Live data from Hacker News

What does your car know about you? We hacked a Chevy to find out

washingtonpost.com

51–60 of 115 posts

Re: What does your car know about you? We hacked a Chevy to find out

#51

Since everyone's phone is tracked 24/7/365, what does it matter if you're in a car or not?

If you are confident in the privacy commitment of your phone manufacturer, then that is not as much a concern. I don’t have any trust in any car company, and none of them seem to care.

Re: What does your car know about you? We hacked a Chevy to find out

#52

Most car makers are global - and sell heavily in European markets, which are covered by the GDPR. So I suspect that for these manufacturers, many brands will be GDPR compliant by default. That said: - Under what principle is data collected (Article 6) - What measures have they put in place to enable access to PI (Article 15) - How consent may be withdrawn (Article 7) - How consent may be obtained when a vehicle is so…

The new ford hud's/entertainment systems ('19) have quite a lot of "EU only" settings correlated to sending data and EuroNCAP test requirements which are not enabled now but can be if required (I decompiled the programs looking for specific settings). I'm pretty sure most data gathering is off at the moment and you can always remove the connectivity module which also disables remote start and stuff of course. In that case, also do not connect to your phone via WiFi as it will try to connect to the internet though it.

At the moment it only sends your VIN, installed updates and the configuration data and as far as the internet has figured out nothing is done with it, but it is worrying.

You still have to opt in to the FordPass systems though.

Re: What does your car know about you? We hacked a Chevy to find out

#53

Since everyone's phone is tracked 24/7/365, what does it matter if you're in a car or not?

If you are confident in the privacy commitment of your phone manufacturer, then that is not as much a concern. I don’t have any trust in any car company, and none of them seem to care.

>Well, apparently AT&T, Sprint, and T-Mobile all sell data—including geographic locations associated with customer phone numbers—to a variety of sketchy third-party companies.

Source: https://www.howtogeek.com/402043/can-anyone-really-track-my-...

Re: What does your car know about you? We hacked a Chevy to find out

#54
post #46

Most car makers are global - and sell heavily in European markets, which are covered by the GDPR. So I suspect that for these manufacturers, many brands will be GDPR compliant by default. That said: - Under what principle is data collected (Article 6) - What measures have they put in place to enable access to PI (Article 15) - How consent may be withdrawn (Article 7) - How consent may be obtained when a vehicle is so…

I mean, except Ford and Tesla, none of the American brands are very popular in Europe. I guess this would move affect European and Asian car makers that can collect more data outside of Europe.

Tesla is not popular in Europe. Two orders of magnitude fewer units sold vs the popular brands.

http://carsalesbase.com/european-car-sales-analysis-july-aug...

Re: What does your car know about you? We hacked a Chevy to find out

#55
post #8
post #2

This is the primary reason why I sold my car and went carless the instant that was a feasible thing to do. If I should need to own a car in the future, it will be an older, pre-spying, one.

You're the first person I've met to claim that their aversion to motorized transportation had a basis in privacy.

I'm the second.

Re: What does your car know about you? We hacked a Chevy to find out

#56
post #3

Removing OnStar antenna and power was one of the first things I did on my new GM truck. It doesn't require any special tools or knowledge and only takes several minutes. The fact I had to do any of this at all instead of being asked to opt-in to data collection is depressing, but not unexpected in today's data-hungry market.

>not unexpected in today's data-hungry market.

It's worth noting that this sort of data collection shouldn't be simply driven by the market and what it can get away with.

There's a big gap in US law where collecting data like this for certain uses shouldn't be legal, and there should be laws governing whether or not e.g. an insurance company can access and store data from your car in the event of an accident.

US laws have never been updated for privacy in the computer age simply because the people who have kept themselves in power for that long do not choose to do so.

US Citizens assume that there's a legal safety blanket associated with corporations and what they're allowed to do because for non computer related privacy issues, the laws generally agree with common sense. Corporations can't open other people's mail just because it's laying in the car when they tow it from an accident, that's illegal.

People assume the same is the case with the data they enter into their car computers, and it's completely untrue.

Re: What does your car know about you? We hacked a Chevy to find out

#57

Since everyone's phone is tracked 24/7/365, what does it matter if you're in a car or not?

If you are confident in the privacy commitment of your phone manufacturer, then that is not as much a concern. I don’t have any trust in any car company, and none of them seem to care.

You might trust Apple, but do you trust your carrier?

Re: What does your car know about you? We hacked a Chevy to find out

#60

Earlier quoted context omitted.

They have enough volume that there doesn't have to be much money involved per vehicle to make US specific versions.

Of course if a US-spec vehicle is exported to the EU, GDPR then applies to any data collected by that manufacturer from that vehicle.

That liability will be on the importer though, in the same way that making the indicators and emissions systems compliant to EU standards would be
Post reply on HN