Live data from Hacker News

A CBP contract shows the risks in connecting your vehicle and your smartphone

theintercept.com

231–240 of 253 posts

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#231
post #89

So do I have to ride horses to get my privacy back now? I would totally buy a brand new car without all the "visible" electronics (by visible I mean all the screens and doodads. I don't mind ABS and other "invisible" electronics as long as they are reliable which is not a given nowadays). I don't get the point of turning the interior of a car into a smartphone experience. I watched a YT video of a Mercedess class S r…

Honestly, non-tactile buttons on a car seems ridiculous. You HAVE to look away from the road to do anything. Tactile buttons let you feel around to do things if you need to. That change has made zero sense to me.

Using a cellphone while driving is illegal? Let's just make the whole car a cellphone! Brilliant!

It makes new wonder how these non-tactile buttons and entertainment systems are even legal to use while driving. And if you had to stop your car to adjust the radio then these touch screens would immediately disappear.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#232
post #30

Is there a reliable list of cars that do not surveil me, or that can be modified to not surveil me? I read a Bruce Schneier article a little while ago (maybe the article was much older) where he said that he looked, but didn't find one that met his other needs.

https://ondatashop.com/ive-vehicle-system-forensics/ says "iVe currently supports BMW, Buick, Cadillac, Chevrolet, Chrysler, Dodge, Fiat, Ford, GMC Hummer, Jeep, Lincoln, Maserati, Mercury, Pontiac, Ram, Saturn, Seat, Skoda, SRT, Toyota and Volkswagen vehicles generally as far back as 2008 models" - so older might be better :)

Interesting that I don't see Tesla on the list.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#233

Is there a reliable list of cars that do not surveil me, or that can be modified to not surveil me? I read a Bruce Schneier article a little while ago (maybe the article was much older) where he said that he looked, but didn't find one that met his other needs.

I suspect that insurance coverage is going to require strong telemetry at some point. Obviously a person could pick a car of a given year/model that meets their needs and rebuild it forever, at least until the government or (once again) the insurance companies regulate you out of it. It's for the children after all.

I don't have a problem with that. But it ideally will be encrypted until I release the data when there is a claim or a subpoena. I don't see a technical reason why this cannot be done.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#235
post #4

Is there any surprising data? I'm not surprised it records destinations entered into satnav for example. I mean that's a fairly common trick in TV shows. > MSAB claims that this data can include “Recent destinations, favorite locations, call logs, contact lists, SMS messages, emails, pictures, videos, social media feeds, and the navigation history of everywhere the vehicle has been.” MSAB even touts the ability to re…

> I seriously doubt my car has records of my emails, pictures, videos, and social media feeds even though it has Android Auto. Why?

Because I didn't give it access to any of that and Android Auto runs on the phone, not on the car. The car essentially becomes a glorified touchscreen.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#236
post #4

Is there any surprising data? I'm not surprised it records destinations entered into satnav for example. I mean that's a fairly common trick in TV shows. > MSAB claims that this data can include “Recent destinations, favorite locations, call logs, contact lists, SMS messages, emails, pictures, videos, social media feeds, and the navigation history of everywhere the vehicle has been.” MSAB even touts the ability to re…

> I seriously doubt my car has records of my emails, pictures, videos, and social media feeds even though it has Android Auto. Even if you car does not, your phone does. So the phone being connected to the car during the time when the accident occurred, could lead to checking that you were in fact, watching unboxing videos on Netflix at the moment the wreck occurred while you were in the driver's seat.

Of course my phone does. It's not surprising to learn that my phone contains my emails and photos.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#237

Interesting this is paid software. Given automakers sad security practices, I wonder how hard it is for some hacker to make a kit using off the shelf products and release the software open source.

It'd be a shame if a Berla kit happened to fall off the back of a truck.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#238

Earlier quoted context omitted.

If I lived in the countryside (which I wouldn't mind) I would consider this, but otherwise I personally couldn't justify the risk. I forget where I read it, but the phrase "right of weight, not right of way" comes to mind. It's also why I love that my hometown allows riding bikes on sidewalks.

> It's also why I love that my hometown allows riding bikes on sidewalks. This would be a dream. I live in a reasonably deserted/seasonal neighbourhood, so it has a neat 2-lane divided avenue down the middle, but it is usually very empty (a car maybe every minute). This doesn't mean I can ride anywhere but the very edge of the asphalt, almost tripping my pedals on the sidewalk rise (I forget the word in English), sin…

It is. Maybe you can take short trips somewhere close that allows it, or at least lets you feel a little safer?

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#239

Earlier quoted context omitted.

How effective is this today? Don't modern phones refuse to do anything except charge over a USB connection until the user unlocks the phone and trusts the connected host?

Yes, but we are back at square one, where if I want to use "Chevy Play" or whatever their music player is, I have to battle a legion of dark patterns reaching for my data i.e "Allow this Stop Watch app to not don't allow prohibit from reading contacts"

You can use CarPlay or Android Auto and the data isn't going anywhere new.

Re: A CBP contract shows the risks in connecting your vehicle and your smartphone

#240
post #152

Earlier quoted context omitted.

Oh boy just wait until the ultra wealthy realize they can lobby to have a $50 per mile road tax going into their community to discourage the poors from using their parks/beaches/public areas.

This is more or less the purpose of toll roads.

A dynamic toll can be used to reduce incentive to drive on the road at certain times. It's not feasible to make a 10 mile wide road due to congestion for 2 hours during the day.

Solution? Increase the cost during those 2 hours such that fewer people choose to use the road during those hours. You can give poor people cash and they can decide if it's worth using that road during the times with higher congestion, but the problem of exceeding a road's capacity along with the inability to build infinite lane roads is separate from income/wealth gaps.

Post reply on HN