Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Internet-connected cars fail privacy and security tests conducted by Mozilla

gizmodo.com

Post reply on HN
Print view View original

181–190 of 660 posts

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#181

Post by lost_tourist »

KMag wrote: post #123
TedDoesntTalk wrote: post #82

Earlier quoted context omitted.

My insurance company has a phone app that collects the same info - speed, deaccelation (gyroscopes), etc. the app is optional but qualifies you for a discount after 3 months of app history, if your driving pattern meets their standards. They told me they do not impose rate increases based on the app’s reporting, only discounts. I did not install it but the point is: You don’t need a car device anymore.

My insurance company's app sometimes detects commuter train rides as car trips. As far as I can tell, there's no way to tell it "No, I'm not actually driving now".

they'd be able to tell by the GPS coordinates, whether they bother, who know?

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#182

Post by gonehome »

cpursley wrote: post #143
tristor wrote: post #132

Of all the horrible things go on with privacy these days, this is the one I hate the most. I’m a “car guy”, but not the sort that obsesses over old cars (although I do love 60s and 80s cars). I like new tech, I like the advances in engineering we’ve made in new vehicles, I like EVs even. Nonetheless I’ve been in the market for a new car for months and haven’t bought because it’s hard to find any cars that meet my req…

The touchscreens are really a dealbreaker on new cars. They’re not just prone to quick obsolescence, they’re dangerous.

[flagged]

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#183

Post by wing-_-nuts »

aftbit wrote: post #161
uberdru wrote: post #84

Earlier quoted context omitted.

I am still driving my '09 4Runner. Cheap to own/maintain, ridiculously reliable. And no touch screen. Perfection! Anything made after about 2015 feels WAY over-engineered, for my tastes at least.

Depending on your climate, you should probably have the right front frame member inspected for rust. My father had an '09 4Runner & got into a front-end crash. In the process that member was exposed, and while it looked fine on the outside, it was full of rust from the inside and quite thin. Don't get me wrong, I drive an '01 Ranger that is more rust than steel at this point, but it is still good to know what you hav…

>I drive an '01 Ranger that is more rust than steel at this point

You poor man. I had a 3.slow 6 cyl. 0-60 in 16s was almost an accomplishment. I guess that's what you get when you have a 155hp motor trying to pull a 3800 lb vehicle.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#184

Post by catlover76 »

9g3890fj2 wrote: post #9

I connect my phone to my 2015 Nissan's bluetooth, but just for music. GrapheneOS lets me prevent its access to my contacts, call history, active calls, text messages - anything but music audio. To me (but not the less tech literate, I know), if you're connecting your car to your phone, it's obvious that it is able to gather things about you. That said, because I don't know much about cars, I don't know if the car is…

When you connect a phone to most cars via Bluetooth, the call and general audio permissions are separate from text message and contact info. So for example, in my mom's new car, I connect my phone so that when I drive it, I can take phone calls and listen to music. But for example it can't even display the contact name of contacts who call me, because it doesn't have access to that, so it just displays the phone number.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#185

Post by lost_tourist »

taylodl wrote: post #138

This article doesn't go into any benefits to the driver/user, if available. With all the cameras and microphones in cars these days they can at least send the insurance companies all the data when an accident occurred. Were you on the phone? Driving the speed limit? Have your seat belt on? Braking hard to avoid (or cause) an accident? Heck, give me a monthly riding report with information such as how fast I accelerat…

that sounds like a nightmare to me and should have to be opted into, I would never purchase a car with that. I'll just get a motorcycle and risk my life.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#186

Post by OnACoffeeBreak »

0xcafefood wrote: post #13

It almost feels silly to ask, but is this legal even in the United States with its comparatively weak privacy laws? In many states, a vehicle is legally an extension of the home. So legal rights and protections that apply in one's home also apply in one's vehicle. Is the idea that, buried somewhere in the legalese, is a statement that the buyer is granting the automaker the right to spy?

I am very unfamiliar with specific state laws regarding this, but there's a federal exception for automobiles when it comes to the Fourth Amendment:

https://en.wikipedia.org/wiki/Motor_vehicle_exception

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#187

Post by kayodelycaon »

taylodl wrote: post #138

This article doesn't go into any benefits to the driver/user, if available. With all the cameras and microphones in cars these days they can at least send the insurance companies all the data when an accident occurred. Were you on the phone? Driving the speed limit? Have your seat belt on? Braking hard to avoid (or cause) an accident? Heck, give me a monthly riding report with information such as how fast I accelerat…

I have a new Toyota and the owner’s manual mentions the car has a black box that records a number of parameters.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#188

Post by wahnfrieden »

>The kind of information collected varies from personal information like medical data to how drivers are using the vehicle itself — such as how fast they drive, where they drive, and even the music they listen to. Both Nissan and Kia are noted to allow the collection of information regarding a user’s sex life.

>Eighty-four percent of the reviewed car brands share personal user data with service providers, data brokers, and potentially sketchy businesses, according to the report, with 76 percent claiming the right to sell that personal data.

>Tesla was the worst-ranked brand in the study, getting flagged in every privacy category — only the second time this happened.

>Alongside the report, Mozilla also published a breakdown explaining how car companies collect and share user data. This can include anything from the user’s name, address, phone number, and email address to more intimate data like photos, calendar information, and even details on the driver’s race, genetic information, and immigration status. Mozilla says it also couldn’t confirm that any of the automakers could meet the organization’s minimum security standards regarding data encryption and protection against theft. In fact, it claims dating apps and even sex toys typically provide more detailed security information about their products than cars.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#189

Post by Digory »

stanski wrote: post #168
tristor wrote: post #147

Earlier quoted context omitted.

I hate them so much. Otherwise great cars are completely ruined by touchscreens. What was wrong with tactile knobs you could operate one handed without looking? You’re driving for fuck’s sake. It’s why things like the GR Corolla are nearly miraculous in 2023, it even comes stick shift only.

I assume it's a cost thing. Slapping a tablet everywhere and letting the code monkeys figure it out is probably cheaper than making various knobs and buttons. I dread the day I have to get a new car. Even Subaru, who are usually behind the curve, have gone all touch screen.

The feds have mandated a screen (for backup cameras).

Then the makers try to minimize costs by having the screen do everything.

I’d like to say I’d pay more for real buttons, but I’d never buy a new car.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#190

Post by phpisthebest »

flir wrote: post #164
loloquwowndueo wrote: post #113

Earlier quoted context omitted.

The manufacturer may have to legally include the functionality in cars they sell but in pretty sure the owner isn’t obligated to use or keep the functionality untouched. By comparison if your seat belts are all frayed and you don’t wear them anyway that’s on you, manufacturer sold you a car with seat belts in good condition and that as far as the “compliance” requirement goes.

Frayed seatbelts won't pass an MOT in the UK. (Don't know about any other country).

I have no required inspections here in the US... No Emissions, no Safety, no inspections at all
Post reply on HN