3 ms·
I had a very similar thought regarding gaining API keys for Tesla vehicles after realizing I can get generate API key knowing only my Tesla Account user name an
by nemosaltat 7y ago
I had a very similar thought regarding gaining API keys for Tesla vehicles after realizing I can get generate API key knowing only my Tesla Account user name and password only.
Honeypot free WiFi at a Tesla Super Charger with a legit looking login page: “Free WiFi for Tesla Customers, Login to your Tesla account to access.”
API End points include vehicle unlocking, speed limit settings, etc. Some are not available while the vehicle is motion, so at least there’s that.
(Full disclose: I own a Model 3)
- NotSammyHagar 7y agoThat Honeypot vulnerability is true of any service that has a login. Go to say Comcast sales office or whole foods for Amazon.