Went in thinking it was just your standard spoof clone website thing but holy shit....
- One time passcode isn't one time, can be reused and it's not even a race condition you need to program for, dude literally casually typed it back into the app
- No notification sent to owner about a new key being added...what the fucking Tesla? but notification happens when removing a key
These fucking cars are such pieces of shit
XI Wiki



