&gt;Mr Hunt said the root of the problem was that the firm&#x27;s NissanConnect app needed only a car&#x27;s vehicle identification number (Vin) to take control.<p>And only the last 5 digits vary on these VINs, so you can just run through them all with a simple script in no time. They&#x27;re using VIN as the unique key on these things and with no other authentication? Wow. Just wow.<p>I really think we&#x27;ve reached that point with IoT that its time to start proposing HIPAA-like regulation on this stuff. Its endless amateur hour out there.