For the Viper alarms, the modify user request isn’t validated at the server, so if you form the right HTTP request, you can change any user’s password. The Pandora system lets you change the ...