• 9 Posts
  • 103 Comments
Joined 2 years ago
cake
Cake day: August 15th, 2023

help-circle



  • Yea good thing you didn’t. MSHTA is the app that lets you run Microsoft HTML Apps (usually used for their help articles). Those can contain JavaScript or VBScript code. And since you’re pasting it in a Run box it’ll happily execute it, even if it’s a remote source.

    Generally it would only run as your user (you’re not admin are you?), which would still be enough to make your life miserable, but it could also try to run known exploits and raise itself to admin and own your whole computer.












  • Something else that people don’t think about besides the backend server is the connectivity. A lot of these cars use LTE with eSIMs that can’t be replaced, and getting an internet package for it will be next to impossible since Tesla gets them at bulk rates. Once upon a time cars did allow “bring your own SIM cards” but not anymore. Also as cars get older the cell networks get shut down. Some companies did offer upgrades but that was few and far between. Most just said “sorry, you’re SOL”.

    So even if you could hack your car, your car won’t have any way of talking to a custom endpoint.