Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Toyota: Car location data and videos of 2M customers exposed for ten years

bleepingcomputer.com

Post reply on HN
Print view View original

51–60 of 314 posts

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#51

Post by swalling »

Toyota owners: you can opt out of this data collection in their app or by calling them. https://support.toyota.com/s/article/Can-I-optout-of-Toyot-1...

Unfortunately as far as I can tell it only actually stops after the "remote connect" trial period ends one year after you buy a new vehicle that opts you in automatically. There are probably ways to physically disable the data collection modules for this, if you're comfortable tearing apart your car's dash. https://www.tacomaworld.com/threads/2020-data-transmittal.63...

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#53

Post by dapearce »

> It is important to note that the exposed details do not constitute personally identifiable information, so it wouldn't be possible to use this data leak to track individuals

The data included timestamped GPS data, which has been demonstrated to be easy to de-anonymize.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#54

Post by Scoundreller »

giobox wrote: post #45
wolrah wrote: post #31

Earlier quoted context omitted.

All machines of meaningful complexity need maintenance if you expect them to last, including EVs, and a fluid change that happens twice a year for most vehicles isn't exactly a huge inconvenience. IMO getting under your vehicle twice a year is a good thing and more people should be encouraged to do it. Getting eyes on the stuff hidden underneath before it gets bad enough to start breaking is always useful.

> All machines of meaningful complexity need maintenance if you expect them to last, including EVs This is honestly not true - there is an order of magnitude less parts in an EV drivetrain vs a modern ICE car. You can go a decade between seeing a service center in an EV, largely thanks to regen braking/one pedal driving allowing you to avoid new pads or discs. There is no transmission in virtually all EVs, with drive…

> largely thanks to regen braking allowing you to avoid new pads or discs

I’m almost there with the old-school way: a manual transmission and downshifting to decelerate.

While not as effective, drum brakes really lasted a while.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#55

Post by matheweis »

sumtechguy wrote: post #39
greenie_beans wrote: post #10

good lord. i'm so glad my toyota doesn't have any of those features. shout out to the lean method.

If it is anything after about 2012 it probably does. Also if this hack is out of the software I think it is, I am not surprised. Some of the main devs were more worried about what a function was named than how to make it work correctly and securely.

Depends on where the data comes from.

A bunch of Toyotas have a telemetry module (basically an LTE modem tied into the can bus and the head unit), but the introduction date varies.

Tacomas for example didn’t have it until 2020.

I’m not sure though if this data is/was getting pushed through that or something else.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#57

Post by Cardinal7167 »

short_sells_poo wrote: post #36
thewataccount wrote: post #23

Their privacy policy is wild and every customer is opted into the connect services by default. Interior images, exterior images, facial geometry, voice recordings, location/driving data, "multimedia screen data", https://www.toyota.com/privacyvts/ https://web.archive.org/web/20230512182022/https://www.toyot...

> Interior images, exterior images, facial geometry, voice recordings, This is an absolutely unbelievable level of privacy intrusion IMO. I 100% support very heavily fining this sort of behavior, otherwise it will continue to proliferate.

It will never get fined because it’s how the people who legislate fines are making (and keeping) their money and control.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#58

Post by chubot »

dapearce wrote: post #53

> It is important to note that the exposed details do not constitute personally identifiable information, so it wouldn't be possible to use this data leak to track individuals The data included timestamped GPS data, which has been demonstrated to be easy to de-anonymize.

But the VIN number was available, as it says right below that

I mean does anyone think there HASN'T been a leak of VIN numbers and owners that would be trivial to join with this?

It's also kind of staggering how long this was a problem

Toyota Motor Corporation disclosed a data breach on its cloud environment that exposed the car-location information of 2,150,000 customers for ten years, between November 6, 2013, and April 17, 2023.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#59

Post by Throw3849949 »

jerry1979 wrote: post #52

Does anyone have a guide to modding vehicles to prevent them from collecting data? I would be willing to snip the microphone in the cab and remove the gps receiver if I knew where it was.

GSM and GPS jammer is the only reliable way.

Re: Toyota: Car location data and videos of 2M customers exposed for ten years

#60

Post by numpad0 »

badpun wrote: post #6
zyang wrote: post #2

Japanese auto completely missed the memo on software. Many of them won't make the ev transition. It's hard to imagine what Japanese economy is going to be like once their auto industry is gutted.

> Many of them won't make the ev transition. It's still not clear when (and if) the ev transition will happen. There are many unknowns.

I feel like it’s an architectural change, similar to how smartphone transition wasn’t just about touchscreens. Many flip phones in Japan gained touchscreen after iPhone like wings on a dragon, and died anyway.
Post reply on HN