CERT-In flags hardcoded credentials and other security issues in Tata Motors app

·1 views

India's Computer Emergency Response Team (CERT-In) has published a vulnerability note concerning the Tata Motors mobile app. The advisory reportedly identifies hardcoded credentials among several other security issues in the application. The note was shared on Hacker News, where it drew a small amount of attention from readers. The source material provided does not include details on the affected app versions, potential impact on users, or whether a fix has been released.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Ant colony found trapped for years in a Soviet-era bunker, surviving by cannibalism

A study published in the Journal of Hymenoptera Research reports on an ant colony discovered inside a Soviet-era bunker. The insects appear to have been sealed off for years, with no access to outside food. The researchers describe how the colony sustained itself through cannibalism during that isolation. The article text provided is only a link and metadata, so further details about the location, timing, and species could not be verified from the source material.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

CogniPrep adds three hub pages explaining assessment tests to new users

CogniPrep recently launched three hub pages aimed at people unfamiliar with assessment vendors. Two cover the same subject for different markets: a British English page on psychometric tests for UK graduate schemes, and a US English page on pre-employment tests organised by role type. A third page covers game-based assessments across vendors and is market-neutral. The author notes the two regional pages differ in substance, not just in a find-and-replace of spelling. Some shared components, such as footer labels, URL slugs and schema.org markup, still carry mixed spelling because regional pages cannot override them.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Munchable adds an eighth condition, exposing how hardcoded counts drifted out of sync

Munchable, a tool that checks packaged food against digestive-condition rule sets, expanded from seven conditions to eight. A single commit touched 63 files, and a dozen of the changes were one-line edits replacing the spelled-out word "seven" in copy across the app, docs, and shared packages. The author notes the number had been scattered through the codebase as literal text rather than derived from the data. A test checking the phrase also hardcoded "seven", so it kept passing despite the copy becoming wrong. The fix was to compute the count from the condition registry and have the tests import the same constant the pages render.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Header Normalization Can Create Column Collisions in Order CSV Files

An order file containing both 'Order ID' and 'order_id' can become ambiguous if header names are trimmed and normalized before lookup construction. When two columns map to the same key, the value used for an order reference may depend on which column overwrote the other. The proposed remedy is to validate the full header set before mapping rows, rejecting ambiguous normalized names outright. The author, of YX Fulfillment, presents a JavaScript example that applies NFKC normalization, trimming, lowercasing, and whitespace-to-underscore replacement, and throws on duplicate keys or missing required fields. The example is described as an independent file-adapter check rather than a production connector.

0 comments Read more at DEV Community