User avatar
jlv
Moderator
Posts: 1542
Joined: Thu Apr 24, 2014 6:08 pm
Delivery Date: 30 Apr 2014
Leaf Number: 424487
Location: Massachusetts

Nissan NA source code leaked online

Thu Jan 07, 2021 8:42 am

A misconfigured git server (open to the world) with default credentials (u/p admin/admin). I can't imagine any partially competent person in IT making such a blunder.

https://twitter.com/antiproprietary/sta ... 2536214528
https://www.zdnet.com/article/nissan-so ... iguration/


This part of the tweet thread was, uh, interesting:
https://twitter.com/antiproprietary/sta ... 2536214528
SMAT/webscrape is a tool by the data science/market research team, which scrapes all current offers on cars by zip code from http://chooseanissan.com.

yes thats a Nissan website.

great culture if you have to scrape the website another departement made to get data you need.
LEAF '13 SL+Prem (mfg 12/13, leased 4/14, bought 5/17, sold 11/18, 34K mi, AHr 58, SOH 87%)
Tesla S 75D (3/17, 45K mi)
Tesla X 100D (12/18, 23K mi)
ICE free since '18
100K+ 100% BEV miles since '14

goldbrick
Posts: 1106
Joined: Tue Aug 01, 2017 3:33 pm
Delivery Date: 01 Aug 2017
Leaf Number: 311806
Location: Boulder, CO

Re: Nissan NA source code leaked online

Thu Jan 07, 2021 1:58 pm

Maybe someone will fix the EVConnect code now and put it back up as shareware.

And yeah, what a goof. I wonder if the server was reset somehow and powered back up with default settings or someone cracked it and left it that way. It's hard to imagine how this kind of slip-up could occur in a professional environment.

User avatar
Stanton
Posts: 2271
Joined: Thu Feb 03, 2011 10:56 am
Delivery Date: 01 Sep 2011
Leaf Number: 7458
Location: Plano, TX
Contact: Website Twitter

Re: Nissan NA source code leaked online

Fri Jan 08, 2021 7:35 am

goldbrick wrote:
Thu Jan 07, 2021 1:58 pm
Maybe someone will fix the EVConnect code now and put it back up as shareware.
Not sure if this was a joke, but I haven't been able to retrieve status on my Leaf via the Nissan app for over a week now. However, I have been getting "charged stopped/complete" texts. Is there some connection between this incident and EVConnect not working??
2011 Blue Ocean SV w/floor mats & window tint
Lithium Pros 12v LiFePO4 battery w/Antigravity Battery Tracker
FIAMM 74100 horns
Wet Okole seat covers
Tor's low-power heater mod
2013 sun visor
Battery Pack replaced (Rev E) @51 months and 41k miles

User avatar
jlv
Moderator
Posts: 1542
Joined: Thu Apr 24, 2014 6:08 pm
Delivery Date: 30 Apr 2014
Leaf Number: 424487
Location: Massachusetts

Re: Nissan NA source code leaked online

Fri Jan 08, 2021 12:56 pm

Stanton wrote:
Fri Jan 08, 2021 7:35 am
I have been getting "charged stopped/complete" texts. Is there some connection between this incident and EVConnect not working??
I doubt it. EVConnect is just unreliable and buggy.
LEAF '13 SL+Prem (mfg 12/13, leased 4/14, bought 5/17, sold 11/18, 34K mi, AHr 58, SOH 87%)
Tesla S 75D (3/17, 45K mi)
Tesla X 100D (12/18, 23K mi)
ICE free since '18
100K+ 100% BEV miles since '14

DougWantsALeaf
Posts: 2356
Joined: Fri May 10, 2013 8:21 pm
Delivery Date: 18 May 2013
Leaf Number: 407811
Location: Chicago North Side

Re: Nissan NA source code leaked online

Fri Jan 08, 2021 4:58 pm

If it doesn't come back in a day, it could be your telematics unit. I had to have mine replaced a month ago.
2019 S Plus (98.06% SOH) & 2019 SV Plus (94.77% SOH) Both Silver
2013 Leaf SV sold 2019 with 11 bars
100 Mile Club Member (Number 87)
Max Miles on 13 Leaf: 120 miles
Max Miles on 19 SV+: 242 Highway miles @ 4.5 miles/kWh

LeftieBiker
Moderator
Posts: 16150
Joined: Wed May 22, 2013 3:17 am
Delivery Date: 30 Apr 2018
Location: Upstate New York, US

Re: Nissan NA source code leaked online

Fri Jan 08, 2021 5:41 pm

I don't subscribe to any texts, but I've been using the app to start my climate control every morning so I can go put out cat food for some ferals, and the app has failed only once in the last 6 weeks - and that was last month.
Scarlet Ember 2018 Leaf SL W/ Pro Pilot
2009 Vectrix VX-1 W/18 Leaf modules, & 3 EZIP E-bicycles.
BAFX OBDII Dongle
PLEASE don't PM me with Leaf questions. Just post in the topic that seems most appropriate.

Return to “Business / Economy and Politics”