Live data from Hacker News

Tesla workers shared sensitive images recorded by customer cars

reuters.com

421–430 of 521 posts

Re: Tesla workers shared sensitive images recorded by customer cars

#421

Earlier quoted context omitted.

Both violate user privacy and imply a need for better data privacy protections. One was targeted and the other was not, but they are in the same class of issues even if the severity is different.

Google's was a rogue employee that was caught. Tesla seems to be a cultural problem where employees think it's OK.

https://nypost.com/2022/11/26/twitter-liberals-nervous-about...

There is indeed a culture problem.

Re: Tesla workers shared sensitive images recorded by customer cars

#422
post #301

Seems like a lot of commenters came away from this article thinking that Tesla employees are seeing and sharing images from inside the car? Because that’s not what was reported, and it’s not what happened. But they certainly didn’t go out of their way to make that clear. If the car drives past someone who is naked, the cameras record it, and the driver has opted in to data sharing, then someone on Tesla’s labeling te…

> If the car drives past someone who is naked, the cameras record it, and the driver has opted in to data sharing, then someone on Tesla’s labeling team might see it.

I'm not sure how the opt-in procedure works for Tesla. Is it truly opt-in? That is, does a Tesla driver positively select to share data, or are they "opted-in" by default? If the latter, are they presented with the option to opt out, or do they have to dig around in the menu to find where to opt out?

Regardless, it's not informed consent if Tesla misrepresents how it uses that footage, as it seems they do.

They've also got a really different definition of anonymous data than I've ever seen...

Re: Tesla workers shared sensitive images recorded by customer cars

#423
post #294

Reminds me of the time I bought lunch at work, and a colleague told me exactly what I bought and how much I paid for it. I called him out and said it was a lucky guess, and then he proceeded to tell me my entire payment history for the past 2 days. Turns out when I was buying lunch, he was on the phone with a friend who worked at Paytm and that guy gave away my transaction history for shits and giggles. My trust in p…

That's horrific. I work for a fairly large payment processor and it takes multiple levels of approval and oversight from several levels of management to get time limited access to a production database or client interface - all access being logged and ticketed along the way. The idea that someone could just start looking up transactions for shits and giggles would be unheard of.

> The idea that someone could just start looking up transactions for shits and giggles would be unheard of.

What about the DBA maintaining the database? Do they not have query access to the data? How about the devs who are responsible for reporting; do they develop reports using generated test data? It’s naive to believe that data is entirely secure and private. There’s always a level of trust required from employees to not share private data that they may see on the job.

Re: Tesla workers shared sensitive images recorded by customer cars

#424
post #396

Earlier quoted context omitted.

It's hard for me to say whether you are correct or not; I was under the impression that the data was updated on the DB instance, and in that case I stand by what I said (the prod data would end up on the laptop, but then as soon as the command was run, it would get permanently obfuscated). If the data was just obfuscated on screen, then yes, perhaps you are correct. Something I have seen done before that I thought wa…

Let's go back to https://news.ycombinator.com/item?id=35473227 and see what was said. > ...I would copy their db onto my Mac, run the mongler on it, and then I would take the database home with me, without worrying whether the theft of my Mac could lead to lives being ruined. From that, it was definitely run against a copy of the database. The code that you showed looks like PHP display code. So it will change what i…

That was implicitly intended to be part of menu template code, so it would show the “Mixed Fruit” option only if it wasn’t prod, and as I tried to suggest in my comment, such code would not execute on prod (the endpoint/backend code would abort if it found itself running in prod). (And the mixed fruit code would, in fact, affect data in the DB). Tbh I think this discussion is less than pointless.

Re: Tesla workers shared sensitive images recorded by customer cars

#425

Earlier quoted context omitted.

> I expect the company will face a mass lawsuit from Tesla EV owners Doubt it. Tesla still hasn't really faced any consequences for selling FSD capabilities that don't yet exist, and for a lot of money. They haven't faced any real consequences for removing capabilities from their customers' cars with no renumeration. Tesla owners are a loyal bunch and forgive a lot.

Not sure what capabilities you think don't exist, everything I paid for is working on my car right now.

"FSD" in Europe is sold for 7500 EUR, and you can barely even get out of the garage with it.

Compared to systems from Mercedes it's not performing good at all.

It looks like Teslas are optimised or tested in the US.

Re: Tesla workers shared sensitive images recorded by customer cars

#426
post #350

Earlier quoted context omitted.

Yeah, you can definitely trust Tesla to keep their word and safeguard your data. I mean, otherwise there would be stories of employees passing around video footage stolen from customer’s cars, right?

I personally see a big difference between the reliability of the software enforcing the opt-in/opt-out, and the reliability of young humans hired cheaply to label video clips that were opted-in for sharing, who then see something salacious in the clip and can’t resist copying it. I assume this happens universally with all these cloud connected microphones and camera products. My general approach is I can trust that t…

I see your point, but for me they both speak to a culture that has no respect for their customer.

Re: Tesla workers shared sensitive images recorded by customer cars

#427

Reminds me of the time I bought lunch at work, and a colleague told me exactly what I bought and how much I paid for it. I called him out and said it was a lucky guess, and then he proceeded to tell me my entire payment history for the past 2 days. Turns out when I was buying lunch, he was on the phone with a friend who worked at Paytm and that guy gave away my transaction history for shits and giggles. My trust in p…

I fully expect this in India. There is no privacy in India and no education or awareness of it either. There are no laws and so no expectations either. I don’t if it’s still prevalent but I know friends who had folks from some company knock on their doors saying they will take a sample and do free blood tests and add it to their website to track it as a service. This is pre covid

Re: Tesla workers shared sensitive images recorded by customer cars

#428

Earlier quoted context omitted.

What you must understand is that this is human nature not "private companies." When I was in high school I had a friend who worked at one of those 1-hr photo processing places. People would bring their film in to have prints made. And there were no small numbers of "intimate" photos on those rolls of film. Yes even in the days of film cameras, people took photos of themselves in sexual situations. Of course my friend…

Right, so the problem is still private companies not putting in the effort to build in privacy to prevent this. For physical film it’s hard, but for software you should at the very least record access to personal data and audit it to make sure people actually need it and aren’t abusing whatever permissions they are using to get the data.

[deleted]

Re: Tesla workers shared sensitive images recorded by customer cars

#429
post #233
post #149

Earlier quoted context omitted.

This is what makes the lie more potent. It’s based on a kernel of truth, and because it reinforces beliefs, you can easily believe a Paytm employee acted negligently, with no more evidence than an anecdote.

Doesn't really matter, because unless PayTM proves it's impossible, someone is doing it. Do they have an external auditor report?

It could totally be just a competitor of PayTM coming here trying to spread lies ¯\ (ツ) /¯

The requirement of proof is the other way around:

If PayTM decides to sue the owner of the comment, it would be the owner of the comment to prove what he is saying.

Re: Tesla workers shared sensitive images recorded by customer cars

#430

Earlier quoted context omitted.

It sounds like he was an influential early investor, but the situation you've described isn't what I would typically think of as "founding" a company. I'm surely not alone in this, thus the present debate. This isn't to diminish Musk's huge influence either; but folks tend not to love when the meanings of words are changed for PR.

[flagged]

Musk was not a founder. He might have been an early investor but he didn't found the company. Stop lying with your fucking propaganda. I hope Musk bought you a pony for your bullshit. You are a musk shill. Stop trying to rewrite history you shill.
Post reply on HN