Live data from Hacker News

A CBP contract shows the risks in connecting your vehicle and your smartphone

theintercept.com

31–40 of 253 posts

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#31
post #28

From the marketing material: iVe currently supports AUDI, BMW, Buick, Cadillac, Chevrolet, Chrysler, Dodge, FIAT, Ford, GMC, HUMMER, Hyundai/Kia, INFINITI, Jeep, Lincoln, Mercedes-Benz, Maserati, Mercury, Nissan, Pontiac, Ram, Saturn, SEAT, Skoda, SRT, Toyota and Volkswagen Now you know which brands to avoid!

Any one left out of that list? Should I assume if I see one PSA-owned brand (for example), all PSA will be under contract and just not named because the list was too big? I'm just confused...

Honda, Subaru, Tesla to name some.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#32

From the marketing material: iVe currently supports AUDI, BMW, Buick, Cadillac, Chevrolet, Chrysler, Dodge, FIAT, Ford, GMC, HUMMER, Hyundai/Kia, INFINITI, Jeep, Lincoln, Mercedes-Benz, Maserati, Mercury, Nissan, Pontiac, Ram, Saturn, SEAT, Skoda, SRT, Toyota and Volkswagen Now you know which brands to avoid!

Well, at least that leaves Honda & Acura as well as Subaru and probably a bunch more regional brands I'm unaware of. Also I suppose Tesla...but we all know how much telemetry data those cars send back to base.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#33
post #30

Is there a reliable list of cars that do not surveil me, or that can be modified to not surveil me? I read a Bruce Schneier article a little while ago (maybe the article was much older) where he said that he looked, but didn't find one that met his other needs.

https://ondatashop.com/ive-vehicle-system-forensics/ says "iVe currently supports BMW, Buick, Cadillac, Chevrolet, Chrysler, Dodge, Fiat, Ford, GMC Hummer, Jeep, Lincoln, Maserati, Mercury, Pontiac, Ram, Saturn, Seat, Skoda, SRT, Toyota and Volkswagen vehicles generally as far back as 2008 models" - so older might be better :)

Used cars are already selling like hot cakes! now this!

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#34
post #8

I live in Washington State, where the state legislature recently voted to ban sales of gasoline powered cars after 2030. Aside from the fact that I enjoy drives through some pretty empty parts of the country, especially in the Southwest, where range is a concern (e.g., I drove the Great Basin Highway a few years ago), what bothers me about that measure is this sort of data collection thing. I wouldn't mind a move to…

You can't really buy a "dumb" gas car anymore either. I'm holding onto my 2011 Nissan Versa to the bitter end.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#35
post #4

Is there any surprising data? I'm not surprised it records destinations entered into satnav for example. I mean that's a fairly common trick in TV shows. > MSAB claims that this data can include “Recent destinations, favorite locations, call logs, contact lists, SMS messages, emails, pictures, videos, social media feeds, and the navigation history of everywhere the vehicle has been.” MSAB even touts the ability to re…

Have you checked?

Look up https://cccis.com/

Mobile/automotive networking has been a big thing for a while now, and there is no dearth of software people who will predate on most people's expectations that software only does what the UI makes apparent to them. Even if they don't realize they are contributing to it because they've been hired to do a job, but don't take the time to grok the consequences of the business model.

Never assume. Trust, but verify.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#36
post #28

Earlier quoted context omitted.

Any one left out of that list? Should I assume if I see one PSA-owned brand (for example), all PSA will be under contract and just not named because the list was too big? I'm just confused...

Honda, Subaru, Tesla to name some.

Mazda, Mitsubishi, Nissan

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#37
post #13
post #10

Earlier quoted context omitted.

Think about how much the iPhone improved over 9 years of sales from the original in 2007 to whatever model they had in 2016. Given how many manufacturers are jumping on the electric bandwagon, the extremely fast decline in the cost of batteries, the rate of progress to date AND these kinds of laws to give some good motivation, I think it's very safe to say the electric vehicles on sale 9 years from now (2030) will be…

>on sale 9 years from now (2030) will be vastly superior to today's offerings I hope you are right. Discounting the environmental and societal impact of mining the materials needed for these advancements and the electrical generation, my concern is selfish. We drive for vacations and sometimes push 12 hours a day. A quick fill up of gas in the minivan seems better than an hour or two of charging. Others have mentione…

The environmental and societal impact of EVs are largely localized. The impacts of internal combustion engines have been almost entirely externalized. While EVs will still have some negative impacts, it's a huge improvement over the status quo.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#38
post #8

I live in Washington State, where the state legislature recently voted to ban sales of gasoline powered cars after 2030. Aside from the fact that I enjoy drives through some pretty empty parts of the country, especially in the Southwest, where range is a concern (e.g., I drove the Great Basin Highway a few years ago), what bothers me about that measure is this sort of data collection thing. I wouldn't mind a move to…

Get a plug in hybrid.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#39
post #14

“Your phone died, you’re gonna get in the car, plug it in, and there’s going to be this nice convenient USB port for you. When you plug it into this USB port, it’s going to charge your phone, absolutely. And as soon as it powers up, it’s going to start sucking all your data down into the car.” That used to be just something seen in hostile devices. Now it's standard equipment.

Maybe those of us that understand this problem can and should help friends and family buy making/buying them a "USB condom"[1] and strongly encouraging that they use it anytime they want to plug something into USB for charging. This type of device can be as simple and cheap as a USB connector/cable with the data wires cut.

[1] A USB dongle that only passed the power pins through for charging. Data is either blocked or physically disconnected.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#40
How do CarPlay and Android Auto integrate with the car's entertainment system? My sense is that CarPlay mostly treats the car as an external display (and input device) and I would hope that Apple has thought about the amount of data that is exposed.
Post reply on HN