3 ms·
Could always send out fake registration emails/postcards to collect serial numbers (which most people wouldn't consider especially sensitive info)...
by morpheuskafka 7y ago
Could always send out fake registration emails/postcards to collect serial numbers (which most people wouldn't consider especially sensitive info)...
- nemosaltat 7y agoI had a very similar thought regarding gaining API keys for Tesla vehicles after realizing I can get generate API key knowing only my Tesla Account user name and password only. Honeypot free WiFi at a Tesla Super Charger with a legit looking login page: “Free WiFi for Tesla Customers, Login to your Tesla account to access.” API End points include vehicle unlocking, speed limit settings, etc. Some are not available while the vehicle is motion, so at least there’s that. (Full disclose: I own a Model 3)
- NotSammyHagar 7y agoThat Honeypot vulnerability is true of any service that has a login. Go to say Comcast sales office or whole foods for Amazon.