Link to video of the hacking: https://x.com/Paul_Reviews/status/2044723123287666921
And this is government software handling sensitive information. I thought people were required to have higher qualifications and good security knowledge to develop software there, we are cooked if this is the norm.
They probably paid a million for this vibe coded app. I am confident that I could somehow make this.
Super common here in Germany that sensitive data is handled via crappy apps that essentially have backdoors.
If you break them and report the bug you can be prosecuted under some hacking paragraph.
"Technically ready", as per the post the dude replied to. It's "good enough" to fool idiots. For people that care to scratch the surface, the veneer falls off super easy
Apparently respecting highest privacy standards doesn’t have anything to do with cybersecurity standards.
A shiny new bucket doesn’t leak, but the lid can’t be locked so anyone with two hands should be able to open it up and see what’s inside. Sure, it’s private, but not secure.
That message at the bottom was written by "it's open source so it must be safe" type security expert
As if Ursula knew what she is talking about. Nevertheless, this is a terrible idea and most likely something with another agenda behind, other than the stated reasons.
With that being said, we need another president for the commission and perhaps a completely different commission. How many years until her term ends?
I wish I could say I was surprised
I miss the old definition of hack.
Why would you tell them about this? LLMs are creating a golden era of cracking, and exploits are currency.
This Meta's stupid attempt to not get sued for addicting kids. They want to force the problem on the entire world, so they cant be held responsible. They are pushing these same laws in several countries, Brazil just passed a near identical law.
Meta would steal your right to privacy, and force you to identify yourself to every single electronic device you own just to avoid being held liable for harming children. Absolutely disgusting. Zuck belongs in the deepest pits of hell.
And they think I'm going to add my ID into an app?! Let alone an unsafe one. No, thank you. I'll just carry a physical card, which is already mandatory.
The only way they will get the message is if there is a concerted white hat campaign targeting EU lawmakers to show them the error of their ways. If they refuse to see, then some black hats need to make them feel it.
I stay away from anything this ghoul has to offer
As far as I understood, the app only contains a token proving you are 18 or older. Nothing more...
So what potential breach is he taking about?
Or did I miss something?
Meanwhile Mr Paul is all about how bad this app is, how he won't help fix it or do anything for the government(because he was asked i think).
This app needs more work, and second, the attacker needs access to the phone. Now you can access the phone when it's unattended, steal it, do what you do and then give it back, or do some remote code hacking.
all 43 comments