No mention of the irony of someone who doesn't use Google Play Services because he only uses open source software being willing to attach a device to his car, running closed source software, that tracks everything he does in his car?
[deleted]
An insurance company’s API exposed customers’ car location histories
31–40 of 69 posts
Re: An insurance company’s API exposed customers’ car location histories
#32What's the point of hiding the identity of the company here? The issue has apparently been fixed and I'd rather know which company had it so that I can avoid them.
Re: An insurance company’s API exposed customers’ car location histories
#33I can't believe that anyone would voluntarily sign up for this. Frankly, insurance isn't that expensive. Having a little third party controlled snitch hooked to your car is a security issue, period. The fact that the implementation is a shitshow is just icing on the cake.
at £1400 last year my insurance is expensive. Partly due to living in a city and using on street parking but mostly due to my age (The 15% discount for taking a black box still isn't worth it for me however.
Re: An insurance company’s API exposed customers’ car location histories
#34I can't believe that anyone would voluntarily sign up for this. Frankly, insurance isn't that expensive. Having a little third party controlled snitch hooked to your car is a security issue, period. The fact that the implementation is a shitshow is just icing on the cake.
at £1400 last year my insurance is expensive. Partly due to living in a city and using on street parking but mostly due to my age ( The 15% discount for taking a black box still isn't worth it for me however.
I drive a car with 380bhp, so while the insurance without the black box is about £300 more than the one with it, I'm pretty sure it's not worth getting the box. I pay about £1000/year at the moment.
Re: An insurance company’s API exposed customers’ car location histories
#35it's really sad how young online political activists have adopted privacy issues instead of adopting issues like workers rights, vacation time, pay, a strong welfare state, universal healthcare etc...
Why would he be capable of only addressing one issue at a time? If I fight against racial discrimination, for example, why does that mean I'm not also battling for workers' rights?
Re: An insurance company’s API exposed customers’ car location histories
#36No mention of the irony of someone who doesn't use Google Play Services because he only uses open source software being willing to attach a device to his car, running closed source software, that tracks everything he does in his car?
Because he is getting up to a 40% discount in exchange for sharing his location data while he is using his car, he should also run Google Play Services and share his location the whole time too? What?
Re: An insurance company’s API exposed customers’ car location histories
#37Earlier quoted context omitted.
Here's an interesting thought: what with the money there is to be made in security these days programmers that actually know everything there is to know about security will leave applications development. There is a good chance that the lure of security consultancy $ is resulting in a degradation of the quality of the applications.
Are you saying developers in general are subconsciously making low security products to raise the $ in security jobs globally, because they might some day switch career?
No, they're saying that if the money is in security, developers that know about security will go to security, and whoever remains as a developer will not be good at security.
Re: An insurance company’s API exposed customers’ car location histories
#38So they had this vulnerability live for 3 years, didn't even pay a bounty, and they still don't get named or shamed? What incentive is there to do a better job if they can just do a shitty job and nobody finds out? Name and shame, please!
[deleted]
Re: An insurance company’s API exposed customers’ car location histories
#39No mention of the irony of someone who doesn't use Google Play Services because he only uses open source software being willing to attach a device to his car, running closed source software, that tracks everything he does in his car?
I think I have a similar attitude. I have Google's location tracking on, but search history, YouTube history, etc turned off. I'm much more sensitive to digital privacy because it has complex, wide-ranging implications, whereas my location is a limited set of data that I'm more comfortable sharing with a semi-trusted company.
I wouldn't want to know a company when, how often and which doctors I consult for one. If you don't want to share your search history you may not want to share your location data either. I would see these as equivalent.
Re: An insurance company’s API exposed customers’ car location histories
#40No mention of the irony of someone who doesn't use Google Play Services because he only uses open source software being willing to attach a device to his car, running closed source software, that tracks everything he does in his car?
Because he is getting up to a 40% discount in exchange for sharing his location data while he is using his car, he should also run Google Play Services and share his location the whole time too? What?
Exactly. Being concerned about privacy doesn't mean that you don't have a price at which you'll sell specific data of yours.
We need these "personal data for discount" transactions to become more explicitly consensual. Despite the well-tuned sensitivities of those in this community, we have a long way to go before most consumers are informed about this unwitting marketplace.