Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hacking Subaru: Tracking and controlling cars via the admin panel

samcurry.net

Post reply on HN
Print view View original

301–310 of 334 posts

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#301

Post by robertlagrant »

GJim wrote: post #281
dantillberg wrote: post #112

Last year, I submitted a "right to know" request to Subaru, and they sent the following back. I've reformatted it for legibility. Basically asserts they'll do and sell whatever they want (except another car to me). > Subaru may collect the following personal information about a consumer: > Categories of personal information: > Identifiers: Consumer records, Commercial information, Internet or Other Electronic Network…

But not in the UK or EU. Need I say which law protects us..... the one a significant number of HN readers (a technical news site!) appear to remain in shocking ignorance of?

You can do this in the UK or EU if you like; you just need to have permission to do so from the data subject.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#302

Post by marcellus23 »

scottbez1 wrote: post #135
duxup wrote: post #41

Earlier quoted context omitted.

I love my Subaru as far as reliability, all wheel drive performance in snow and ice, and such. But OMG it's consumer tech was dated when I bough it, and it's just full of inexplicable issues and caveats and such. Even just the limitations and the UX issues are so obvious that it sends a message that if they tried to fix them they would introduce just as many new issues. I'm at the point where despite the car being go…

Hmm this is really different than my experience with a 2018 Crosstrek, so maybe things have changed? When I bought it, Subaru was among the earlier CarPlay/Android Auto adopters (we specifically ruled out a new model year Prius because it lacked it and we couldn't wait a year to replace our totaled car just for CarPlay/AA), and other than a very rare issue where the head unit screen doesn't turn on, it's been pretty…

> that's entirely on Apple

CarPlay supports pan gestures based on configuration provided to it by the car maker. This is entirely on Subaru for misconfiguring their CarPlay integration.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#303

Post by Clent »

joking wrote: post #273
wil421 wrote: post #262

Earlier quoted context omitted.

I used my chrome inspector to edit a read only field in Jira. Surprisingly I was able to edit it and submit the change. It complete fucked up whatever protect we were about to use and we had to start over. The JIRA admins were scratching their heads.

Thats by design, you can’t trust the client, everything has to be checked server side.

I think you misunderstand what's being described. The server didn't check it, it accepted the modified hidden field. The server should have rejected the request.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#304

Post by JumpCrisscross »

UltraSane wrote: post #280
JumpCrisscross wrote: post #248

Earlier quoted context omitted.

I am of Indian descent. Apparently from the penultimate caste. Anyway, I had someone from another team inform me of the inferior caste of one of our clients, and why I shouldn’t take shit from them. That said, going back to New Delhi, at least in the circles I travelled in, it’s incredibly taboo to ask about caste. (Comparable to Americans using the n word.)

I've learned it is normally pretty easy to tell what caste someone is from. But watching a Brahmin who really believes they are vastly better than Dalits act like as arrogant as the Goa'uld from Stargate SG1 was really something.

> I've learned it is normally pretty easy to tell what caste someone is from

With all due respect, you’ve fooled yourself into ignorance.

Many Indians haven’t had a relationship with caste for generations, particularly in the cities or upper and middle classes. (Intermarriage and wealth have rendered it indiscernible.)

There are also something like 25,000 castes and subcastes. It’s not a system designed for anyone to get right. That convolutedness is almost the point. Moreover, there are tens of millions of Indians who have never had a caste because they belong to a different religion or sect of Hinduism.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#305

Post by HeyLaughingBoy »

reaperducer wrote: post #118
rtkwe wrote: post #62

Earlier quoted context omitted.

You can also do other stuff like start the climate controls so the car is comfortable before you reach it on hot or cold days.

You can also do other stuff like start the climate controls so the car is comfortable before you reach it on hot or cold days. Also a solved problem. This one since at least the 1970's. No internet required.

From five miles away?

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#306

Post by HeyLaughingBoy »

prmoustache wrote: post #263
brookst wrote: post #215

Earlier quoted context omitted.

Key fob works great if the car is close. Remote start by app is fantastic when it’s farther away.

Why would you want to remote start a car if you are a mile away?

I used to commute into the city by express bus. Drive to Metro Transit Park-n-Ride lot, park the car and get on the bus.

On the way back a lot of people would start their cars (via app) when about 5 minutes away from the lot. That translates to about 4-5 miles at freeway speed.

Alternately, at the office, some people parked at a lot that was about a mile away and it's nice to be able to start your car when it's 95F or -15F so it's comfortable when you get there.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#307

Post by HeyLaughingBoy »

hmmm-i-wonder wrote: post #269
snowingsnow wrote: post #249

Earlier quoted context omitted.

I have a 2014 forester. First time it snowed I slid off my driveway and one tire was off the ground. Had to get towed by a friend because that one wheel kept spinning. I thought the brakes were supposed to stop that automatically. Didn’t happen. Second time I tried to drove through a small patch of snow I lost all traction and had to dig out all the wheels and rock it. It was 2” of melting snow over a 50 foot by 10 f…

Sounds like a wrong tire problem, not an AWD problem to me. My parents also had a 2014 Forrestor. They parked it next to my shed when they went on a cruise one winter, and it crawled itself out of a 2 foot snowbank without shovelling it when they got back. That thing was a tank in snow and I definitely abused it when I had the chance. For the 'tire spinning in the air', sounds like the other tires must have been spin…

I agree. My RWD 350Z with winter tires would probably have handled both of those situations without batting an eyelash.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#308

Post by y-c-o-m-b »

t0bia_s wrote: post #37
jeroenhd wrote: post #25

Earlier quoted context omitted.

You'll have a hard time avoiding it if you buy a new car: https://foundation.mozilla.org/en/privacynotincluded/categor...

Don't buy a new one. Buy old one and remove all tracking devices if necessary.

Previous Subie owner here (03 WRX, 04 Impreza, 03 Outback). I've been looking for an older one (2004-2013) for the last 6 months. The amount of people that don't know or don't disclose leaking differentials, leaking transmissions, and head-gasket issues (despite claiming they've been "fixed") is staggering.

With one car I inspected, me and two other buyers came to see it at the same time; I think the seller orchestrated that intentionally. Well too bad for him, I inspected underneath and it was a leaking mess from every section. To which I quickly pointed out to the other buyers. We all walked away lol.

Of course you can have these issues with newer models also, but they're so prevalent with the older ones.

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#309

Post by prmoustache »

HeyLaughingBoy wrote: post #306
prmoustache wrote: post #263

Earlier quoted context omitted.

Why would you want to remote start a car if you are a mile away?

I used to commute into the city by express bus. Drive to Metro Transit Park-n-Ride lot, park the car and get on the bus. On the way back a lot of people would start their cars (via app) when about 5 minutes away from the lot. That translates to about 4-5 miles at freeway speed. Alternately, at the office, some people parked at a lot that was about a mile away and it's nice to be able to start your car when it's 95F o…

All I see is a waste of gasoline. Back when I was living in a cold country and drove a car early in the morning I would just use gloves, keep my jacket and heat my seat with a fart. ;-)

Re: Hacking Subaru: Tracking and controlling cars via the admin panel

#310

Post by monomial »

Good god. This is why I will continue to repair my older car until it's completely infeasible to do so. Then what? Are there internet communities out there actively working on disabling all this nonsense? Can't imagine buying a car like this without knowing I can physically disable the cell modem.
Post reply on HN