Mostly Security

216: Unruly Franchisees

Informações:

Synopsis

Eric and Jon enjoy the (brief) respite from Oregon Winter Rain. Github enables second factor via push to mobile app, a 12 year old Linux privilege escalation, vulnerabilities in the Winter 2022 Olympics app, and remote controlling Tesla car functions via API keys. For fun a high schooler making circuits in his garage, and did you know McDonald's is a Real Estate company? 0:00 - Intro 14:02 - GitHub Push as 2nd Factor 19:47 - Linux Policy Kit Priv Esc 23:50 - Olympics App Vulnerabilities 29:36 - Teslamate 37:15 - Garage Chips 42:37 - McDonald's As Real Estate