Live data from Hacker News

Internet-connected cars fail privacy and security tests conducted by Mozilla

gizmodo.com

11–20 of 660 posts

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#11
post #5

Yes, and that is why I will never buy new unless in the contract I have; 1. No data harvesting 2. If I or anyone discovers any kind of data harvesting, at any time, I get a full refund of the original purchase price plus interest plus 2000 USD from the manufacture. If not received in 6 months, it double ever 6 months. But from what I understand, I heard due to Massachusetts "Right to Repair", all of that is turned of…

How do you buy a car that meets those criteria?

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#12
post #5

Yes, and that is why I will never buy new unless in the contract I have; 1. No data harvesting 2. If I or anyone discovers any kind of data harvesting, at any time, I get a full refund of the original purchase price plus interest plus 2000 USD from the manufacture. If not received in 6 months, it double ever 6 months. But from what I understand, I heard due to Massachusetts "Right to Repair", all of that is turned of…

How do you buy a car that meets those criteria?

You don't.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#13
It almost feels silly to ask, but is this legal even in the United States with its comparatively weak privacy laws? In many states, a vehicle is legally an extension of the home. So legal rights and protections that apply in one's home also apply in one's vehicle. Is the idea that, buried somewhere in the legalese, is a statement that the buyer is granting the automaker the right to spy?

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#15
post #2

I've got a 2018 Jeep Grand Cherokee and I've been searching for where the sim card is for the built in cellular modem so I can rip it out. It astounds me that there aren't more people interested in cutting off the constant telemetry and to be honest it wouldn't surprise me if the car refuses to operate correctly when I do figure out where it's at and pull it.

There probably isn't a physical SIM card anymore. It probably just has an eSIM.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#16
post #2

I've got a 2018 Jeep Grand Cherokee and I've been searching for where the sim card is for the built in cellular modem so I can rip it out. It astounds me that there aren't more people interested in cutting off the constant telemetry and to be honest it wouldn't surprise me if the car refuses to operate correctly when I do figure out where it's at and pull it.

overwhelm the brain with input. to hold onto threads like this one, you have to be fairly healthy or fairly mad.

not strapping on tin foil hat, this likely isn’t some massive coordinated effort. it could be done “better.”

this is just making the most of the situation. at scale.

if you simplify the question, “Who wants to let their car manufacturer surveil them?” - the answer is also simple. very few hands are going to be raised.

most people don’t get the tl;dr - they drown in the firehose.

what isn’t out there is a friendly, accessible version of what you’re looking for - multi-manufacturer information on snipping the sensors, why and how, and what you lose in the exchange. if it is out there, it isn’t friendly enough to be readily found.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#17
post #2

I've got a 2018 Jeep Grand Cherokee and I've been searching for where the sim card is for the built in cellular modem so I can rip it out. It astounds me that there aren't more people interested in cutting off the constant telemetry and to be honest it wouldn't surprise me if the car refuses to operate correctly when I do figure out where it's at and pull it.

It’s an eSim. Not a physical SIM card afaik.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#18

> Kia’s privacy policy reserves the right to monitor your “sex life,” Please tell me this is lawyer CYA boilerplate, or is there a way for the shocks to tell "if this van's a rockin', don't come a knockin'".

somewhere a data scientist is cackling.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#19
post #5

Yes, and that is why I will never buy new unless in the contract I have; 1. No data harvesting 2. If I or anyone discovers any kind of data harvesting, at any time, I get a full refund of the original purchase price plus interest plus 2000 USD from the manufacture. If not received in 6 months, it double ever 6 months. But from what I understand, I heard due to Massachusetts "Right to Repair", all of that is turned of…

How do you buy a car that meets those criteria?

[deleted]

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#20

I connect my phone to my 2015 Nissan's bluetooth, but just for music. GrapheneOS lets me prevent its access to my contacts, call history, active calls, text messages - anything but music audio. To me (but not the less tech literate, I know), if you're connecting your car to your phone, it's obvious that it is able to gather things about you. That said, because I don't know much about cars, I don't know if the car is…

I dug into the article, specifically the Nissan section. It reads like the car itself _could_ be gathering information on its own. IMO, the Nissan phone app is the more likely culprit here.

Unless there's something wild going on with XM, or there's a WiFi backdoor, the only other way the car is getting data out is over OBD2. And that's all engine, tires, and performance stuff: https://www.amazon.com/Turbo3-Leaf-Spy-Pro/dp/B00PMLTPN0/?ta...

Edit: OH. Looks like there's Over-the-air updates on some models. https://www.nissanusa.com/connect/features-apps/over-the-air...

> The wireless features in your vehicle, including Over the Air Updates require use of your in-vehicle modem (if equipped). While Over the Air Updates are being made, some other wireless features may be unavailable or may require a wired connection. Please see FAQs for additional information.

Post reply on HN