After hours of trial and error, he figured out that the heating system’s makers did not put any authentication or security protocols in place. So just with that number, and some fiddling, anyone could control the system remotely.

Read full article on Motherboard