Yeah granted. But obfuscating the VIN in the HTTP traffic would be easy and would at least help a bit. E.g. the guy that wrote the article would have had to dig a lot deeper to figure out what was happening. It still would have been scoffed at, had anyone figured it out, I agree.<p>BTW reminds me: Jeep had this clever system whereby the password was generated randomly by the unit. But it used the system time as a seed, and that system time was always the same cos the thing had just been turned on. The rest is history...
<a href="https:&#x2F;&#x2F;blog.kaspersky.com&#x2F;blackhat-jeep-cherokee-hack-explained&#x2F;9493&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.kaspersky.com&#x2F;blackhat-jeep-cherokee-hack-expla...</a>