Hardcoded credentials and other issues in Tata Motors App

(cert-in.org.in)

27 points | by qtqtqt 3 hours ago

3 comments

  • qtqtqt 2 hours ago
    Tata says the issue has been fixed and there were no leaks: https://auto.timesofindia.com/news/cars/tata-motors-says-ira...
    • AdamN 1 hour ago
      The problem is that hardcoded credentials is such a bad smell that we can be confident that the code quality is extremely poor.
      • tyrabound 1 hour ago
        I would simply not trust any Indian code, and in Indian. There are too many pressures and cultural effects, both present and absent that make for very poor outcomes. But it’s also why it appeals to “Americans” so much, like a drug, it’s very immediate euphoria inducing effects traded for long term consequences, very low impulse control, very American; even as it turns Indians into those very kind of imitation Americans with every passing day.
      • navigate8310 1 hour ago
        tbh, you can't expect much from them in general
  • Titan2189 2 hours ago
    Page doesn't load for me
    • dspillett 15 minutes ago
      Come on, you can file a better problem report than that. “Doesn't load” can cover a great many issues: link not valid at all (NXDOMAIN, 404), some sort of error from the server (404, 401, 500, 200 but with error in arbitrary text), no connection, looped redirects, …

      The best you'll get from just saying “doesn't work for me” is people like me saying “its fine here”, like so: it is working fine for me from here.