Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A CBP contract shows the risks in connecting your vehicle and your smartphone

theintercept.com

Post reply on HN
Print view View original

141–150 of 253 posts

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#141

Post by heavyset_go »

WarOnPrivacy wrote: post #7
gowld wrote: post #2

"The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized." CBP's warrantless searches are plainly unconstitutional.

Hence why land within 100mi of the border is known as the US Constitution Free Zone. ref: https://duckduckgo.com/?q=+constitution+free+zone

Which also contains areas within 100 miles of the coasts, international airports, and other "ports of entry".

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#142

Post by nomuthetart »

sjg007 wrote: post #133
paaakthecaaa wrote: post #120

Earlier quoted context omitted.

Unfortunately, modern regulations forbid manufacturers from easily making a "dumb car". For example, backup cameras are required in new cars. It's the same deal with avoiding wire insulation that rodents enjoy eating. Your only option is to buy a car from before 2000-ish. I'd actually like to find a DIY subculture of taking old car frames and swapping in newer features a bit at a time. People do it with electric moto…

>Unfortunately, modern regulations forbid manufacturers from easily making a "dumb car". This is not true.

It is true as of 2018: https://www.nhtsa.gov/equipment/driver-assistance-technologi...

Does NHTSA recommend rearview video systems? Yes. As of May 2018, NHTSA requires this lifesaving technology on all new vehicles. We recommend you look for RVSs that meet NHTSA’s performance specifications when shopping for a vehicle.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#143

Post by sagarm »

LinuxBender wrote: post #77
soco wrote: post #51

Earlier quoted context omitted.

Thank you, I just bought two! But any idea for if you're connected via Bluetooth?

Probably not without controlling one side of the communication. On the cell phone, you would need something that enforces mandatory access controls on what data can be sent over Bluetooth. Ideally a smart phone hacker could chime in. I've never owned one. Another potential option would be to root the car, likely voiding any warranty and potentially creating other liability implications.

You have to ok sharing contacts with "normal" bluetooth pairing. For a personal vehicle most people would.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#144

Post by heavyset_go »

mssundaram wrote: post #59
toss1 wrote: post #9

Earlier quoted context omitted.

Probably true, but good luck with that. As my grandfather said: "You might be right, but you don't want to be dead right." CBP already have extra authorities due to border control because crossing the border is not a constitutional right. The most egregious expansion was the declaration that all territory within 100 miles of the border is 'authorized' for all CBP's nonsense. That happens to cover about 90% of the US…

I'm having trouble understanding how 100 miles from the border covers 90% of the US population? Edit: I see - I was thinking only in terms of e.g. the Arizona southern border, however looking up the Constitution Free Zone shows that it means the entire US - California, all states connected to Cananda etc. Eidt 2: Would this mean ALL of Hawaii is in this Constitution Free Zone?

> Eidt 2: Would this mean ALL of Hawaii is in this Constitution Free Zone?

And the entirety of a handful of states in the Northeast US, as well.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#145

Post by heavyset_go »

triceratops wrote: post #105
mssundaram wrote: post #59

Earlier quoted context omitted.

I'm having trouble understanding how 100 miles from the border covers 90% of the US population? Edit: I see - I was thinking only in terms of e.g. the Arizona southern border, however looking up the Constitution Free Zone shows that it means the entire US - California, all states connected to Cananda etc. Eidt 2: Would this mean ALL of Hawaii is in this Constitution Free Zone?

Don't international airports count as "the border" too?

Yes, they're considered "ports of entry".

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#146

Post by lozaning »

sjg007 wrote: post #133
paaakthecaaa wrote: post #120

Earlier quoted context omitted.

Unfortunately, modern regulations forbid manufacturers from easily making a "dumb car". For example, backup cameras are required in new cars. It's the same deal with avoiding wire insulation that rodents enjoy eating. Your only option is to buy a car from before 2000-ish. I'd actually like to find a DIY subculture of taking old car frames and swapping in newer features a bit at a time. People do it with electric moto…

>Unfortunately, modern regulations forbid manufacturers from easily making a "dumb car". This is not true.

In the US, it's absolutely true as of May 2018. https://www.nhtsa.gov/equipment/driver-assistance-technologi...

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#147

Post by SAI_Peregrinus »

Animats wrote: post #139
pdkl95 wrote: post #39

Earlier quoted context omitted.

Maybe those of us that understand this problem can and should help friends and family buy making/buying them a "USB condom"[1] and strongly encouraging that they use it anytime they want to plug something into USB for charging. This type of device can be as simple and cheap as a USB connector/cable with the data wires cut. [1] A USB dongle that only passed the power pins through for charging. Data is either blocked o…

Doesn't work for all the higher-power USB-C charging options that require negotiation before the higher voltage turns on.

There are "smart" ones that MITM the power negotiation. IE they negotiate with the Devices for a particular PD profile, and with the Host for the same PD profile.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#148

Post by advisedwang »

userbinator wrote: post #91
a_e_k wrote: post #8

I live in Washington State, where the state legislature recently voted to ban sales of gasoline powered cars after 2030. Aside from the fact that I enjoy drives through some pretty empty parts of the country, especially in the Southwest, where range is a concern (e.g., I drove the Great Basin Highway a few years ago), what bothers me about that measure is this sort of data collection thing. I wouldn't mind a move to…

I guess it's only sales of new cars? Otherwise I can't imagine the classic car community is going to be happy about that... And laws like that will just make even older vehicles more desirable.

It's just a target [1], and isn't even set as a target until some other tax stuff changes. See section 6 of [2] to really see that nothing is banned.

[1] https://www.reuters.com/world/us/washington-state-passes-bil...

[2] http://lawfilesext.leg.wa.gov/biennium/2021-22/Pdf/Amendment...

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#149

Post by sagarm »

kingsuper20 wrote: post #111
wolverine876 wrote: post #24

Is there a reliable list of cars that do not surveil me, or that can be modified to not surveil me? I read a Bruce Schneier article a little while ago (maybe the article was much older) where he said that he looked, but didn't find one that met his other needs.

I suspect that insurance coverage is going to require strong telemetry at some point. Obviously a person could pick a car of a given year/model that meets their needs and rebuild it forever, at least until the government or (once again) the insurance companies regulate you out of it. It's for the children after all.

I actually already use Metromile, an insurance company that charges per mile and uses GPS tracking to measure that mileage. I'm very happy with it.

I no longer have to subsidize heavy drivers, and my rates are much lower as a result. I can always check the location of my car (in case of theft or forgetfulness) and there are other smaller benefits like diagnostics being pushed to my phone. As a bonus, they allow you to change your policy at any time, enabling me to opt in and out of comprehensive and collision based on the time of year.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#150

Post by advisedwang »

a_e_k wrote: post #8

I live in Washington State, where the state legislature recently voted to ban sales of gasoline powered cars after 2030. Aside from the fact that I enjoy drives through some pretty empty parts of the country, especially in the Southwest, where range is a concern (e.g., I drove the Great Basin Highway a few years ago), what bothers me about that measure is this sort of data collection thing. I wouldn't mind a move to…

The legislature voted to set a _goal_:

> ... a goal is established for the state that all publicly owned and privately owned passenger and light duty vehicles of model year 2030 or later that are sold, purchased, or registered in Washington state be electric vehicles.

http://lawfilesext.leg.wa.gov/biennium/2021-22/Pdf/Amendment...

Post reply on HN