Security researchers discover severe API vulnerabilities in Pandora and Viper car alarms that allow remote tracking, engine shutdown, and eavesdropping on millions of vehicles. Both companies quickly fix the issues after a brief disclosure period.