Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hacking Subaru: Tracking and controlling cars via the admin panel

samcurry.net

Post reply on HN
Print view View original

161–170 of 334 posts

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#161

Post by blackeyeblitzar »

eptcyka wrote: post #127
js2 wrote: post #90

Earlier quoted context omitted.

My 2017 Mazda with CarPlay does something similar. It truncates any lists (songs, podcast episodes, contacts, etc) that CarPlay displays to 10 items. All it does is incentivize folks to use their phone. It's incredibly annoying because the Mazda command dial for interacting with CarPlay is otherwise excellent and I don't think that limiting the list size does anything to reduce distraction.

It is an incentive to use Siri. You can’t actually use carplay if Siri is disabled.

I find this restriction weird as well. I would like to not have my privacy violated by voice assistants. I just want the phone interface to be accessible through the car display and to be able to control it through a dial ideally.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#162

Post by bdcravens »

aftbit wrote: post #29
like_any_other wrote: post #2

> After reporting the vulnerability, the affected system was patched within 24 hours and never exploited maliciously. So 'only' Subaru, Starlink, their business and advertising partners, and law enforcement, can remotely track (and disable - don't think you can run from the law!) your car? > I didn’t realize this data was being collected, but it seemed that we had agreed to the STARLINK enrollment when we purchased i…

I was lucky to have the DCM in my 2019 Outback (which is responsible for cellular communication and thus this whole STARLINK thing) replaced with a bypass box under the warranty program related to the end of 3G service. My car was trying to go online 30 times an hour or something like that, draining the battery enough that it needed to be replaced after just 4 years. They don't have enough new DCMs so they were willi…

I had a similar issue when I connected my electricity provider to my Kia EV6. Presumably it would turn on charging when the price was optimal, but they were pinging it for status so often that the car never went to sleep, and it drained the 12V. Funny enough, the dealership couldn't figure it out; I "fixed" it by changing my Kia credentials.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#163

Post by JumpCrisscross »

dylan604 wrote: post #74
rtkwe wrote: post #62

Earlier quoted context omitted.

You can also do other stuff like start the climate controls so the car is comfortable before you reach it on hot or cold days.

I could do that with a key fob well before connected cars were a thing. People just choose to ignore the most basic of information

> could do that with a key fob well before connected cars were a thing

I’ve started my Subaru in the lot at 6,500’ from the top of the mountain at 10,500’. A fob isn’t going to scream over that distance.

(None of this requires tracking, however, much less storing a year’s location off the car.)

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#165

Post by reaperducer »

onetokeoverthe wrote: post #115
reaperducer wrote: post #109

Earlier quoted context omitted.

Volvo.

The real owner of Volvo is Chinese automaker Geely. The company acquired the Swedish automaker from Ford in 2010 for $1.8Bil. source. https://www.fool.com/investing/how-to-invest/stocks/who-owns... )

But at least they're made in South Carolina.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#166

Post by all2 »

pfooti wrote: post #106
mmmlinux wrote: post #86

Earlier quoted context omitted.

FWIW i never replaced the 3g box in my 2018 subaru, and never have a battery drain issue. the battery did fail about 4 years in to owning the car, but it was a cell failure not a drain issue.

My Subaru, a 2018 outback, would be completely battery dead if I left it parked for more than a week or so. Happened once at the airport, after which I started carrying a battery pack car starter. The guy at the airport who have us a jump said it happened all the time with Subarus in long term parking.

To be fair, this happens on my 05 Outback.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#168

Post by iforgot22 »

t1234s wrote: post #148
duxup wrote: post #130

Earlier quoted context omitted.

It's weird, is there no feedback of any kind in these companies? All outsourced maybe? I don't get it. That would be a huge red flag and a fairly easy to understand / sell red flag.

Even if it was outsourced is there zero quality control?

Probably QA is only going to make sure the features work. They aren't pen-testers. At best, they might try some unexpected inputs that trigger a security vuln.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#169

Post by speed_spread »

reaperducer wrote: post #165
onetokeoverthe wrote: post #115

Earlier quoted context omitted.

The real owner of Volvo is Chinese automaker Geely. The company acquired the Swedish automaker from Ford in 2010 for $1.8Bil. source. https://www.fool.com/investing/how-to-invest/stocks/who-owns... )

But at least they're made in South Carolina.

Only the EX90 it seems is made in SC, possibly just assembled from parts made in China. All other electric Volvos (including Polestar) are straight from China. Gas models and hybrids are still built in Europe but are being phased out.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#170

Post by ChuckMcM »

like_any_other wrote: post #2

> After reporting the vulnerability, the affected system was patched within 24 hours and never exploited maliciously. So 'only' Subaru, Starlink, their business and advertising partners, and law enforcement, can remotely track (and disable - don't think you can run from the law!) your car? > I didn’t realize this data was being collected, but it seemed that we had agreed to the STARLINK enrollment when we purchased i…

Yeah, that was kind of my takeaway as well. Your car is not your car right? I mean ANYONE AT SUBARU can do this?
Post reply on HN