They can fix the public API that the App uses, and change the App - e.g. they could scramble or hash the VINS that are transmitted over HTTP so that they are not so obvious and enumerable. They could also have some protection on the API to check for enumeration attempts.<p>There&#x27;s a second part where Nissan&#x27;s servers talk to the car - that obviously will be harder to fix, but that bit is also harder to hack presumably.