Skip to content

Hertz' AI System That Scans for "Damage" on Rental Cars Is Turning Into an Epic Disaster

Technology
163 92 2.5k
  • Elon Musk awarded $29 billion pay package from Tesla

    Technology technology
    1
    1
    3 Stimmen
    1 Beiträge
    2 Aufrufe
    Niemand hat geantwortet
  • datacenter liquid cooling solution

    Technology technology
    35
    34 Stimmen
    35 Beiträge
    177 Aufrufe
    S
    A legit exception might occur with a strict energy-optimization objective, where the point would be transporting heat outside of an HVAC envelope as efficiently as possible. The cost of the additional thermal load is often ignored by hobbyists in their energy calculations but it can be significant. In the context of fixed-capacity solar, for example, it might be cheaper to pipe waste heat from a telco closet to a space that isn’t climate controlled, like a garage, than it would be to expand the solar installation for increased HVAC draw.
  • Getting Started with Ebitengine (Go game engine)

    Technology technology
    2
    15 Stimmen
    2 Beiträge
    15 Aufrufe
    R
    This video complements the text tutorial at https://trevors-tutorials.com/0003-getting-started-with-ebitengine/ Trevors-Tutorials.com is where you can find free programming tutorials. The focus is on Go and Ebitengine game development. Watch the channel introduction for more info.
  • 585 Stimmen
    100 Beiträge
    4k Aufrufe
    B
    No, LCOE is an aggregated sum of all the cash flows, with the proper discount rates applied based on when that cash flow happens, complete with the cost of borrowing (that is, interest) and the changes in prices (that is, inflation). The rates charged to the ratepayers (approved by state PUCs) are going to go up over time, with inflation, but the effect of that on the overall economics will also be blunted by the time value of money and the interest paid on the up-front costs in the meantime. When you have to pay up front for the construction of a power plant, you have to pay interest on those borrowed funds for the entire life cycle, so that steadily increasing prices over time is part of the overall cost modeling.
  • 1k Stimmen
    556 Beiträge
    5k Aufrufe
    H
    Just give us cheap Chinese phones for fucks sake.
  • 123 Stimmen
    11 Beiträge
    107 Aufrufe
    D
    Clear copyright over reach. News titles or tiny excerpts should not copyrightable - that's just idiotic. If thag stops readers from reading your article then it was never good enough to begin with.
  • (azazoaoz)

    Technology technology
    1
    1
    0 Stimmen
    1 Beiträge
    19 Aufrufe
    Niemand hat geantwortet
  • 1 Stimmen
    8 Beiträge
    77 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.