I'm sure you need something like identification or some other method than simply a VIN and nothing else -- would be beyond a poor practice otherwise.

If it was a risky thing to do, then I am unsure as to why Chrysler would endorse it by offering up Bob Frederick's VIN on their official blog site http://www.redletterdodge.com/2008/0...s-car-for-fun/ for everyone to use so they could track his car. I'm sure neither Chrysler nor Bob would appreciate any wrong doing. So if Chrysler themselves are confident with posting a VIN, *shrug*.

I'm all for keeping vital information safe. Heck, I see cases of identify theft all too frequently in my job. A VIN is not vital information. That's the point I'm trying to make, that there's a line between reasonable safety and paranoia.