Live data from Hacker News

Internet-connected cars fail privacy and security tests conducted by Mozilla

gizmodo.com

211–220 of 660 posts

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#211

Earlier quoted context omitted.

FWIW Mazda's current lineup allows you to turn off telemetry while still allowing emergency calls, and they still make non-touchscreen models.

Including govt wiretapping of those sensors?

And don't forget thwarting timing attacks from the bazillion cameras aimed at roadways.

Plus satellites.

If the car cannot defend against such basic attacks then you're best walking alone under cover of the trees, whispering your messages to distant dandelions.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#212

Of all the horrible things go on with privacy these days, this is the one I hate the most. I’m a “car guy”, but not the sort that obsesses over old cars (although I do love 60s and 80s cars). I like new tech, I like the advances in engineering we’ve made in new vehicles, I like EVs even. Nonetheless I’ve been in the market for a new car for months and haven’t bought because it’s hard to find any cars that meet my req…

The touchscreens are really a dealbreaker on new cars. They’re not just prone to quick obsolescence, they’re dangerous.

Is this a US thing? I recently bought a reasonably high end Skoda (which I think would be made in the same factory as VW, SEAT etc). It has a big touch screen in the centre console, but that's really only used for the radio / media / phone calls etc. This is all non essential stuff and so I can deal with it being on a screen. Everything relating to driving is an old skool analogue control.

A couple of things I don't like is the pull switch for parking brake, it's the first car I've had without an old skool handbreak, it feels unnecessary, but ergonomically it's fine. Also it's a key less ignition with a button to start. Again I don't see why this benefits me, but I can deal with it. I do worry about having a smart key though as I'm often on the water kayaking/surfing but it's been ok in a waterproof case so far.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#213

Earlier quoted context omitted.

Maybe this is why Steve Jobs was working on an Apple Car... privacy as a selling point!

Hope that was a joke.

They use privacy as a selling point elsewhere, so it might make sense here too

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#214
This is very much in line with the industry trying desperately to get into the tech recurring revenue model.

> the manufacturer collects information including sexual activity, health diagnosis data, and genetic data, though there’s no details about how exactly that data is gathered

How is that even possible? Without more details about what this means and how it's done, this sounds a bit fishy to me.

> Mozilla said it was unable to determine whether the brands encrypt any of the data they collect

Given the auto industry's track record at security, I'm gonna go ahead and assume they _all_ store all that in a 2005-era non updated mysql database protected by root/password exported nightly as a clear-text csv file to an open network folder. And since they all do it they can call it an industry standard.

> Berg said the MercedesMe Connect app gives users privacy settings and the ability to opt-out of certain services.

Given that these folks try to sell you everything in the car you already bought as a service, that's a nice way of saying "if you're concerned about us collecting stool sample while using rated seats, you can use your car as a decorative piece in your garage if you want,l".

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#215

Earlier quoted context omitted.

The touchscreens are really a dealbreaker on new cars. They’re not just prone to quick obsolescence, they’re dangerous.

[flagged]

There's probably some truth in that. Admittedly, it's a self-selected group to some extent, but the couple people I know who own Teslas basically tell me the controls are fine.

The reality is also that, in my Honda, a bunch of the buttons that aren't on the steering wheel/column are things I touch once in a blue moon and there are probably buttons I haven't touched since I initially set up the car.

And I don't actually want to navigate using my phone which is precariously hanging off an air vent using some some accessory clamp. Or by all means go old school and navigate using a map open in your lap.

(That said, I do think a lot of car manufacturers should be more thoughtful about preserving certain tactile controls however.)

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#216
post #12

Earlier quoted context omitted.

You don't.

In some places, this is not an option. I have a mechanical Euro-5 car without sim card nor infotainment system that I would not be able to use where I live by end 2024. Welcome to the EU and its low-emissions zones that span over many of its big cities.

I have a 2016 Euro 6 car that has no tracking.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#218
post #165

Earlier quoted context omitted.

Might depend on the wording of the law and how that system is tied into the rest of the car. For example in the states, it is illegal to tamper with any part of the emissions control system on your car. This is mostly about making sure emissions testing via OBD II can’t be gamed, but it also would target modifications like “rolling coal” or turbos and superchargers that allow user controlled fuel mapping. But in the…

it is illegal to tamper with any part of the emissions control system on your car. Can you cite the law? I know the EPA has civilly pursues companies that make products that bypass emission controls. But haven’t seen or heard anything that goes as fat as you suggest. E.g.: https://www.dinancars.com/products/software-tuning/engine-tu... This allows you to change the engine programming on a BMW. They do note it is not…

"It is a crime to knowingly falsify, tamper with, render inaccurate, or fail to install any "monitoring device or method" required under the Clean Air Act, including a vehicle’s on-board diagnostic system. Clean Air Act section 113(c)(2)(C)." https://www.epa.gov/sites/default/files/2020-12/documents/ta...

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#219
post #212

Earlier quoted context omitted.

The touchscreens are really a dealbreaker on new cars. They’re not just prone to quick obsolescence, they’re dangerous.

Is this a US thing? I recently bought a reasonably high end Skoda (which I think would be made in the same factory as VW, SEAT etc). It has a big touch screen in the centre console, but that's really only used for the radio / media / phone calls etc. This is all non essential stuff and so I can deal with it being on a screen. Everything relating to driving is an old skool analogue control. A couple of things I don't…

No, it's the same. You can control hidden things from the touch screen (like light length when opening the door for example) but most cars still have tactile nobs for everything outside of radio/bluetooth/media.

There are some cars that have touchscreen for essential things like climate control, but those are absolutely in the minority.

Post reply on HN