Live data from Hacker News

Inferring car movement patterns from passive TPMS measurements

dspace.networks.imdea.org

1–10 of 17 posts

Re: Inferring car movement patterns from passive TPMS measurements

#2
I have an RTL SDR setup in a retail business receiving temperatures from sensors around the property. Besides the neighbors' weather stations I see a lot of TPMS coming, presumably, from the parking lot. I see the same cars regularly. I could definitely correlate them with the POS terminals and identify individual customers.

Re: Inferring car movement patterns from passive TPMS measurements

#3

I have an RTL SDR setup in a retail business receiving temperatures from sensors around the property. Besides the neighbors' weather stations I see a lot of TPMS coming, presumably, from the parking lot. I see the same cars regularly. I could definitely correlate them with the POS terminals and identify individual customers.

Most places where this would be legal there are probably much more effective ways to do it at the POS, even non-biometrically. Although yes you might consider usng TPMS as part of an ensemble.

Re: Inferring car movement patterns from passive TPMS measurements

#4
I built a demo of this back when I worked at Qualcomm in Seattle; match this with WiFi beacons and you can trace a person fairly well. It's been over a decade, but at the time both iOS and Android would send pings fairly frequently to all known WiFi networks looking to see if they should switch to a faster one. With your device ID, list of SSIDs you know, and your TPMS data, a person can learn a lot about you.

Like, where do you work? Where do you stay (Hotel SSIDs)? Who are your friends (other people's home SSIDs)?

Re: Inferring car movement patterns from passive TPMS measurements

#5
post #4

I built a demo of this back when I worked at Qualcomm in Seattle; match this with WiFi beacons and you can trace a person fairly well. It's been over a decade, but at the time both iOS and Android would send pings fairly frequently to all known WiFi networks looking to see if they should switch to a faster one. With your device ID, list of SSIDs you know, and your TPMS data, a person can learn a lot about you. Like,…

And this is what I exhaustively tell people who insist that [tech company] is listening. My reply boils down to, "Why would they need to when you already send them everything in writing?"

Re: Inferring car movement patterns from passive TPMS measurements

#6
post #4

I built a demo of this back when I worked at Qualcomm in Seattle; match this with WiFi beacons and you can trace a person fairly well. It's been over a decade, but at the time both iOS and Android would send pings fairly frequently to all known WiFi networks looking to see if they should switch to a faster one. With your device ID, list of SSIDs you know, and your TPMS data, a person can learn a lot about you. Like,…

Phones randomize hardware addresses now, so this doesn't work. Although there are better, not-so-publicly-known, ways to do it anyway.

Re: Inferring car movement patterns from passive TPMS measurements

#9
Maybe a buying trip north of the border might suit some U.S. folks alarmed by the TPMS blabbermouth data. Although Canadian-spec new vehicles usually have TPMS monitoring, it is not mandated, so some vehicles will display a dashboard icon or menu warning if no TPMS signal is seen, while others will just ignore the issue. Given that many Canadian consumers have dedicated sets of winter and summer tires/wheels, this is sensible to not require TPMS systems. Caveat emptor: I have no idea whether recertifying a new Canadian vehicle for the U.S. (i.e. changing kph speedo to mph, etc) involves flashing such different software.
Post reply on HN