Live data from Hacker News

Toyota: Car location data and videos of 2M customers exposed for ten years

bleepingcomputer.com

221–230 of 314 posts

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#221

Earlier quoted context omitted.

I know the VIN on my wife's car. It'd be beyond a few boundaries to track her vehicle and internal cameras if, say, we split up at some point. You can read the VIN of neighbors and significant others pretty easy.

The VIN on my Toyota is displayed right beneath the windshield. Anyone can walk up to my car and read it.

VINwiki leverages this to form a community

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#222

Earlier quoted context omitted.

I know the VIN on my wife's car. It'd be beyond a few boundaries to track her vehicle and internal cameras if, say, we split up at some point. You can read the VIN of neighbors and significant others pretty easy.

The VIN on my Toyota is displayed right beneath the windshield. Anyone can walk up to my car and read it.

VIN being visible through the windshield is a legal requirement in US.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#223
post #89

Earlier quoted context omitted.

It will never get fined because it’s how the people who legislate fines are making (and keeping) their money and control.

That's not how democracy works. Apathy is toxic. Please stop hurting us.

The way "representative democracy" (in quotes because both words are a lie) works at scale of any large country is as follows: you elect people based on simplistic promises that they make, and if they win and you're lucky, they kinda sorta do something that's vaguely like half of what they promised. Your only recourse is waiting for N years to vote for someone else who will almost certainly do the same thing.

Not only is this all by design, but in many countries, the "free mandate" - i.e. the notion that the politician can say A before the election and then do ~A after - is even legally codified. In theory, this is supposed to allow the elected representatives to apply their own judgment based on nuances of the moment instead of pandering to the mob. In practice, it means that your representative is free to pander to people other than those they "represent" while still claiming a public mandate based on the votes received.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#224
post #75

Earlier quoted context omitted.

"tracker detection and removal" would be a great service for a local service garage to offer.

In many cases this isn’t viable. On my car for for instance - a 2016 Subaru - removing the telematics module also disables all front speakers because the audio signal is routed through it.

https://www.autoharnesshouse.com/69018.html

This was the first result when I searched "telematics module front speakers"

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#225

Earlier quoted context omitted.

> its still going to reduce down to just a handful of cars which can then be cross referenced against place of work, relatives, etc. You are correct, but I can't imagine why anybody would go to that much trouble for a speculative answer. Your idea requires quite a bit of intelligence collection as well (relatives' addresses, addresses of known hangouts, etc. that you have to vet for accuracy). If you have a confirmed…

The scammer in the third world country folks may be at threat of this breach being exploited by does not have that ability. But they do have the internet, and further no meatspace means scams can be automated/scaled. Honestly, this seems very bad.

I read an article today about someone who was called by his daughter to transfer money. It turned out to be an AI deepfake.

The criminal networks are pretty sophisticated.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#226
My current "solution" to this is driving a 16yo car, before all this stuff became ubiquitous and impossible to opt out of, but obviously it gets harder every year to find cars from that era that still run reliably.

What other options are there? I would SO willingly pay thousands of dollars specifically to have these features disabled on a new car, but it seems like they're actually designed for that to be impossible.

What options are there for acquiring and driving a car with no internet or satellite connections?

(I'm not trying to stop some other-purpose satellite from being able to see my car if it wanted. I'm trying to prevent a car company--which is NOT a security company--from having a record of everywhere my car has been at every moment of every day where someone can steal it.)

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#227

Their privacy policy is wild and every customer is opted into the connect services by default. Interior images, exterior images, facial geometry, voice recordings, location/driving data, "multimedia screen data", https://www.toyota.com/privacyvts/ https://web.archive.org/web/20230512182022/https://www.toyot...

> Interior images, exterior images, facial geometry, voice recordings, This is an absolutely unbelievable level of privacy intrusion IMO. I 100% support very heavily fining this sort of behavior, otherwise it will continue to proliferate.

Voice recording without explicit consent of all recorded parties is illegal under wiretapping laws in my state, and my state is pretty aggressive about it.

I wonder how that factors into this.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#228
post #226

My current "solution" to this is driving a 16yo car, before all this stuff became ubiquitous and impossible to opt out of, but obviously it gets harder every year to find cars from that era that still run reliably. What other options are there? I would SO willingly pay thousands of dollars specifically to have these features disabled on a new car, but it seems like they're actually designed for that to be impossible.…

That’s my solution too. I love my old cars. I did get a newish (2012) Jeep to build onto an off road rig. It happens to be the one that you can hack by knowing the VIN which is displayed in the windshield. You can connect to the CAN over the air and unlock and start it with a program widely available on the internet. Luckily, because it’s a Jeep the antenna mount rusted and the antenna fell off. I can’t start it over the air since it no longer talks to the network.

I guess that’s a long way of saying that if we ever have to get new cars, all we need to do is find the wireless antenna and disconnect it.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#229

Earlier quoted context omitted.

Where would the support for fines come from? When government understands these issues at all, they only want more control and restriction. The only thing I can imagine legislators getting upset about is they the car manufacturers are not sharing all the info with government by default. Next steps will be mandating tracking, not fining for it.

Well, try not being so passive. Are you living in an unchangeable authoritarian system?

Yes? When was the last time people were satisfied with the candidates available to "represent" them and were doing anything other than choosing the "lesser of two evils" to try to keep it from getting worse?

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#230
post #89

Earlier quoted context omitted.

That's not how democracy works. Apathy is toxic. Please stop hurting us.

The way "representative democracy" (in quotes because both words are a lie) works at scale of any large country is as follows: you elect people based on simplistic promises that they make, and if they win and you're lucky, they kinda sorta do something that's vaguely like half of what they promised. Your only recourse is waiting for N years to vote for someone else who will almost certainly do the same thing. Not onl…

Not only this, but most people don't actually like the vague promises of the candidate they voted for.

They're just praying that one will be moderately less terrible than the alternative.

There's never an option to say, "No, none of these power-hungry psychos should get to make this set of decisions on my behalf."

Post reply on HN