User avatar
jlv
Moderator
Posts: 1680
Joined: Thu Apr 24, 2014 6:08 pm
Delivery Date: 30 Apr 2014
Leaf Number: 424487
Location: Massachusetts

Nissan NA source code leaked online

Thu Jan 07, 2021 8:42 am

A misconfigured git server (open to the world) with default credentials (u/p admin/admin). I can't imagine any partially competent person in IT making such a blunder.

https://twitter.com/antiproprietary/sta ... 2536214528
https://www.zdnet.com/article/nissan-so ... iguration/


This part of the tweet thread was, uh, interesting:
https://twitter.com/antiproprietary/sta ... 2536214528
SMAT/webscrape is a tool by the data science/market research team, which scrapes all current offers on cars by zip code from http://chooseanissan.com.

yes thats a Nissan website.

great culture if you have to scrape the website another departement made to get data you need.
ICE free since '18 / 100K+ 100% BEV miles since '14
LEAF '13 SL (mfg 12/13, leased 4/14, bought 5/17, sold 11/18, 34K mi, AHr 58, SOH 87%)
Tesla S 75D (3/17, 46K mi)
Tesla X 100D (12/18, 26K mi)
8.9kW Solar PV and 2x Powerwall

goldbrick
Posts: 1253
Joined: Tue Aug 01, 2017 3:33 pm
Delivery Date: 01 Aug 2017
Leaf Number: 311806
Location: Boulder, CO

Re: Nissan NA source code leaked online

Thu Jan 07, 2021 1:58 pm

Maybe someone will fix the EVConnect code now and put it back up as shareware.

And yeah, what a goof. I wonder if the server was reset somehow and powered back up with default settings or someone cracked it and left it that way. It's hard to imagine how this kind of slip-up could occur in a professional environment.

User avatar
Stanton
Posts: 2345
Joined: Thu Feb 03, 2011 10:56 am
Delivery Date: 01 Sep 2011
Leaf Number: 7458
Location: Plano, TX
Contact: Website Twitter

Re: Nissan NA source code leaked online

Fri Jan 08, 2021 7:35 am

goldbrick wrote:
Thu Jan 07, 2021 1:58 pm
Maybe someone will fix the EVConnect code now and put it back up as shareware.
Not sure if this was a joke, but I haven't been able to retrieve status on my Leaf via the Nissan app for over a week now. However, I have been getting "charged stopped/complete" texts. Is there some connection between this incident and EVConnect not working??
2011 Blue Ocean SV
12v LiFePO4 battery w/Antigravity Battery Tracker
FIAMM 74100 horns/Wet Okole seat covers/Tor's low-power heater mod/Dala's CAN-bridge
Lizard Pack (Rev E) installed @51 months/41k miles
40 kWh Pack (Gen2) installed @115 months/85k miles

User avatar
jlv
Moderator
Posts: 1680
Joined: Thu Apr 24, 2014 6:08 pm
Delivery Date: 30 Apr 2014
Leaf Number: 424487
Location: Massachusetts

Re: Nissan NA source code leaked online

Fri Jan 08, 2021 12:56 pm

Stanton wrote:
Fri Jan 08, 2021 7:35 am
I have been getting "charged stopped/complete" texts. Is there some connection between this incident and EVConnect not working??
I doubt it. EVConnect is just unreliable and buggy.
ICE free since '18 / 100K+ 100% BEV miles since '14
LEAF '13 SL (mfg 12/13, leased 4/14, bought 5/17, sold 11/18, 34K mi, AHr 58, SOH 87%)
Tesla S 75D (3/17, 46K mi)
Tesla X 100D (12/18, 26K mi)
8.9kW Solar PV and 2x Powerwall

DougWantsALeaf
Posts: 2685
Joined: Fri May 10, 2013 8:21 pm
Delivery Date: 18 May 2013
Leaf Number: 407811
Location: Chicago North Side

Re: Nissan NA source code leaked online

Fri Jan 08, 2021 4:58 pm

If it doesn't come back in a day, it could be your telematics unit. I had to have mine replaced a month ago.
2019 S Plus (93.86% SOH) & 2019 SV Plus (93.35% SOH) Both Silver
2013 Leaf SV sold 2019 with 11 bars
100 Mile Club Member (Number 87)
Max Miles on 13 Leaf: 120 miles
Max Miles on 19 SV+: 242 Highway miles @ 4.5 miles/kWh

LeftieBiker
Moderator
Posts: 16914
Joined: Wed May 22, 2013 3:17 am
Delivery Date: 30 Apr 2018
Location: Upstate New York, US

Re: Nissan NA source code leaked online

Fri Jan 08, 2021 5:41 pm

I don't subscribe to any texts, but I've been using the app to start my climate control every morning so I can go put out cat food for some ferals, and the app has failed only once in the last 6 weeks - and that was last month.
Brilliant Silver 2021 Leaf SV40 W/ Pro Pilot & Protection
2009 Vectrix VX-1 W/18 Leaf modules, & 2 lithium E-bicycles.
BAFX OBDII Dongle
PLEASE don't PM me with Leaf questions. Just post in the topic that seems most appropriate.

Return to “Business / Economy and Politics”