Earlier quoted context omitted.
This is the way. What legitimate interest could Subaru have in maintaining this much data about their customers?
Unfortunately, selling it to repo men is a widely accepted practice.
So, make your payments.
Hacking Subaru: Tracking and controlling cars via the admin panel
241–250 of 334 posts
Re: Hacking Subaru: Tracking and controlling cars via the admin panel
#242Earlier quoted context omitted.
> So at least my Subaru cannot connect to the cloud anymore. Sounds like something you can use to justify a higher selling price when the time comes
I envy your optimism.
You’d be surprised - a lot of younger dudes in particular appreciate things like this, as well as certain types of exhaust modifications and the like ;)
Re: Hacking Subaru: Tracking and controlling cars via the admin panel
#243> After reporting the vulnerability, the affected system was patched within 24 hours and never exploited maliciously. So 'only' Subaru, Starlink, their business and advertising partners, and law enforcement, can remotely track (and disable - don't think you can run from the law!) your car? > I didn’t realize this data was being collected, but it seemed that we had agreed to the STARLINK enrollment when we purchased i…
It’s not the Starlink you’re thinking of, that’s Subaru’s name for their in-car infotaimnent system and predates the SpaceX Starlink. So it’s just Subaru. Also I doubt any ad partners can disable your car (outside of vulnerabilities like this). Subaru can but that’s the case with most modern vehicles.
Makes sense for Subaru to use star-something. 'Subaru' is Japanese for the pleiades star cluster.
Re: Hacking Subaru: Tracking and controlling cars via the admin panel
#244> After reporting the vulnerability, the affected system was patched within 24 hours and never exploited maliciously. So 'only' Subaru, Starlink, their business and advertising partners, and law enforcement, can remotely track (and disable - don't think you can run from the law!) your car? > I didn’t realize this data was being collected, but it seemed that we had agreed to the STARLINK enrollment when we purchased i…
You’re going beyond the capabilities demonstrated for us here. Whether or not those types of abilities could be built if they wanted to, here is what the author demonstrated:
- ez employee account takeover - as the admin panel employee you can look up the customer’s billing account info and location history, make any changes to the customer account that a customer service employee can - you can also add an arbitrary account as an authorized user for any customer - so you can now log into the regular “Subaru owner” mobile app as that account and that’s how the car-impacting parts of this vulnerability were actually performed.
That means you can activate key fob type commands and see the tracking information available through that app.
The reason I point this out is that you said “remotely disable” and “lock you in your car” - and those are both things such an app can’t do. There’s no “disable car” button in those apps.
If it’s anything like my GM car, it takes like 30 seconds for the car to act on each command you send. So you could lock someone out but if they have a key it’ll be easy for them to unlock it before you can re-lock it. And if it’s in motion you can’t stop it from the app. And finally cars don’t support locking in. They are all designed with handles that will open mechanically with either one or two pulls. Worst it can do to stop you is sound your alarm.
Re: Hacking Subaru: Tracking and controlling cars via the admin panel
#245> After reporting the vulnerability, the affected system was patched within 24 hours and never exploited maliciously. So 'only' Subaru, Starlink, their business and advertising partners, and law enforcement, can remotely track (and disable - don't think you can run from the law!) your car? > I didn’t realize this data was being collected, but it seemed that we had agreed to the STARLINK enrollment when we purchased i…
It’s not the Starlink you’re thinking of, that’s Subaru’s name for their in-car infotaimnent system and predates the SpaceX Starlink. So it’s just Subaru. Also I doubt any ad partners can disable your car (outside of vulnerabilities like this). Subaru can but that’s the case with most modern vehicles.
Ok, we've taken Starlink out of the title above. Thanks!
Re: Hacking Subaru: Tracking and controlling cars via the admin panel
#246Earlier quoted context omitted.
> because you can does not mean you should (or actually need to) Most people don’t need to drive. Out of their driving, most of it is superfluous. Pretty much everyone in my town with remote start uses it. Particularly if it’s a day where temperatures are close to 0°F and you’re weighing another run.
> Most people don’t need to drive. This is one of those comments that just tells everyone reading that you don't think much outside whatever area you dwell. There are lots of people not anywhere near you that do need to drive. Not accepting not everyone is like you is just small minded, and makes the conversation not worth having
> lots of people not anywhere near you that do need to drive
I live in Wyoming. Most people around me do need to drive. I’m saying take most vehicle-miles travelled in private cars and you’ll find that most people—being in or near cities—don’t need to take most of their trips. (Most trips I take don’t need to be taken, certainly not by private cars,)
I’m also not the one arguing that they shouldn’t do things that are nice but not necessary: you are. I’m analogizing a lazy summer trip to the grocery store to pick up a forgotten ingredient (when a bike would do fine, or hell, borrowing from a neighbour) with remote start. It’s convenient, marginally costless and rewarding in its own little way.
Re: Hacking Subaru: Tracking and controlling cars via the admin panel
#247Earlier quoted context omitted.
Only the EX90 it seems is made in SC, possibly just assembled from parts made in China. All other electric Volvos (including Polestar) are straight from China. Gas models and hybrids are still built in Europe but are being phased out.
I thought China is disconnected from modern microchips and operating systems - how do they manage to keep shipping these cars (and PCs)?
Cars don't use modern chips ... They use reliable chips that are built to withstand being in a car for years on end ... They also don't need to be as small as possible so older processes will suffice
Edit: I didn't like my tone
Re: Hacking Subaru: Tracking and controlling cars via the admin panel
#248Earlier quoted context omitted.
Working across cultures is so wild. I worked in situations where things were outsourced and yeah the Indian experience was horrific. But that also was influenced by the nature of the relationship.... they didn't work "for us" in any real way. I worked for a company where we (a Midwestern company) were acquired by a valley company and at HQ there was a clear divide between the Indian (US citizens, not H1B) folks and t…
We once hired an Indian programmer who absolutely didn't get along with his boss, who was also Indian. Turns out the boss was a Dalit and the programmer was a Brahmin. And this is how I learned about the Indian Caste system.
I am of Indian descent. Apparently from the penultimate caste. Anyway, I had someone from another team inform me of the inferior caste of one of our clients, and why I shouldn’t take shit from them.
That said, going back to New Delhi, at least in the circles I travelled in, it’s incredibly taboo to ask about caste. (Comparable to Americans using the n word.)
Re: Hacking Subaru: Tracking and controlling cars via the admin panel
#249Earlier quoted context omitted.
The CVT in combination with the terrible traction control also kills any chance you have of getting out of a stuck situation. Subaru's AWD system is now mostly just marketing. So it's basically on part with most AWD systems, because most of them really are a joke.
I know this is a Subaru hate thread on a site that knows basically nothing about cars so I’m spitting into the wind here, but this is just untrue. I’ve had 3 Subarus over a 20 year period of time, driven the hell out of all of them in snow and dirt, worked on and modified all of them, and the traction control system on my most recent one is categorically, objectively better than either of the prior two. It makes abou…
I have a 2014 forester. First time it snowed I slid off my driveway and one tire was off the ground. Had to get towed by a friend because that one wheel kept spinning. I thought the brakes were supposed to stop that automatically. Didn’t happen. Second time I tried to drove through a small patch of snow I lost all traction and had to dig out all the wheels and rock it. It was 2” of melting snow over a 50 foot by 10 foot patch. Any ideas why? I’ve just avoided driving in the snow for over a decade. I really don’t see the hype vs my reality.
Re: Hacking Subaru: Tracking and controlling cars via the admin panel
#250Earlier quoted context omitted.
I suspect it has to do with slow adoption of CarPlay/Android Auto in Japan - everyone still options aftermarket infotainment at dealerships and happier about it than with phone-based experiences. From a random Google search result[1]: > More than three-fourths (79%) cite the built-in navigation system. However, this percentage has decreased from 81% in 2022 and 82% in 2021. Use of Android Auto/Apple CarPlay apps is i…
>UI/UX and especially overall experience polish had always been a major challenge for Japanese engineering. I can believe it. The whole issue of "Japanese video game companies don't understand the internet" to some extent still feels like it is an issue at times. For a while it felt like we got late 1990s solutions in the mid 2010s... it's gotten better-ish in the land of video games, but man it's so bad at times sti…
sony fixed this with the ps4 by saying eff it "harware is done in japan where we're good at it, you brits and yanks can have the software"