2011-09-14
post/10179603214
photo 00:01:51
JSON payload sniffing and surveillance photographs of cars, from Troy Hunt’s post about Bondi Westfield’s iPhone “find my car” app and its privacy failings:
That URL for the service endpoint we looked at earlier contains a number of parameters – filters, if you like – and removing these readily provides the current status of all 2,550 sensors. This includes the number plate of any car currently occupying a space and as you can see, it’s available by design to anyone.
(via Tom Carden)
