article thumbnail

The Hacker Mind Podcast: Hacking APIs

ForAllSecure

And in May of 2021 Researchers disclosed that the Peloton API authentication was broken. Wilde: Now, for me the storyline was interesting right so when it was reported I think in late January, it was completely open right like this is right no authentication at all because well we didn't tell anybody about it.

article thumbnail

The Hacker Mind Podcast: Hacking APIs

ForAllSecure

And in May of 2021 Researchers disclosed that the Peloton API authentication was broken. Wilde: Now, for me the storyline was interesting right so when it was reported I think in late January, it was completely open right like this is right no authentication at all because well we didn't tell anybody about it.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

When API Testing Is Required and Industry-Specific API Standards

ForAllSecure

Below, we will explore API standards in healthcare, automotive, and financial services, but these are only a few examples of industry-specific API standards. Healthcare API Standards HIPPA is the largest compliance requirement in the United States for healthcare applications. FHIR is now both a U.S.

article thumbnail

The Hacker Mind Podcast: Hacking Healthcare

ForAllSecure

CareFusion’s parent company Becton Dickinson responded, saying that all 14 hundred and 18 of the identified vulnerabilities were within third-party software applications including Windows XP and Symantec pcAnywhere, and others. There are’s a lot to unpack here. First, this is a supply chain issue. “Hi, Rob.”

article thumbnail

The Hacker Mind Podcast: Hacking Healthcare

ForAllSecure

CareFusion’s parent company Becton Dickinson responded, saying that all 14 hundred and 18 of the identified vulnerabilities were within third-party software applications including Windows XP and Symantec pcAnywhere, and others. There are’s a lot to unpack here. First, this is a supply chain issue. “Hi, Rob.”

article thumbnail

The Hacker Mind Podcast: Car Hacking 0x05

ForAllSecure

That’s perhaps because of a dedicated group of hackers who are working to improve automotive security. Fortunately, there's a group of automotive hackers that are trying to help. And he's been working with the automotive industry for years as a consultant and a hacker. We haven’t seen many attacks on our smart cars.

article thumbnail

The Hacker Mind Podcast: Hacking Teslas

ForAllSecure

As with most advances in automotive, this technology started at the higher end models. And even after using that token a few times for authentication responses so like positive, at least at that point, the car should go ahead and say alright, I do and I make a new token so that the next time the phone key has to respond differently.

Course 52