Live data from Hacker News

Hacking Subaru: Tracking and controlling cars via the admin panel

samcurry.net

91–100 of 334 posts

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#91
post #88

This is even worse than the VW data leak reported around a month ago. [1] [1] https://media.ccc.de/v/38c3-wir-wissen-wo-dein-auto-steht-vo...

Did you perhaps forgot to edit and add the link? I'm interested in hearing about that

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#92
post #59

Earlier quoted context omitted.

> Number 1 why you need a car connected to the internet all the time To open the car with an app (programming against Bluetooth is harder than calling a web API), or honk the horn if you lost it in a large parking lot. > And how you're not required to sign at least 10 forms to confirm you understand that ALL of your travel data will be recorded and distributed at will. Legally speaking, I believe that depends on your…

Just as an aside - a friend had their car nicked in NYC this winter. He was able to tell the cops the car location from some Toyota find my car type thing. The cops said they saw nothing on the street so unless he could come and make the horn beep infront of a garage - and then get a warrant - there was nothing more to do. He now has a new vehicle.

Is your comment supporting the find my car feature or saying it was useless?

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#93
post #48
post #38

This claims to bypass the telematics functionality: https://www.autoharnesshouse.com/69018.html > Note for customers retaining OEM headunit: This adapter can also be used for those wishing to remove/disable the OEM Subaru Telematics functions. This is done to eliminate the tracking cabability that Subaru has built into these vehicles. If this is you, we will need to add an additional part to this adapter to re-enable…

Is there anything like this for Toyota DCM? We bought a second-hand 2021 Highlander and thus did not sign any contract allowing our family to be tracked by Toyota. I went on a hunt recently for information on neutering the DCM but have thus far only found speculation and contradictory info.

Yeah it's bad out there. Don't do what the yahoos hacking up their harnesses have done. The Toyota DCM I'm familiar with has 3 coax antenna lines coming in. The outer 2 are cell and the inner is GPS. Pull the cell antenna cables out of the DCM and you should be good to go. Best to hunt down your vehicle's service manual and verify the procedure first.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#94
post #19

> I didn’t realize this data was being collected, but it seemed that we had agreed to the STARLINK enrollment when we purchased it. This is mind blowing to me.. Number 1 why you need a car connected to the internet all the time ? And how you're not required to sign at least 10 forms to confirm you understand that ALL of your travel data will be recorded and distributed at will.

There was a recent HN posting on the US banning Chinese car brands from being connected to the internet. https://news.ycombinator.com/item?id=42706212

If Chinese companies comply with the ban by providing car models without internet connectivity, it's hilarious to me that that the nationalist regulation could make Chinese branded vehicles more desirable from a security & privacy standpoint.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#96
post #49

Earlier quoted context omitted.

Hmm really? My Camry made it nearly 10 years, and my Civic still had a good battery 6 years in when I sold it. Regardless, the battery and DCM were both tested by Subaru. The battery tested bad, and the DCM tested for a high parasitic draw. I drove the car daily, and the battery would die if I didn't drive it for 4 days. I didn't just make this up either, search "DCM parasitic draw" on Google for more. Subaru even se…

Lots of places will say an average car battery's life is somewhere around 3-5 years. It is highly dependent on weather. Here where there are regularly long spans of 100F+ days, a battery will have done pretty good to make it five years; many die in 3-4. Same in very cold climates. If you're in a place with good weather all the time they'll last considerably longer.

or maybe even more importantly, a garage

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#97

FYI for Subaru owners, you can opt out and have your data deleted anywhere in the US (not just California): https://www.subaru.com/support/consumer-privacy.html It'll take ~6 months or so, but they will send you a confirmation email.

fwiw I have done this and received no confirmation or anything after more than 6 months. I keep submitting, maybe its working, but it doesnt seem to actually result in a confirmable change.

for sure my retailer, which are 3rd parties according to that page, still has 100% access to the data, as they were able to tell my car was in another state when I called recently. seems pretty troubling

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#98
post #88

This is even worse than the VW data leak reported around a month ago. [1] [1] https://media.ccc.de/v/38c3-wir-wissen-wo-dein-auto-steht-vo...

Did you perhaps forgot to edit and add the link? I'm interested in hearing about that

I hope you speak German.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#99
post #43

Imagine that manufacturer can do that without any hacks and your knowledge about data collecting. Now imagine that you sell those cars to foreign countries that your government consider as enemy. I'm curious when there will be some ban of car brand, like TikTok.

Chinese cars cannot connect to the cloud in the USA.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#100

Earlier quoted context omitted.

Remote start, climate etc from the app all require and always on connection (how else?). Tesla has the same thing. I use the remote app often - quite useful.

Remote start does not require an app nor an always on connection. I was able to do this with a key fob in the early 00s

Neither does climate control. If I remote start my Civic with its fob, it will heat or cool to the desired temperature I left it on. (And it will run the defroster if it's below a certain temperature outside.)

Having to think about the climate control is an anti-feature in itself, when that's a basic thermostat feature...

Post reply on HN