The "inshitification" now extends to our cars.
Internet-connected cars fail privacy and security tests conducted by Mozilla
61–70 of 660 posts
Re: Internet-connected cars fail privacy and security tests conducted by Mozilla
#62Re: Internet-connected cars fail privacy and security tests conducted by Mozilla
#63I connect my phone to my 2015 Nissan's bluetooth, but just for music. GrapheneOS lets me prevent its access to my contacts, call history, active calls, text messages - anything but music audio. To me (but not the less tech literate, I know), if you're connecting your car to your phone, it's obvious that it is able to gather things about you. That said, because I don't know much about cars, I don't know if the car is…
Yeah, it's usually a cell module (older ones were 3G). Many times it's on its own daughter board and you can disconnect the bridge to the main board, or otherwise unplug it so it can't communicate with the car or towers. I did that to my car that has OnStar and the Bluetooth etc worked fine, but it couldn't transmit/connect to any network.
Re: Internet-connected cars fail privacy and security tests conducted by Mozilla
#64I connect my phone to my 2015 Nissan's bluetooth, but just for music. GrapheneOS lets me prevent its access to my contacts, call history, active calls, text messages - anything but music audio. To me (but not the less tech literate, I know), if you're connecting your car to your phone, it's obvious that it is able to gather things about you. That said, because I don't know much about cars, I don't know if the car is…
One more reason I'm glad I connect my phone with a headphone jack. Just an analog connection carrying audio. The car doesn't even know what it's playing, as far as I know. Though some cars do seem to extract track names and artist names over the aux jack, so I think there's a little more than just an analog signal?
This sounds like the content recognition they do on TVs. If that's the case, this is creepy as fuck.
Re: Internet-connected cars fail privacy and security tests conducted by Mozilla
#65I've got a 2018 Jeep Grand Cherokee and I've been searching for where the sim card is for the built in cellular modem so I can rip it out. It astounds me that there aren't more people interested in cutting off the constant telemetry and to be honest it wouldn't surprise me if the car refuses to operate correctly when I do figure out where it's at and pull it.
> it wouldn't surprise me if the car refuses to operate correctly
I know of a car (Renault in EU) whose SIM access is broken somehow that still works fine, just can't call home. No guarantee that every car will handle it gracefully, but at least some regions don't seem to mandate any enforcement if that module happens to "break".
Re: Internet-connected cars fail privacy and security tests conducted by Mozilla
#66I connect my phone to my 2015 Nissan's bluetooth, but just for music. GrapheneOS lets me prevent its access to my contacts, call history, active calls, text messages - anything but music audio. To me (but not the less tech literate, I know), if you're connecting your car to your phone, it's obvious that it is able to gather things about you. That said, because I don't know much about cars, I don't know if the car is…
All new EU cars since 5 years ago are obligated to have 'eCall' which contacts emergency services in case of a crash. Most manufacturers solve that problem by including a 4G module. Older cars also collect information. Most dealers read out the nav computer drive at service intervals so they also know where you've been, who you called etc, only a bit later.
Another reason to do my own service or find a trusted independent shop.
Re: Internet-connected cars fail privacy and security tests conducted by Mozilla
#67I connect my phone to my 2015 Nissan's bluetooth, but just for music. GrapheneOS lets me prevent its access to my contacts, call history, active calls, text messages - anything but music audio. To me (but not the less tech literate, I know), if you're connecting your car to your phone, it's obvious that it is able to gather things about you. That said, because I don't know much about cars, I don't know if the car is…
One more reason I'm glad I connect my phone with a headphone jack. Just an analog connection carrying audio. The car doesn't even know what it's playing, as far as I know. Though some cars do seem to extract track names and artist names over the aux jack, so I think there's a little more than just an analog signal?
An analog jack should just be an analog signal, the beauty of it for applications like this being that it just works and for a variety of devices including the very first Sony Walkman to name just something which did not include any extra information. While in theory it is possible to encode extra and inaudible information in there, it seems more likely that if a car then knows what is playing it is just using Shazam or similar.
Re: Internet-connected cars fail privacy and security tests conducted by Mozilla
#68There's telemetry, and then there's this https://arstechnica.com/tech-policy/2023/04/tesla-workers-sh...
[deleted]
Re: Internet-connected cars fail privacy and security tests conducted by Mozilla
#69I connect my phone to my 2015 Nissan's bluetooth, but just for music. GrapheneOS lets me prevent its access to my contacts, call history, active calls, text messages - anything but music audio. To me (but not the less tech literate, I know), if you're connecting your car to your phone, it's obvious that it is able to gather things about you. That said, because I don't know much about cars, I don't know if the car is…
Don't Android and iOS by default prevent bluetooth from accessing your contacts and calls. I know on Android you have to click a permission popup when connecting to bluetooth to allow contact and call access
Same on iOS.
Re: Internet-connected cars fail privacy and security tests conducted by Mozilla
#70How does GDPR affect this issue for cars bought/sold in EU market? Is the opt out complete? Does the right to be forgotten after the fact apply?