4 ms·
They definitely need to figure out something to mitigate the public information bit. Aside from (presumably) a cost associated with it, there isn't anything st
by marklubi 11y ago
They definitely need to figure out something to mitigate the public information bit. Aside from (presumably) a cost associated with it, there isn't anything stopping someone from going to the DMV and getting the info they need about a target.
Further, they also really need to change the HTTP method for the endpoints that change state.
Nothing's stopping someone from putting up an image tag on a well-trafficked website (or buying display ads on a network) with the src set as the endpoint that turns on the AC. Turns into a real-world DoS when the battery is dead.
- tigeba 11y agoThere is no danger of this. The endpoints are so slow that the ad network / site would drop it in minutes :)
- marklubi 11y agoIf the AC stays on for X minutes, you only need to occasionally redirect an actual advertisement image to the endpoint to be effective.
- neon_electro 11y agoIt's 15 minutes[1] by default, I believe. [1]http://www.mynissanleaf.com/viewtopic.php?p=363558&sid=1dec91ee04d72012cb9ea1c0fd078353#p363558 http://www.mynissanleaf.com/viewtopic.php?p=363558&sid=1dec9...