Author Topic: wunderground accepts account password instead of station key  (Read 493 times)

0 Members and 1 Guest are viewing this topic.

Offline dolfs

  • Senior Member
  • **
  • Posts: 64
wunderground accepts account password instead of station key
« on: April 10, 2018, 03:40:10 AM »
By accident put my account password in the (plaintext) GET requests for real-time updates. Noticed it when I was network sniffing (see other post about rtupdate). Also noticed that sometimes these requests were successful and always were when switching to www.wunderground.com.

I have not looked to see if this is documented, but it seems very wrong. Why have station keys then?
--dolf

Ambient WS-1400-IP + MeteoBridge

Offline nincehelser

  • Forecaster
  • *****
  • Posts: 3337
Re: wunderground accepts account password instead of station key
« Reply #1 on: April 10, 2018, 05:02:04 AM »
By accident put my account password in the (plaintext) GET requests for real-time updates. Noticed it when I was network sniffing (see other post about rtupdate). Also noticed that sometimes these requests were successful and always were when switching to www.wunderground.com.

I have not looked to see if this is documented, but it seems very wrong. Why have station keys then?

That's the way it has always been.

Station keys were introduced to help eliminate the user password issue, but wunderground has not yet forced the issue once and for all.

 

anything