# Rogue firmware app **URL:** \ **Category:** Troubleshooting\ **Created:** [July 1, 2018, 1:37am UTC](https://community.particle.io/t/rogue-firmware-app/42800 "2018-07-01T01:37:27Z")\ **Posts on this page:** 3\ **Page:** 2
**Author:** ![HEng](https://avatars.discourse-cdn.com/v4/letter/h/c77e96/32.png) [@HEng](https://community.particle.io/u/HEng)\ **Post date:** [July 1, 2018, 10:10pm UTC](https://community.particle.io/t/rogue-firmware-app/42800/21 "2018-07-01T22:10:42Z")
I am saying that every additional step you add to the process adds cost, and not everyone is willing to do that. I am not saying it’s smart, but I have not ever worked on a project where some manager has not asked “do we really REALLY need that?” ---
**Author:** ![steelydev](https://sea2.discourse-cdn.com/flex026/user_avatar/community.particle.io/steelydev/32/5688_2.png) [@steelydev](https://community.particle.io/u/steelydev)\ **Post date:** [July 1, 2018, 10:13pm UTC](https://community.particle.io/t/rogue-firmware-app/42800/22 "2018-07-01T22:13:07Z")
I get you. ---
**Author:** ![kubark42](https://avatars.discourse-cdn.com/v4/letter/k/848f3c/32.png) [@kubark42](https://community.particle.io/u/kubark42)\ **Post date:** [July 2, 2018, 4:47pm UTC](https://community.particle.io/t/rogue-firmware-app/42800/23 "2018-07-02T16:47:39Z")
> [@ScruffR](#): > > This part is the key > > > [@kubark42](#): > > > > _added your device ID to their product **before** you claimed it_ This is just a race condition. It doesn't affect the possibility of an attack vector, just its success. If I am able to systematically discover product IDs-- they must not be truly random or else it's (almost) impossible for somebody to mistype one device ID and get another valid one-- then I can try add these IDs to my product list. If they've already been claimed then that attempt fails but presumably there are far more unclaimed IDs than there are claimed ones. [Previous page](https://community.particle.io/t/rogue-firmware-app/42800.md?page=1)