PWNED: Researcher uses broken API to print message on GPS watches
A German security researcher printed the word “PWNED!” on hundreds of GPS watches to prove a point about a broken API.
Christopher Bleckmann-Dreher discovered a vulnerability in an API used by Austrian GPS watch manufacturer Vidimensio.
The firm’s watches are used by a wide range of the population from the elderly down to children, and it affected over 20 models.
Dreher alerted Vidimensio to the problem but it was ignored for over a year. Given the potential for much greater risk in the...