Re:Unlocking any car from X brand in most of the world
by 3abiton on Monday November 09, 2026 @07:08AM
(#50424495)
> Reconstructing the requests, we found that a lot of these APIs needed no authentication beyond the hardcoded API keys sitting in the JavaScript bundle.
I've heard so many horror stories starting like this.
I've heard so many horror stories starting like this.