Hardcoded credentials and other issues in Tata Motors App

(cert-in.org.in)

17 points | by qtqtqt 2 hours ago

3 comments

  • qtqtqt 1 hour ago
    Tata says the issue has been fixed and there were no leaks: https://auto.timesofindia.com/news/cars/tata-motors-says-ira...
    • AdamN 59 minutes ago
      The problem is that hardcoded credentials is such a bad smell that we can be confident that the code quality is extremely poor.
      • tyrabound 35 minutes ago
        I would simply not trust any Indian code, and in Indian. There are too many pressures and cultural effects, both present and absent that make for very poor outcomes. But it’s also why it appeals to “Americans” so much, like a drug, it’s very immediate euphoria inducing effects traded for long term consequences, very low impulse control, very American; even as it turns Indians into those very kind of imitation Americans with every passing day.
      • navigate8310 47 minutes ago
        tbh, you can't expect much from them in general
  • Titan2189 1 hour ago
    Page doesn't load for me