221–230 of 334 posts
Earlier quoted context omitted.
It is an incentive to use Siri. You can’t actually use carplay if Siri is disabled.
I find this restriction weird as well. I would like to not have my privacy violated by voice assistants. I just want the phone interface to be accessible through the car display and to be able to control it through a dial ideally.
Earlier quoted context omitted.
Back when I used to do AppSec, these types of issues were extremely common. Software developers and their managers would argue endlessly about them not being real vulnerabilities, which meant I had to put together a proof of exploitability. And since these were interdepartmental fights, office politics get involved. Just one of the dozen or so reasons why I stopped doing AppSec and went back to development.
That seems like a culture issue rather than an appsec issue?
Earlier quoted context omitted.
I was lucky to have the DCM in my 2019 Outback (which is responsible for cellular communication and thus this whole STARLINK thing) replaced with a bypass box under the warranty program related to the end of 3G service. My car was trying to go online 30 times an hour or something like that, draining the battery enough that it needed to be replaced after just 4 years. They don't have enough new DCMs so they were willi…
> So at least my Subaru cannot connect to the cloud anymore. Sounds like something you can use to justify a higher selling price when the time comes
Earlier quoted context omitted.
My Subaru, a 2018 outback, would be completely battery dead if I left it parked for more than a week or so. Happened once at the airport, after which I started carrying a battery pack car starter. The guy at the airport who have us a jump said it happened all the time with Subarus in long term parking.
This isn’t all that uncommon in any vehicle.
Earlier quoted context omitted.
Good to know Seems pretty blanket wide legalese. The part about audio recordings seems a bit troublesome however
The non troublesome use-case is clicking the starlink button and taking to their support. Having bought a Subaru, I really tried to see where the consent is in the process. In my case, I think it’s the account establishment process that the dealer did.
is that even legal?
can one go to court for "absence of consent"?
Earlier quoted context omitted.
All cars in Europe must be connected to the internet at all times by law, to determine their location, in case of an accident the law states. https://europa.eu/youreurope/citizens/travel/security-and-em... In the US a bill was passed requiring driver impairment equipment on all vehicles and automatic deactivation of the vehicle if the driver is determined to be impaired. Current impairment technology monitors head an…
> All cars in Europe must be connected to the internet at all times by law, to determine their location The source you link very explicitly contradicts that: > Your eCall system is only activated if your vehicle is involved in a serious accident. The rest of the time the system remains inactive. This means that when you are simply driving your vehicle, no tracking (registering your car's position or monitoring your d…
Having developed back end portals like this one for much smaller companies I find it hard to believe that there is an open endpoint to reset a password without any type of verification. What goes wrong in development that this type of crap makes it to production?
He and I sat down on day one to poke around, mainly to get oriented, not expecting much l. Popped up Chrome's devtool network panel, refreshed the login page.
One of the first XHR rows was to an endpoint named “getKeys”
The return object was the root keys for the AWS prod account.
This crap is incredibly common. Maybe not that egregious, but close enough.
Earlier quoted context omitted.
I was lucky to have the DCM in my 2019 Outback (which is responsible for cellular communication and thus this whole STARLINK thing) replaced with a bypass box under the warranty program related to the end of 3G service. My car was trying to go online 30 times an hour or something like that, draining the battery enough that it needed to be replaced after just 4 years. They don't have enough new DCMs so they were willi…
That's avg time to replace a battery.
Earlier quoted context omitted.
But at least they're made in South Carolina.
Only the EX90 it seems is made in SC, possibly just assembled from parts made in China. All other electric Volvos (including Polestar) are straight from China. Gas models and hybrids are still built in Europe but are being phased out.