Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tesla workers shared sensitive images recorded by customer cars

reuters.com

Post reply on HN
Print view View original

341–350 of 521 posts

Re: Tesla workers shared sensitive images recorded by customer cars

#341

Post by rocqua »

throwaway4837 wrote: post #247
hgsgm wrote: post #238

Earlier quoted context omitted.

Point of information: Doge was a meme before the coin. Dogecoin exists because it was created as a meme coin. Given that point, doge is an avatar of stupidity personified (caninified?) and so is a good fit for Twitter.

The coin was created as a joke. However, Dogecoin doesn't have any characteristics of a fake cryptocurrency. The technology is just as sound as Bitcoin's, as it's basically a fork of a fork of a fork with no crazy major changes. Logically, from a technical perspective, you can't think Dogecoin is a joke without also thinking Bitcoin is a joke, unless you disagree with the way Dogecoin changed the block parameters. Ba…

The value of crypto coins doesn't come from technology. It comes from faith in the technology. Inherently value is a social thing, and hence some of what underlies it is social too. Big part of that is the stated intent of a cryptocurrency. People can't rally around a joke about dogs as the best way to do money. People might rally around the first, most serious, and rather conservatively developed cryptocurrency though. Or perhaps the one that best allows computation on the blockchain, or the one that has the best track record of preserving privacy.

Re: Tesla workers shared sensitive images recorded by customer cars

#342

Post by natch »

bhelkey wrote: post #288
jacquesm wrote: post #190

Earlier quoted context omitted.

> Privacy is taken extremely seriously here in Germany. On paper. But there are plenty of examples of companies doing things that they shouldn't be doing.

Don't let the perfect be the enemy of the good. The important question is: what would the consequences be to a German car manufacturer given similar circumstances?

Given similar circumstances to what? Having a camera that is off by default and where it is up to the user whether to turn it on or not? What exactly is the problem?

Re: Tesla workers shared sensitive images recorded by customer cars

#343

Post by zaroth »

Karsteski wrote: post #306
zaroth wrote: post #280

Earlier quoted context omitted.

You know you can just touch a toggle on the UI to turn on/off data sharing? You can opt-out entirely too, but you won’t get software updates.

Is there a way to verify that all data sharing is turned off?

What would satisfy you that this was the case?

Third parties have analyzed the firmware and sniffed the traffic logs on their network to confirm it.

You could go as far as to snip the LTE antenna.

Re: Tesla workers shared sensitive images recorded by customer cars

#344

Post by a4isms »

avg_dev wrote: post #290
a4isms wrote: post #232

Earlier quoted context omitted.

These were the days before you could just ssh and/or vpn into a client's production system, so I would copy their db onto my Mac, run the mongler on it, and then I would take the database home with me, without worrying whether the theft of my Mac could lead to lives being ruined.

good ethics, bad data handling practices. Also, the code should not be allowed to run on a prod instance, even if it is triggered there. But, I'm sure you've figured this all out by now.

If you want to point out that I could have been even smarter thirty-plus years ago, the line forms to the left... Stretches down the block... Goes around the corner... &c.

But while my memory is imperfect, I believe that I hardcoded that feature to only work when running on my personal Mac SE/30, and also changed the feature/name to have a tossed salad metaphor.

Re: Tesla workers shared sensitive images recorded by customer cars

#345

Post by yardie »

SV_BubbleTime wrote: post #118
nix0n wrote: post #114

Earlier quoted context omitted.

> Time of flight camera staring at the driver’s face is kinda normal in car industry What?

[flagged]

You're going to need to be specific because there is probably no less than 2 dozen 3-letter agencies who would want this level of access.

Re: Tesla workers shared sensitive images recorded by customer cars

#346

Post by plagiarist »

smodo wrote: post #269
SoftTalker wrote: post #255

Earlier quoted context omitted.

What you must understand is that this is human nature not "private companies." When I was in high school I had a friend who worked at one of those 1-hr photo processing places. People would bring their film in to have prints made. And there were no small numbers of "intimate" photos on those rolls of film. Yes even in the days of film cameras, people took photos of themselves in sexual situations. Of course my friend…

I assume they don’t mean that they are baffled by human nature. The thing that’s sort of unexpected is that, knowing human nature, companies don’t build in safeguards for this kind of sh.

Exactly so. It is repugnant that level of access was even available to a employee based on nothing but curiosity. Unfortunately another part of human nature is that most people profiting off you don't give a shit about your privacy. This is why legislation such as HIPAA has to exist.

Re: Tesla workers shared sensitive images recorded by customer cars

#347

Post by jacquesm »

bhelkey wrote: post #332
jacquesm wrote: post #299

Earlier quoted context omitted.

German regulators are notoriously understaffed, see 'Wirecard'. I would not be surprised if there were no consequences at all until it hit the press or someone in a position of power was embarrassed.

> I would not be surprised if there were no consequences at all until it hit the press or someone in a position of power was embarrassed. At which point the Data Protection Authorities (GDPR enforcement) would get involved. They would almost certainly levy a hefty fine against the auto manufacturer.

Yes indeed. It's interesting that companies are willing to take these risks, sometimes knowingly.

Re: Tesla workers shared sensitive images recorded by customer cars

#348

Post by greenthrow »

throwaway4837 wrote: post #247
hgsgm wrote: post #238

Earlier quoted context omitted.

Point of information: Doge was a meme before the coin. Dogecoin exists because it was created as a meme coin. Given that point, doge is an avatar of stupidity personified (caninified?) and so is a good fit for Twitter.

The coin was created as a joke. However, Dogecoin doesn't have any characteristics of a fake cryptocurrency. The technology is just as sound as Bitcoin's, as it's basically a fork of a fork of a fork with no crazy major changes. Logically, from a technical perspective, you can't think Dogecoin is a joke without also thinking Bitcoin is a joke, unless you disagree with the way Dogecoin changed the block parameters. Ba…

The creator of Dogecoin intended it as a meme and called it stupid. That's just facts, it's not bashing it.

Re: Tesla workers shared sensitive images recorded by customer cars

#349

Post by btilly »

avg_dev wrote: post #290
a4isms wrote: post #232

Earlier quoted context omitted.

These were the days before you could just ssh and/or vpn into a client's production system, so I would copy their db onto my Mac, run the mongler on it, and then I would take the database home with me, without worrying whether the theft of my Mac could lead to lives being ruined.

good ethics, bad data handling practices. Also, the code should not be allowed to run on a prod instance, even if it is triggered there. But, I'm sure you've figured this all out by now.

Sorry, that code is strictly worse. Because while the website on the laptop looks fine, there is a database on the laptop which has all the sensitive information. Anyone with access to the laptop just makes a backup of that database and the damage is done.

Re: Tesla workers shared sensitive images recorded by customer cars

#350

Post by zaroth »

ryanwaggoner wrote: post #313
zaroth wrote: post #280

Earlier quoted context omitted.

You know you can just touch a toggle on the UI to turn on/off data sharing? You can opt-out entirely too, but you won’t get software updates.

Yeah, you can definitely trust Tesla to keep their word and safeguard your data. I mean, otherwise there would be stories of employees passing around video footage stolen from customer’s cars, right?

I personally see a big difference between the reliability of the software enforcing the opt-in/opt-out, and the reliability of young humans hired cheaply to label video clips that were opted-in for sharing, who then see something salacious in the clip and can’t resist copying it. I assume this happens universally with all these cloud connected microphones and camera products.

My general approach is I can trust that the data is not being exfiltrated from my device/car/network if I have configured it not to be uploaded to the cloud.

But if agree to share the clips and have them viewed by humans, then I certainly expect those humans to look at them, and yes potentially even laugh at them.

Post reply on HN