A security researcher found that some traffic lights controllers are exposed on the internet and could be manipulated.