Payatu Blog
payatu.com · Company blog · on HN since 2015
Payatu, a security consultancy, publishes write-ups on exploitation, reverse engineering, hardware attacks, mobile security, and GSM and GPS research.
What HN saysHN links it for technical security posts on automotive CAN bus and GraphQL exploitation; commenters give no strong opinion of the blog itself.
16HN people shared it
3linked it in comments
13stories submitted
378story points
3 months agolast shared
2015people per year2026
Most-shared posts
- 1My Hacking Adventures with Safari Reader Mode2 people · 85 points · first shared 2020 · 7 comments on HN
- 2Bypassing Android MDM Using a $1.50 Electric Gas Lighter1 people · 267 points · first shared 2020 · 77 comments on HN
- 3Uninitialized Stack Variable – Windows Kernel Exploitation1 people · 6 points · first shared 2016 · 1 comments on HN
- 4Passive GSM sniffing with Software defined radio1 people · 5 points · first shared 2018 · discussion on HN
- 5A Guide to Linux Privilege Escalation (2018)1 people · 3 points · first shared 2019 · discussion on HN
- 6From GNSS Fundamentals to Static GPS Spoofing1 people · 3 points · first shared 2026 · discussion on HN
- 7Bypassing Android MDM Using Electromagnetic Fault Injection by a Lighter for $11 people · 2 points · first shared 2020 · discussion on HN
- 8REVERSING AND EXPLOITING BLE 4.0 COMMUNICATION1 people · 2 points · first shared 2017 · discussion on HN
- 9MineSweeper, with No Luck – An Introductory Blog to Reverse Engineering1 people · 2 points · first shared 2021 · discussion on HN
- 10HackSys Extreme Vulnerable Driver1 people · 1 points · first shared 2015 · discussion on HN
- 11IoT Security 101 – IoT Attack Surface1 people · 1 points · first shared 2017 · discussion on HN
- 12XSS in Firefox-iOS QR Code Reader1 people · 1 points · first shared 2019 · discussion on HN
- 13Automotive security part31 people · first shared 2022
- 14Graphql exploitation part 41 people · first shared 2022
- 154.png1 people · first shared 2020
What HN people wrote when they linked it
zuppy · 2022-12-02
most probably, because of CAN bus, which is the system that most of the cars use to connect their systems.
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7219335/
how CAN bus works:
https://payatu.com/blog/kartheek.lade/automotive-security-part3
i’m aware that on this case there was something even dumber, an unsecured api endpoint, but as far as i know, if you’ve managed to reach the system you can do anything with any other connected device. there should not be a way to be able to do whatever you want just because you have access to the network.
lazyasciiart · 2022-08-06
https://payatu.com/blog/manmeet/graphql-exploitation-part-4
query dos
{
allDogs(onlyFree: false, limit: 1000000)
{
id
veterinary
{
id
dogs
{
id
veterinary
{
id
dogs
{
id
veterinary
{
id
dogs
{
.....
danbruc · 2020-09-25
What is the point of those color gradients in the photos? [1] Are they supposed to conceal the chip? If so, that didn't work very well. [2] Just make it completely black, people have failed often enough to properly redact information because they tried to do something fancy, something more visually pleasing. At least unless they did this intentionally, either because they wanted it to be visible but also wanted some deniability as an accident, or to mislead by embedding false information.
[1] https://payatu.com/static/images/remoteblogs/arun/emfi_blog/4.png?raw=…
[2] http://www.unisoc.com/sc9863a