Save the Plant - A man in the middle attack.

[mmaguigan]

The killswitch should, at a minimum, make use of a secure connection (eg. TLS v1.2) to the server before the check. The published value should be digitally signed to prevent the anti-ficus alliance (they don't like zebra plants much either) or other plant-terrorist networks from infiltrating vital life-support systems.

https://github.com/tylerjaywood/pleasetakecareofmyplant/blob/579dac5224c52655d3559ab9559aacdd4a089c7f/config.py#L33

Similar vulnerabilities exist in the weather inquiry that when leveraged would allow plant-rights separatists to dissuade the public into a panic wherein the either drawn or starve our noble hero. Examine the vendor interface and determine if TLS is supported and if there exist any further forms of API verification. In the worst case, consider reading data from a secure local sensor safely ensconced behind the demilitarized zone.