Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hacking Subaru: Tracking and controlling cars via the admin panel

samcurry.net

Post reply on HN
Print view View original

111–120 of 334 posts

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#111

Post by selimthegrim »

beezle wrote: post #59
jeroenhd wrote: post #22

Earlier quoted context omitted.

> Number 1 why you need a car connected to the internet all the time To open the car with an app (programming against Bluetooth is harder than calling a web API), or honk the horn if you lost it in a large parking lot. > And how you're not required to sign at least 10 forms to confirm you understand that ALL of your travel data will be recorded and distributed at will. Legally speaking, I believe that depends on your…

Just as an aside - a friend had their car nicked in NYC this winter. He was able to tell the cops the car location from some Toyota find my car type thing. The cops said they saw nothing on the street so unless he could come and make the horn beep infront of a garage - and then get a warrant - there was nothing more to do. He now has a new vehicle.

This might say more about the NYPD than Toyota

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#112

Post by dantillberg »

Last year, I submitted a "right to know" request to Subaru, and they sent the following back. I've reformatted it for legibility. Basically asserts they'll do and sell whatever they want (except another car to me).

> Subaru may collect the following personal information about a consumer:

> Categories of personal information:

> Identifiers: Consumer records, Commercial information, Internet or Other Electronic Network Activity, Audio recordings, Vehicle geolocation, Professional or employee-related information, Inferences, Sensitive personal information

> Categories of sources from which the personal information is collected: Retailers, i.e. authorized Subaru dealerships , Provided by consumer or vehicle, Third parties

> Business or commercial purpose for which Subaru collects or sells personal information: To provide services to the consumer, To market goods and services to consumers, To provide marketing by third parties for third party goods and/or services, To comply with legal obligation

> Categories of third parties with whom the personal information is shared: Business service providers, Contractors, Retailers, Corporate parent and affiliates, Third party providers of goods and/or services, Entities required to comply with the law

> Categories of personal information sold: Identifiers for third party marketing of goods or services., Consumer records for third party marketing of goods or services

> Categories of personal information disclosed for business purpose: Identifiers are disclosed to service providers, contractors, and third parties., Consumer records are disclosed to service providers, contractors, and third parties., Commercial information is disclosed to service providers, contractors, and third parties., Internet or other electronic information is disclosed to service providers, contractors, and third parties., Vehicle geolocation is disclosed to service providers., Inferences are disclosed to service providers and contractors., Sensitive personal information is disclosed to service providers and contractors.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#113

Post by LandoCalrissian »

godber wrote: post #38

This claims to bypass the telematics functionality: https://www.autoharnesshouse.com/69018.html > Note for customers retaining OEM headunit: This adapter can also be used for those wishing to remove/disable the OEM Subaru Telematics functions. This is done to eliminate the tracking cabability that Subaru has built into these vehicles. If this is you, we will need to add an additional part to this adapter to re-enable…

Awesome, thank you. Seems pretty straight forward.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#114

Post by DwnVoteHoneyPot »

ben7799 wrote: post #107

I have a 2013 Outback Limited that is basically right before all this stuff got really stupid and weird. It's a great car other than it's not very fast and it gets really bad gas mileage. Amazing in the snow. I have had it since December 2012, so I've had plenty of service visits where I got newer loaners. (I special ordered my car to basically load it but not have Starlink, not have the Sunroof, but have the leather…

In addition to your comments, I think Subaru's all-wheel drive system has been switched to electrical instead of mechanical, making it worse. There are roller tests on youtube which show Subaru AWD being outperformed by Ford AWD systems.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#115

Post by onetokeoverthe »

reaperducer wrote: post #109
rurp wrote: post #105

Earlier quoted context omitted.

Yeesh, which care manufacturer is this from?

Volvo.

The real owner of Volvo is Chinese automaker Geely. The company acquired the Swedish automaker from Ford in 2010 for $1.8Bil.

source.

https://www.fool.com/investing/how-to-invest/stocks/who-owns...)

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#116

Post by n_plus_1_acc »

bilekas wrote: post #19

> I didn’t realize this data was being collected, but it seemed that we had agreed to the STARLINK enrollment when we purchased it. This is mind blowing to me.. Number 1 why you need a car connected to the internet all the time ? And how you're not required to sign at least 10 forms to confirm you understand that ALL of your travel data will be recorded and distributed at will.

European eCall directive requires a sim card

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#117

Post by reaperducer »

jeroenhd wrote: post #22
bilekas wrote: post #19

> I didn’t realize this data was being collected, but it seemed that we had agreed to the STARLINK enrollment when we purchased it. This is mind blowing to me.. Number 1 why you need a car connected to the internet all the time ? And how you're not required to sign at least 10 forms to confirm you understand that ALL of your travel data will be recorded and distributed at will.

> Number 1 why you need a car connected to the internet all the time To open the car with an app (programming against Bluetooth is harder than calling a web API), or honk the horn if you lost it in a large parking lot. > And how you're not required to sign at least 10 forms to confirm you understand that ALL of your travel data will be recorded and distributed at will. Legally speaking, I believe that depends on your…

honk the horn if you lost it in a large parking lot.

Solved problem since at least the late 1980's. No internet required.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#118

Post by reaperducer »

rtkwe wrote: post #62
bilekas wrote: post #27

Earlier quoted context omitted.

> To open the car with an app (programming against Bluetooth is harder than calling a web API), or honk the horn if you lost it in a large parking lot I really hope this was sarcastic. How did we ever manage to find our cars before IoT cars …

You can also do other stuff like start the climate controls so the car is comfortable before you reach it on hot or cold days.

You can also do other stuff like start the climate controls so the car is comfortable before you reach it on hot or cold days.

Also a solved problem. This one since at least the 1970's. No internet required.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#119

Post by willis936 »

dylan604 wrote: post #74
rtkwe wrote: post #62

Earlier quoted context omitted.

You can also do other stuff like start the climate controls so the car is comfortable before you reach it on hot or cold days.

I could do that with a key fob well before connected cars were a thing. People just choose to ignore the most basic of information

And car manufacturers are incentivized to remove such valuable and logical features. Enshittification abounds.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#120

Post by nyokodo »

jcomis wrote: post #97
_huayra_ wrote: post #95

FYI for Subaru owners, you can opt out and have your data deleted anywhere in the US (not just California): https://www.subaru.com/support/consumer-privacy.html It'll take ~6 months or so, but they will send you a confirmation email.

fwiw I have done this and received no confirmation or anything after more than 6 months. I keep submitting, maybe its working, but it doesnt seem to actually result in a confirmable change. for sure my retailer, which are 3rd parties according to that page, still has 100% access to the data, as they were able to tell my car was in another state when I called recently. seems pretty troubling

> I have done this and received no confirmation or anything after more than 6 months

Sue them, make it a class action.

Post reply on HN