Not going to lie , this post had me tear up a little . <| sep |> Okay , so going purely off of the video and the article , here ' s what I think is going on . 1 . Create open hotspot with a redirect to your ad of a free burger . Include link to Play Store . A red flag for sure , but I could absolutely see people falling for it . 2 . User installs app from the Play Store . I wasn ' t able to find Burger Deal from Promon AS in the Play Store , so I ' m guessing it ' s not public right now . 3 . The app might prompt to install a certificate and start a VPN similar to how Packet Captureapp . greyshirts . sslcapture works . This would be a huge red flag to anyone . Hopefully . 4 . User doesn ' t get a burger or does , maybe the thief won ' t leave them hungry ? , and keeps the app running in the background . Frustrated , user logs into the Tesla app to summon their car for the first time ? I don ' t know how the Tesla app handles sessions . 5 . Thief has login credentials , and drives away , only to be tracked by Musk and his team of space drone hunters . This can be prevented by employing common technology safety precautions on the user side , and certificate pinning on Tesla ' s app side .