wow that's really fucking bad even the most basic security review of the api would have caught this. hyundai and kia are really fucking negligent.