Live data from Hacker News

Toyota: Car location data and videos of 2M customers exposed for ten years

bleepingcomputer.com

201–210 of 314 posts

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#201

Their privacy policy is wild and every customer is opted into the connect services by default. Interior images, exterior images, facial geometry, voice recordings, location/driving data, "multimedia screen data", https://www.toyota.com/privacyvts/ https://web.archive.org/web/20230512182022/https://www.toyot...

[deleted]

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#202

Their privacy policy is wild and every customer is opted into the connect services by default. Interior images, exterior images, facial geometry, voice recordings, location/driving data, "multimedia screen data", https://www.toyota.com/privacyvts/ https://web.archive.org/web/20230512182022/https://www.toyot...

The privacy policy looks really reasonable and mostly only collecting the data that it needs to provide the services. And the most cloud-based / privacy concerning stuff (e.g. external video capture, and usage-based auto insurance) is listed as opt-in.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#203
post #196

"It is important to note that the exposed details do not constitute personally identifiable information, so it wouldn't be possible to use this data leak to track individuals unless the attacker knew the VIN (vehicle identification number) of their target's car." Am I dumb or are they? If you know someones home address, then all you need is a geo lookup, and a filter which selects for cars parked near that address at…

Okay, massive tangent, but it's been bugging me for a while and this has finally tipped me over the edge - why is it called personally identifiable information ? That would be information that someone can personally identify surely? Shouldn't it be personally identifying information?

Because it's information that may be able to identify, but is not necessarily conclusively identifying of, a person.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#204
post #189

Reason why I still have and use a “dumb” car, no screens, no software, nothing except what CANbus logs, which is still a lot but nothing clouds based or breached unless you physically access the car.

Mine doesn't even have a CANbus ;-)

Note that if your car is new enough to have CANbus, it surely has software too.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#205

Earlier quoted context omitted.

> privacy lunatics, preppers, gun nuts and other extremists [...] Being a prepper isn't extremist. (Yes, it's expensive , done right, but not necessarily extremist.) [disclaimer: I live in Los Angeles]

Every person that I've ever met who calls themselves a "prepper" has been what most would call an extremist. (I'm not calling you an extremist -- I've never met you.) That's a different crowd from someone who is just prepared for emergencies and disasters.

> Every person that I've ever met who calls themselves a "prepper" has been what most would call an extremist.

It seems like you have a cognitive distortion to work out. Amplifying an anecdotal sample to classify all people with a shared interest as having other characteristics of your sample is understandable but also misguided.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#206

"It is important to note that the exposed details do not constitute personally identifiable information, so it wouldn't be possible to use this data leak to track individuals unless the attacker knew the VIN (vehicle identification number) of their target's car." Am I dumb or are they? If you know someones home address, then all you need is a geo lookup, and a filter which selects for cars parked near that address at…

I know the VIN on my wife's car. It'd be beyond a few boundaries to track her vehicle and internal cameras if, say, we split up at some point.

You can read the VIN of neighbors and significant others pretty easy.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#207
post #37

Earlier quoted context omitted.

I'm sorry, what? No one thinks about what data is being sent back to the manufacturer when buying a car. Now I need to know what my car know and what is being transmitted back. It would be nice if I could turn off this functionality.

> No one thinks about what data is being sent back to the manufacturer when buying a car. Chevrolet has had OnStar since 1996, and has sold data related to it for probably just as long -- this isn't some new phenomenon. I remember these same arguments echoed back then -- but at least it was a unique happening at the time.

OnStar is applicable to all of GM, but it was (and AFAIK still is) opt-in.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#208
post #74
post #14

I hope jailbreaking and disabling this data collection becomes the norm in the future. It is obvious companies do not prioritize the security protecting our data.

It's a matter of time before that is legislated away as an option. Drunk driver detection and remote disable for law enforcement and other rights-trampling "safety" features will be always-on, probably by law. If it's not those, always-on comms will be mandated to help go to a self-driving fleet. One way or another, they'll force us to have spyware cars.

Stop buying new cars, fix old ones instead. If they start preventing that too, I hope there's a mass revolt.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#209
post #196

Earlier quoted context omitted.

Okay, massive tangent, but it's been bugging me for a while and this has finally tipped me over the edge - why is it called personally identifiable information ? That would be information that someone can personally identify surely? Shouldn't it be personally identifying information?

Words mean whatever people who use them intend them to mean.

[deleted]

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#210

"It is important to note that the exposed details do not constitute personally identifiable information, so it wouldn't be possible to use this data leak to track individuals unless the attacker knew the VIN (vehicle identification number) of their target's car." Am I dumb or are they? If you know someones home address, then all you need is a geo lookup, and a filter which selects for cars parked near that address at…

I know the VIN on my wife's car. It'd be beyond a few boundaries to track her vehicle and internal cameras if, say, we split up at some point. You can read the VIN of neighbors and significant others pretty easy.

The VIN on my Toyota is displayed right beneath the windshield. Anyone can walk up to my car and read it.
Post reply on HN