Live data from Hacker News

Internet-connected cars fail privacy and security tests conducted by Mozilla

gizmodo.com

281–290 of 660 posts

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#282
post #241

Earlier quoted context omitted.

Kill switches are now required for cars produced after 2026. https://www.musclecarsandtrucks.com/biden-infrastructure-bil... It is for your safety. ;)

https://apnews.com/article/fact-checking-402773429497

"It's not a kill switch, it slows the vehicle to a stop instead of being instant." I fail to see the practical difference. I don't want my car incorrectly deciding I am impaired and "coasting to a gentle stop" on the way to a hospital during a medical emergency or something.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#283

The problem when you don't have competitive markets is that companies collude to use their oligopoly power and start exploiting people instead of making products for them. It's socially destructive because without privacy and moral context, all that is left is nihilism. Without privacy for the human exceptions to ideals, who gives a fuck if you lie, cheat, drive recklessly, cultivate morbid sexuality, or worse, as yo…

[deleted]

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#284
post #273

Earlier quoted context omitted.

I hate them so much. Otherwise great cars are completely ruined by touchscreens. What was wrong with tactile knobs you could operate one handed without looking? You’re driving for fuck’s sake. It’s why things like the GR Corolla are nearly miraculous in 2023, it even comes stick shift only.

I would loooooove if a Cadillac Ciel convertible from Pebble Beach 2011 came out, with the suicide doors, no touchscreens, etc. Who’s with me? https://en.wikipedia.org/wiki/Cadillac_Ciel The brands don’t often listen to their customers, all of whom clamored for this car ever since it was shown. It only appeared in the “Entourage” movie and it’s a beaut. Nary a single bad review on the entire Internet, but tons of peo…

>Car guys — what is the closest car one can get to this today, in all of human history? Go to Cuba and get some gas-guzzling illegal convertible with tailfins?

Maybe not Cuba, but there's a new car restoration series on whichever streaming platform, I can't keep up, that's located in El Paso, TX. They go across the border and buy older cars, then import into the US.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#285
post #227

The more I read about these things, the more I think I'll be driving my 23 year old Toyota 4Runner until the end of my life

Except when you live in a city where they start to limit and ban transit of older cars, to force people transitioning into lower emission models, or public transit. Like in Spain (through rules ultimately coming from Europe) there is a class of vehicles which are gradually being kicked out (banned from crossing certain very ample boundaries around the city): gasoline cars made before 2001, and diesel powered cars mad…

Also rolled out in London.

https://en.wikipedia.org/wiki/Ultra_Low_Emission_Zone

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#286
post #275

Earlier quoted context omitted.

I assume it's a cost thing. Slapping a tablet everywhere and letting the code monkeys figure it out is probably cheaper than making various knobs and buttons. I dread the day I have to get a new car. Even Subaru, who are usually behind the curve, have gone all touch screen.

I took advantage of the used car market to upgrade my 2021 Subaru to a 2024 (same car, better trim), there's actually MORE physical controls in the 2024 - hope isn't entirely lost!

How did you find a 2024 model car on the used car market?

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#287
post #259
post #175

Earlier quoted context omitted.

In 2018? I doubt car manufacturers can move that fast. Apple didn't implement eSIM until 2018 for the iPhone XS. No way an auto maker has it before consumer electronics maker.

Given the Wikipedia page about eSIM says: The European Commission selected the eUICC format for its in-vehicle emergency call service, known as eCall, in 2012.[23] All new car models in the EU must have one by 2018 to instantly connect the car to emergency services in case of an accident.[24] I'd say they have been around since then. edit: here is a great talk about how eSIMs work from last CCC https://media.ccc.de/v…

For a very long time now you have never needed a SIM to call emergency services. Maybe it's different in the EU but US car models that include telematics (ie Onstar) have been able to call emergency services without a subscription.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#288

This is very much in line with the industry trying desperately to get into the tech recurring revenue model. > the manufacturer collects information including sexual activity, health diagnosis data, and genetic data, though there’s no details about how exactly that data is gathered How is that even possible? Without more details about what this means and how it's done, this sounds a bit fishy to me. > Mozilla said it…

> How is that even possible? Without more details about what this means and how it's done, this sounds a bit fishy to me. Did you visit some explicit site without VPN (or at least a private tab)? Bingo. The data brokers will correlate you. Once your data can be correlated, whatever they gather is thrown into the pool. I'll bet that there's some back-scratching going on somewhere. Hey we know all about where John is a…

When it comes to privacy data handling, the term "collecting" is a very specific term that means they are directly collecting it from you, so, unless they use the term in a non standard way, that means they supposedly collect your genetic material and sexual preferences _from you_. Which, erk, but also, how?

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#289
post #165

Earlier quoted context omitted.

Might depend on the wording of the law and how that system is tied into the rest of the car. For example in the states, it is illegal to tamper with any part of the emissions control system on your car. This is mostly about making sure emissions testing via OBD II can’t be gamed, but it also would target modifications like “rolling coal” or turbos and superchargers that allow user controlled fuel mapping. But in the…

it is illegal to tamper with any part of the emissions control system on your car. Can you cite the law? I know the EPA has civilly pursues companies that make products that bypass emission controls. But haven’t seen or heard anything that goes as fat as you suggest. E.g.: https://www.dinancars.com/products/software-tuning/engine-tu... This allows you to change the engine programming on a BMW. They do note it is not…

Title 2 of the Clean Air Act "authorizes the EPA to set standards applicable to emissions... the CAA prohibits tampering with emissions controls, as well as manufacturing, selling, and installing aftermarket devices intended to defeat those controls."

They just got a $10M civil judgement against a couple "diesel tuners" here in Michigan:

https://www.justice.gov/opa/pr/united-states-awards-10-milli...

https://www.epa.gov/enforcement/national-enforcement-and-com...

but yeah, this is civil action against vendors, not anything that police will fine people for on the side of the road.

Re: Internet-connected cars fail privacy and security tests conducted by Mozilla

#290
post #231

The article is not very clear about whether this kind of abusive data collection is actually happening and they can prove it, or whether they found the text of the privacy policies to be overly broad. I have no idea how a car would infer my sexual orientation.

May be if you drive often near bars or places with specific orientation?
Post reply on HN