Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Toyota: Car location data and videos of 2M customers exposed for ten years

bleepingcomputer.com

Post reply on HN
Print view View original

241–250 of 314 posts

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#241

Post by 14 »

StillBored wrote: post #139

"It is important to note that the exposed details do not constitute personally identifiable information, so it wouldn't be possible to use this data leak to track individuals unless the attacker knew the VIN (vehicle identification number) of their target's car." Am I dumb or are they? If you know someones home address, then all you need is a geo lookup, and a filter which selects for cars parked near that address at…

Yes people can finally see if their spouse was cheating. Or learn when a target is typically not at home. Or what church they go to. You are not dumb. The statement in the article is dumb however.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#242

Post by stjohnswarts »

eulers_secret wrote: post #93

There's some really active community discussions around disabling the Data Collection Module, discussing everything from simply pulling the DCM fuse to disabling only the antenna. If you pull the DCM fuse, you'll loose the microphone and potentially one of the right-hand speakers - these can be fixed by jumping the wires in/out of the DCM. What's concerning to me are reports of the car still uploading all the collect…

Doesn't doing things like this void your car's warranty (at least to those units that are hooked to said wires you're cutting/bypassing?) I'm sure the fuse removeal is fine though. You should put up a dislaimer for unknowing people that this will make their warranty reimbursement tough or impossible. If it's out of warranty of course it doesn't matter.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#243

Post by stjohnswarts »

malikNF wrote: post #19

I hope regulators fine the hell out of these companies. Enough to make them think twice about offering these upload everything to the cloud services no one really asks for.

Government >> regulators. And the government is owned by these corporations.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#244

Post by DangitBobby »

mpol wrote: post #147
feanaro wrote: post #137

Earlier quoted context omitted.

How will this happen if we don't accept it?

What does this mean? How do you "not accept this"? Are you jumping up and down now interior pictures are leaked from your Toyota? Do you not pay for recurring fees of licenses? Do you send an angry phone call in the general direction of Toyota HQ?

There's clearly no meeting of the minds (I didn't even know about this "agreement", let alone read and agree to it) so I don't understand how the terms could possibly be binding. Failure of the courts, I guess.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#245

Post by stjohnswarts »

zyang wrote: post #2

Japanese auto completely missed the memo on software. Many of them won't make the ev transition. It's hard to imagine what Japanese economy is going to be like once their auto industry is gutted.

I would never bet against the Japanese or Korean auto makers lol

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#246

Post by emodendroket »

StillBored wrote: post #139

"It is important to note that the exposed details do not constitute personally identifiable information, so it wouldn't be possible to use this data leak to track individuals unless the attacker knew the VIN (vehicle identification number) of their target's car." Am I dumb or are they? If you know someones home address, then all you need is a geo lookup, and a filter which selects for cars parked near that address at…

If you commute from home to a job I think even with somewhat coarse information it’s easy to figure out who you are. The NYT did a story like this based on advertiser data.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#248

Post by elihu »

LeifCarrotson wrote: post #30
malikNF wrote: post #19

I hope regulators fine the hell out of these companies. Enough to make them think twice about offering these upload everything to the cloud services no one really asks for.

It's a simple equation: Revenue = (value of data per person) x (number of customers) - (probably of data loss) x (probability of fine) x (cost of fine). If that number is greater than zero, they'll do it, if it's less than zero, they won't.

I think for a lot of tech products, it's more that the profit margins are tight and competition is fierce, such that spyware integration is needed to subsidize what would otherwise be a money-losing product. At which point the only remedy may be to impose regulations telling companies that no, you can't sell customer's private data without their permission -- and then the price of electronic goods should stabilize at a somewhat higher price but without the user-hostile features.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#249

Post by SV_BubbleTime »

WeylandYutani wrote: post #225
detrites wrote: post #183

Earlier quoted context omitted.

The scammer in the third world country folks may be at threat of this breach being exploited by does not have that ability. But they do have the internet, and further no meatspace means scams can be automated/scaled. Honestly, this seems very bad.

I read an article today about someone who was called by his daughter to transfer money. It turned out to be an AI deepfake. The criminal networks are pretty sophisticated.

>The criminal networks are pretty sophisticated.

I’ve had to relay this on to people I train: It’s their job. It’s a business and it’s unreasonable for you to be better at aspects of it than they are.

I think the slide is titled “Someone is going to be the goose, hopefully not you”.

Post reply on HN