How not to use dbus (in cars or anywhere else)
Colin Walters <[email protected]>
| Newsgroups | gmane.comp.freedesktop.dbus |
|---|---|
| Message-ID | <1440428605.1173717.364518569.3D0CA93E@webmail.messagingengine.com> |
http://illmatics.com/Remote%20Car%20Hacking.pdf 1) Exposing the bus over TCP. I'd recommend having debugging sessions go over ssh. 1a) Exposing the bus over TCP to all interfaces, including an interface for the public internet 2) Using the ANONYMOUS mechanism (related to #1) 3) Not using PolicyKit or other authorization mechanism 4) Having a method that executes arbitrary code mixed in with normal methods _______________________________________________ dbus mailing list [email protected] http://lists.freedesktop.org/mailman/listinfo/dbus