shared bike companies are moving forward, but some of the loopholes are very low.

In the demo, Tyy used a computer and connected to a stranger's mobile phone under the same Wi-Fi. A few seconds later, the user's previous riding record was displayed on Tyy's computer, including the user's name, balance, and password. Tyy can use this operation to scan with other people's accounts.

Tyy said that as a programmer, she is a shared bicycle user. During a ride, she suddenly asked herself "If I want to write a shared bicycle safety program, how can I write it? How can I prevent it?"

At the beginning of April, she first discovered that there was a security breach in Mobike, but soon after Mobike repaired the bug, she randomly tested a large number of brand bicycles and found that there were problems with Xiaoming Bicycle, Wing On Line, Enjoy Riding, and Baipui Bicycle. Four bicycles have different loopholes, but the results are the same.

“Xiaoming and Baibai bicycles can complete these operations even if they are not under the same Wi-Fi,” Tyy said. Although the cost of sharing bicycles is not high, it involves the disclosure of personal privacy, including real-name authentication, GPS location and deposit recharge information, etc. If this information is known to criminals, it may create a new fraud model.

In fact, loopholes in the process of fighting a shared bicycle are inevitable. Leading companies such as Mobike and Ofo, due to the large amount of funds and data involved, risk control will be valued. For small businesses, grabbing market share and financing is the main task at present, and privacy and system vulnerabilities are often overlooked.

Audio Harness

Car Audio Harness,Stereo Wiring Harness,Car Stereo Wiring Harness,Car Stereo Wiring

Dong guan Sum Wai Electronic Co,. Ltd. , https://www.sw-cables.com

Posted on