Live data from Hacker News

Tesla workers shared sensitive images recorded by customer cars

reuters.com

471–480 of 521 posts

Re: Tesla workers shared sensitive images recorded by customer cars

#471

Earlier quoted context omitted.

I've seen something very similar with medical data.

I had a background check company that a previous employer used email me to say: "I just wanted to verify that this is the correct email address for you, and that the following info is correct:" and proceeded to list my full name including middle initial, name, phone number, date of birth and full SSN." Mind blown on a couple of levels. Was tempted to reply back "I have no idea who this is - this isn't the correct ema…

If they are Dutch that would be illegal under Dutch law. We have very strict laws around private investigation and anybody doing that without the proper license would be in a lot of trouble.

Re: Tesla workers shared sensitive images recorded by customer cars

#472

Earlier quoted context omitted.

Both violate user privacy and imply a need for better data privacy protections. One was targeted and the other was not, but they are in the same class of issues even if the severity is different.

Google's was a rogue employee that was caught. Tesla seems to be a cultural problem where employees think it's OK.

> Google's was a rogue employee that was caught. Tesla seems to be a cultural problem where employees think it's OK.

While having it be ok as corporate culture is a bit worse, fundamentally the problem is that private personal data is available to these corporations so at that level it is the same problem.

The only systems which are safe are those which either never send private data outside of local (local to the user) devices, or, where data sent out is encrypted client-side with keys which are generated, stored and only ever available to the client.

Anything else, will be abused.

Re: Tesla workers shared sensitive images recorded by customer cars

#473
post #273
post #73

Earlier quoted context omitted.

Absolutely. Just like Amazon, Facebook, Uber, NSA and other employees have done so as well. The only reason Apple or Google employees might not do that is encryption and decent access controls, not because they are better people. It would not shock me in the least if a Google or Apple employee did something similar. It might shock me a little just because of the risk/reward if they were just snooping on random people…

Facebook has had access auditing tools for at least 15 years at this point, and it only got stricter with time. It was already a fireable offence back then, too, to improperly access someone's data without a business justification. From what I heard they did indeed have some LOVEINT problems before that i.e. an employee couple with a nasty breakup - but they were also orders of magnitude smaller.

> It was already a fireable offence back then, too, to improperly access someone's data without a business justification.

Is this supposed to be comforting? "without a business justification" means that if there is business justification (e.g. more revenue) they will violate privacy.

Re: Tesla workers shared sensitive images recorded by customer cars

#474

Earlier quoted context omitted.

I had a background check company that a previous employer used email me to say: "I just wanted to verify that this is the correct email address for you, and that the following info is correct:" and proceeded to list my full name including middle initial, name, phone number, date of birth and full SSN." Mind blown on a couple of levels. Was tempted to reply back "I have no idea who this is - this isn't the correct ema…

If they are Dutch that would be illegal under Dutch law. We have very strict laws around private investigation and anybody doing that without the proper license would be in a lot of trouble.

The United States has similar laws, where licensed Private Investigators have to at least supervise investigations (it's a bit like having a licensed pharmacist on duty while less-trained people actually hand out the meds, or having a medical doctor supervise the work of a group of physician's assistants).

There are some exceptions, but most of the time you need a license to go snooping around. These PI licenses are also a major perk of law enforcement careers, as it's sometimes difficult to get the required work experience without time in law enforcement (unless you don't mind working for nearly-nothing under a PI taking photos of insurance & workers compensation cheats, unfaithful spouses, etc. for years).

That background check company was almost certainly operating within the bounds of the law. They were just doing it Really Poorly.

Re: Tesla workers shared sensitive images recorded by customer cars

#475

Earlier quoted context omitted.

[flagged]

From 7 July 2024 these rules will apply in the EU: For all road vehicles (i.e. cars, vans, trucks and buses): intelligent speed assistance, reversing detection with camera or sensors, attention warning in case of driver drowsiness or distraction, event data recorders as well as an emergency stop signal; https://ec.europa.eu/commission/presscorner/detail/en/ip_22_... Apparently drowsy drivers account for about 100 000…

"drunk or tired" is quite a way of phrasing that if the drunk ones cause 88% of the combined fatalities and the cameras detect the tired ones...

Re: Tesla workers shared sensitive images recorded by customer cars

#476

Earlier quoted context omitted.

The other comment was pointing out that ToF has nothing to do with drowsiness/alcohol detection.

Let me go ahead and be first to tell you that there is the stated reason, the real one, and the “well, now that we have it” downstream. Cameras AND ToF for the driver are coming. Only idiots will want it.

> Cameras AND ToF for the driver are coming.

Why do I care about "AND ToF"? Okay, it can detect the depth of my nose 5% more accurately. What difference does that make?

Re: Tesla workers shared sensitive images recorded by customer cars

#477
post #370

Earlier quoted context omitted.

>Privacy is taken extremely seriously here in Germany I find this hard to believe considering their numerous lies about their car emissions and the extent they went to cover it up.

What's the correlation? Car emissions aren't composed of PII or anything.

The correlation is integrity and honesty. Do you really think these German car companies that lied, cheated and defrauded their customers care about the privacy of your data? That's like asking a criminal if they care about your health.

Re: Tesla workers shared sensitive images recorded by customer cars

#478

Reminds me of the time I bought lunch at work, and a colleague told me exactly what I bought and how much I paid for it. I called him out and said it was a lucky guess, and then he proceeded to tell me my entire payment history for the past 2 days. Turns out when I was buying lunch, he was on the phone with a friend who worked at Paytm and that guy gave away my transaction history for shits and giggles. My trust in p…

What you must understand is that this is human nature not "private companies." When I was in high school I had a friend who worked at one of those 1-hr photo processing places. People would bring their film in to have prints made. And there were no small numbers of "intimate" photos on those rolls of film. Yes even in the days of film cameras, people took photos of themselves in sexual situations. Of course my friend…

Human nature? Sure, but very much lack of regulation and of good corporate privacy policies. First, customer data should be in a special, highly logged environment. Anyone logging in for whatever reason needs a justification. Next audit or periodically or if something goes wrong, those logs are checked and people confronted with why they're accessing random person X's data for no work related reason.

Won't make those incidents disappear completely, but it will sure kill off fetching data from a friend of a friend for shits n giggles.

Re: Tesla workers shared sensitive images recorded by customer cars

#479

Earlier quoted context omitted.

At the moment, AP still uses steering wheel torque. Just put a piece of tape over the interior camera. I'd be pretty surprised if any of the cameras routinely stream. Too much of a bandwidth hog.

The most recent FSD beta update from a few days ago finally started using the interior camera to track driver attentiveness, according to the release notes.

FSD software, even with FSD disabled uses the internal camera for driver attentiveness when using autopilot, as early as January this year.

Re: Tesla workers shared sensitive images recorded by customer cars

#480
post #67

Wanted to get Model Y in the past. Nice comfy car, huge backseat and… a camera filming inside the car. Thanks no. Apparently for drowsiness detection, but I am not buying it. Time of flight camera staring at the driver’s face is kinda normal in car industry. Not a normal color camera filming everything and streaming somewhere like Tesla does.

Get a German car. Privacy is taken extremely seriously here in Germany. In all walks of life. Companies, schools, doctor‘s offices, etc. Edit: I wouldn’t want to touch a Tesla even if it was gifted to me. Seeing the founder behave the way he does (latest incident: Changing Twitter’s logo to a shitcoins image) makes him extremely unsympathetic to me.

Do you have more privacy rights if you buy a tesla in germany?
Post reply on HN