Top all-time · #10011
promon.co
Company blog · promon.co/blogsecuritysystems
promon.co is the company blog at promon.co, writing about security and systems. Since 2016, 8 different Hacker News readers have linked it 10 times, most often “Tesla cars can be stolen by hacking the app”. It is still writing: the last post was on 2026-11-02, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Promon's blog for its write-up of an Android malware attack that hacked and stole a Tesla, with the security recommendations the post gives for app developers.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Promon is the runtime intelligence platform trusted to protect 2 billion app installs. Shield your apps post-compile, collect trusted telemetry, and act on threats in real time.
Most-linked posts?
- Tesla cars can be stolen by hacking the app2 people · 2 mentions · first linked 2016-11-24
- New Android Flaw Affecting over 1B Phones Let Attackers Hijack Apps2 people · 2 mentions · first linked 2020-05-27
What Hacker News says?
This blog post does contain those recommendations: https://promon.co/blog/tesla-cars-can-be-stolen-by-hacking-t... Near the bottom, it says: The app should provide its own keyboard for entering the username and password. Otherwise, malicious third party keyboards can act as keyloggers to obtain the user’s credentials. And: The app should be protected against reverse engineering.
Comment linking /blog/tesla-cars-can-be-stolen-by-hacking-the-app/
on “Android Malware Used to Hack and Steal a Tesla Car”Submitted StrandHogg: Serious Android vulnerability leaves most apps vulnerable to attacks as a story · 4 points
HN discussion1. The free burger malware was hosted from Google Play 2. The attack was performed at a restaurant near a Tesla super charger, offering a free Wifi which pushed the Google Play link as ads. 3. The app must not root the phone, but this is pretty straight forward. 4. Pretty likely near a Tesla super charger. > Chances of this ever happening in the real world: Zero. We certainly hope so. We're raising awareness of IoT…
Comment linking /blog/
on “Android Malware Used to Hack and Steal a Tesla Car”Submitted Tesla cars can be stolen by hacking the app as a story · 4 points
HN discussionI'm not sure where this quote came from, but I can say that the Tesla app should avoid storing the OAuth token in cleartext. Disclaimer: I work for Promon. See our blog post: https://promon.co/blog/
Comment linking /blog/
on “Android Malware Used to Hack and Steal a Tesla Car”Submitted Beware of Snowblind: A new Android malware as a story · 2 points
HN discussionSubmitted Rapper or Malware? as a story · 2 points
HN discussionSubmitted New Android Flaw Affecting over 1B Phones Let Attackers Hijack Apps as a story · 2 points
HN discussionSubmitted StrandHogg 2.0 – The Evil Twin as a story · 1 points
HN discussionSubmitted StrandHogg: Serious Android Vulnerability as a story · 1 points
HN discussion