⬇ Download holy card: ·
⚔ Commemorated today: The Scourge of MOVEit (2023)Saint M365 Scooter, Who Accelerated on His Own
Patron of shared electric scooters, passwords checked only by the app, and riders who trust Bluetooth.
Life
In 2019 Rani Idan of Zimperium showed that the Xiaomi M365 scooter (CVE-2019-12500) checked the password only in the app, not on board. An attacker within Bluetooth range could therefore send commands without authenticating: a sudden acceleration, braking, locking or unlocking the vehicle. Some sharing operators had to update or withdraw the affected models.
Prayer
O Saint M365 Scooter, who takes orders from whoever passes by, let our vehicles check who is in command before they move. Amen.
How to celebrate
Celebrated by updating the scooter firmware and setting a password the vehicle actually checks.