Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

VW breach exposes location of 800k electric vehicles

cyberinsider.com

Post reply on HN
Print view View original

281–290 of 317 posts

Re: VW breach exposes location of 800k electric vehicles

#281

Post by spike021 »

steelframe wrote: post #271
jazzyjackson wrote: post #170

Earlier quoted context omitted.

I've read disabled cellular modem on toyota prius also disables the microphone for bluetooth phone calls / handsfree commands. funny that.

I pulled the DCM fuse on my GR Corolla. I can confirm that it disabled the microphone. One of these days I might get around to pulling the car apart and popping in a resistor in place of the antenna.

heh I have the same car. was thinking of doing the same.. but like mentioned earlier I want that valet setting feature and stuff. tough choice.

Re: VW breach exposes location of 800k electric vehicles

#282

Post by rrr_oh_man »

AnthonyMouse wrote: post #267
rrr_oh_man wrote: post #228

Earlier quoted context omitted.

Cars from 2010 with optional ABS? Maybe domestic third world sub-$10k tuna cans? But the larger point is definitely true.

Apparently the 2010 Chevy Cobalt was available without ABS. Definitely in the minority even 15 years ago though.

Nice find!

Although, it seems to have been only available/produced in Brazil, Columbia, Russia, Uzbekistan, which I'd argue is in line with my original sentiment.

Re: VW breach exposes location of 800k electric vehicles

#283

Post by rrr_oh_man »

canarycari0 wrote: post #243
wkat4242 wrote: post #237

Earlier quoted context omitted.

Hmm yeah but anything over 15 years isn't really viable as a daily driver anyway. Then you're getting to the point where you start having serious issues every year at the mandatory mechanical check. Then you're getting into old-timer drive once on a sunny day territory. I always bought medium sized cars at 10 years when they're already only a grand or two. The smallest ones are made so cheaply that they're already to…

>Then you're getting to the point where you start having serious issues every year at the mandatory mechanical check More like every couple months on the road, from my experience in having driven one. Just this year here are couple of things that have occurred: >glowplugs burnt out >air-mass sensor failure >faulty abs-sensor >fuel nozzle malfunction >brake failure >engine back support failure >short circuit after wor…

What are you guys driving?

20+ years old Volkswagen as a long range vehicle and daily driver. Yearly (preventative) maintenance: $300-400.

Re: VW breach exposes location of 800k electric vehicles

#284

Post by mihaaly »

Rohansi wrote: post #280
mihaaly wrote: post #279

Earlier quoted context omitted.

Putting your PIN on the back of your credit card is the most convenient thing. It is always there when you need it, no need to remember! Marginal knicknacks vs. serious risks kind of thing here.

The risks are not even comparable, IMO. I would rather take these conveniences because I don't think anyone would care to use that information against me if it was leaked. But many people would gladly use a credit card with PIN written on it.

An analogy does not mean it is around the level. ;D

It wasn't even the point of analogy dear. Help: the benefit/risk ratio is the point.

What you think about using information is different to what criminals think about using the information of anyone using the product. Not you is the point here, wrong orientation again. Everyone have the superfluous knicknacks, and everyone had their data leaked.

Maybe if you think you will not loose your credit card, you are much more organized for that or whatever superpower makes it so, or there will be no-one to take significant ammount from it, then please, write your PIN on the back. For you precious convenience. Better yet, have everyone's PIN written on it!! : /

Sorry for the bitter sarcasm, but I hate so much the self centered reasoning in something that is for everyone, you kind of people ruin things for all of us by allowing, even asking for fiddle-faddle tacky things, that expose all the rest to risks and dangers!

Re: VW breach exposes location of 800k electric vehicles

#285

Post by jen20 »

mulmen wrote: post #181
jazzyjackson wrote: post #178

Earlier quoted context omitted.

was it ever AM? info I can find points to traffic info being encoded in FM broadcast, as "audio" but above audible frequencies, 57khz, same as any metadata you get with modern digital radio - station name, song name, artist name etc. https://www.mediarealm.com.au/articles/fm-rds-radio-data-sys...

Oh! Maybe it was FM. I always thought it was on the same band as the "Tune AM for traffic information signs" but as you say outside the audible frequencies. Regardless the point is that the relevant information can be broadcast publicly and does not require location or cellular connectivity to function. My 2010 BMW knew about traffic jams but had no cellular connectivity to my knowledge.

Your 2010 BMW very likely did have cellular connectivity given that my 2008 model did. It might not work today though.

Re: VW breach exposes location of 800k electric vehicles

#286

Post by ctippett »

mjevans wrote: post #135
3eb7988a1663 wrote: post #128

Earlier quoted context omitted.

That's just bad opsec. I would have thought rule number one of soliciting was to be cash only. Ignoring of course that the amount of aggregated surveillance makes it impossible to escape monitoring. Credit cards, license plate scanners, phone GPS, airtags, doorbell cameras, "Eye in the Sky" spy planes, etc

The exact example IS bad opsec... however assume some example fuzzing for good opsec. Trip to McD's with a price of exactly happy meal + tax one day, and a recurring payment for XXX website OnlyFans access the next. Adjust the values to taste/theory. Sometimes a credit card is just a credit card.

Transaction data comes included with merchant metadata, simply fuzzing the amount doesn't mask anything.

Re: VW breach exposes location of 800k electric vehicles

#287

Post by ctippett »

3eb7988a1663 wrote: post #128
ctippett wrote: post #113

Earlier quoted context omitted.

I once worked for a firm that had access to credit card transaction data and came across almost this exact scenario. Kindergarten transactions one day, escort payments on another. It was — and still is — creepy. An average Joe like me shouldn't be able to pry into someone's private life like that.

That's just bad opsec. I would have thought rule number one of soliciting was to be cash only. Ignoring of course that the amount of aggregated surveillance makes it impossible to escape monitoring. Credit cards, license plate scanners, phone GPS, airtags, doorbell cameras, "Eye in the Sky" spy planes, etc

There are countries where prostitution is legal and commercial brothels accept mainstream payment methods.

Re: VW breach exposes location of 800k electric vehicles

#288

Post by haspok »

a3w wrote: post #89

Best of from 38th CCC: every three letter secret service of the country seems to be spyied out by this. And a secret VW testing facility in sweden was uncovered. Also, effects mostly EVs, but not only. (If the EV motor was the group usually logged to the opened AWS bucket, I don't understand how there were ICE or possibly hybrid cars involved in the leak.) https://streaming.media.ccc.de/38c3/ had a german language vi…

English "dub": https://media.ccc.de/v/38c3-wir-wissen-wo-dein-auto-steht-vo...

Re: VW breach exposes location of 800k electric vehicles

#289

Post by naranjito »

donquichotte wrote: post #204
cherryteastain wrote: post #97

We need a way to disable vehicle telemetry. No, a software switch is not enough. We need to be able to physically unplug the cellular modem entirely and have the vehicle work with 100% functionality (barring features which inherently require cellular connectivity like turning the heating on remotely) Car manufacturers' features are mostly useless anyway thanks to Android Auto/Apple CarPlay

In Europe, this is mandated by law. https://en.m.wikipedia.org/wiki/ECall

In Spain they soon will require V16 [0] too. Originally it was just a flashing light but then it was improved to use mobile networks to send an emergency call to authorities. And proving, that technically, it is possible to have something like ECall without deep integration into the car.

No need of having always on connection to the network, enable on emergencies only. Thus no remote hacking of SIM/base band possible at random times, or broadcasting presence until used. Mechanic or user can check battery periodically, replace if low, just like refilling wiper fluid. Car could even cut all other electric systems after deploying the integrated autonomous V16-like system.

Car manufacturers deciding to make their ECall implementations complex and privacy invading was their choice.

[0] https://en.wikipedia.org/wiki/V16_warning_beacon_lights

Re: VW breach exposes location of 800k electric vehicles

#290

Post by slightwinder »

a3w wrote: post #89

Best of from 38th CCC: every three letter secret service of the country seems to be spyied out by this. And a secret VW testing facility in sweden was uncovered. Also, effects mostly EVs, but not only. (If the EV motor was the group usually logged to the opened AWS bucket, I don't understand how there were ICE or possibly hybrid cars involved in the leak.) https://streaming.media.ccc.de/38c3/ had a german language vi…

> I don't understand how there were ICE or possibly hybrid cars involved in the leak.

The data-collection has nothing to do with the used engine, but the software-platform. Basically, the "OS" on which the car is running. EVs and premium Cars where the first to modernize this platform, and for obvious reasons they all use the same platform. After that, other cars are moving on to this platform too, so they now have a mix of different car-models who are mainly defined by their price-category.

Post reply on HN