Smashing Security podcast #476: Remote-control rickshaws and rogue book marketers

This podcast transcript reports an active IoT security issue in India where the BatBMS battery-management app and compatible battery firmware lack authentication, allowing nearby actors (e.g., teenagers) to connect via Bluetooth and remotely disable e-rickshaws—causing vehicle stoppages, safety risks, and economic harm to drivers; the app was removed from app stores and vendor updates require passwords but firmware update deployment remains uncertain. The episode also recounts advance-fee/book-marketing scams using fake book clubs and laundering bank accounts, plus brief mentions of ransomware/Conti leaks and other security news.