this post was submitted on 06 Sep 2023
169 points (95.7% liked)

Privacy

31876 readers
645 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Edit: Just asked because of curiosity. I'm not actually looking for such vehicles.

Edit 2: So for context, my parents new Toyota has this feature that allows the GPS location of the car to be sent to toyota, then you can see the location via an app on android/ios (it's supposed to be an anti-theft feature). The data is sent via an antenna that connects to cell towers, which then connects to the internet, and to the toyota servers. "Diagnostic" and "maintenance" information is also sent via those same antennas.

The dealer said it could be turned off, but who knows if they are really off. There's not a hard switch on the car.

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 78 points 1 year ago* (last edited 1 year ago) (2 children)
[–] [email protected] 34 points 1 year ago (1 children)

Hyundai’s privacy policy says, for example, that they can share data with law enforcement and governments based on “formal or informal” requests.

Wow. Informal requests means that someone just has to pretend they're a LEO and Hyundai might share the information.

[–] [email protected] 14 points 1 year ago (1 children)

Ouff.

A few cars use Android Automotive OS. I wonder if it's possible to run a privacy focused custom OS on them.

[–] [email protected] 11 points 1 year ago (1 children)

Doubtful. Android automotive OS runs on a single ECU in the car while a lot more are in there running QNX, Linux or some embedded OSes (sometimes there are more than 100 such ECUs in the car). So there's no guarantee that the "problematic" services are even running on this ECU (I bet it's more distributed). Furthermore updating / changing the software of a single ECU is done using special hardware or through some kind of gateway ECU. They will perform validation on the to-be-flashed software to ensure it's from the vendor itself.

And even if you'd get it flashed I can guarantee you that nothing will work.

[–] [email protected] 5 points 1 year ago

I watched a video of some People hacking scooters from CCC. Damn scooters. They gave up.

[–] [email protected] 25 points 1 year ago* (last edited 1 year ago) (1 children)

In most legacy manufacturers (e.g, not Tesla) vehicles you can disable/remove the communication module, which is a cell phone modem that interfaces with the car.

For Toyota specifically this is called the DCM (data communication module). It’s a little black box. In Fords/Hondas it’s called a TCU (telematics control module).

In some cases, you can just pull the fuse for the telematics box.

In general, when you research whether you can physically remove this tracking stuff from modern cars, the key word is to use is “telematics”.

I’m afraid it’s going to get much worse. Right now you can at least disable/take out the little box out of most cars without losing functionality for the most part. Soon it’ll be crippling to do so.

[–] [email protected] 1 points 1 year ago

Yeah I can't wait for the day that securing my privacy on my car cripples it to the same extent that disabling bloatware cripples my phones functionality (literally couldn't send/recoeve calls or texts or use any browser)

Doesn't seem far off with that Mozilla study honestly

[–] [email protected] 22 points 1 year ago (2 children)

I read somewhere one time that you can ask the dealership to rip out the modem thing for you so there's no internet. I wonder if there's a guide or manual to do it ourselves though. I recall it's towards the trunk area and sometimes near the top of the cabin.

[–] [email protected] 27 points 1 year ago* (last edited 1 year ago) (1 children)

The dealership won't do it but most independent workshops probably will. You might get into trouble with your warranty though if there's ever an electric issue, the disconnected unit will show up as a fault code during diagnostics.

[–] [email protected] 8 points 1 year ago (1 children)

Which at least in Germany should lead to failing vehicle inspections.

[–] [email protected] 5 points 1 year ago

What’s worse is that in the EU, the connectivity is mandated with eCall, which calls the police with your coordinates in the event of a crash.

Though the EU has strong data privacy so at least you can be semi confident you can opt out and have your data forgotten from the manufacturer

[–] [email protected] 6 points 1 year ago* (last edited 1 year ago)

While this is probably the only real solution for complete peace of mind, you may be able to find and disconnect the fuse to the telemetry system as an easier (and cheaper) fix - check out the fuse box diagram in your owner's manual!

[–] [email protected] 21 points 1 year ago (1 children)

Even your 'tire pressure sensors' can be used to track individuals around a city. https://www.schneier.com/blog/archives/2008/04/tracking_vehicl.html

[–] [email protected] 12 points 1 year ago

In 2008 they knew about this? Holy crap I need to do some research.

[–] [email protected] 21 points 1 year ago (1 children)

You can buy a 2023 Dacia Logan and it will still have none of the gizmos and knicknacks that track you and your behaviour.

Whether you call that a "modern" car is another debate, but for sure it's a recent one.

[–] [email protected] 4 points 1 year ago (2 children)

The great part of Dacia is that you can probably buy any faulty part for a bag of peanuts and a pack of cigarettes and thieves won't even bother you so no need for "anti-theft" feature

[–] [email protected] 2 points 1 year ago

Just hope you're never involved in an accident, they're generally pretty shitty safety-wise.

[–] [email protected] 1 points 1 year ago

The bad part of Dacia is that last time I checked they only offered diesel and LPG versions (for the model I was interested in).

[–] [email protected] 17 points 1 year ago

Your best bet for a "hardware switch" is reading the service manual to find which fuse controls the comms module, and pull it. Depending on the vehicle it may have other side effects.

Maybe we will get to the point where people are selling modchips for cars, like the OG PlayStation.

[–] [email protected] 11 points 1 year ago (1 children)

Define "privacy" and define "modern car".

In the end, it doesn't matter what car you're driving if you bring your Android/iPhone...

[–] [email protected] 38 points 1 year ago (10 children)

There are "privacy oriented" smartphone replacements. You could flash graphene os to a Pixel.

There is not really such thing for cars.

load more comments (10 replies)
[–] [email protected] 10 points 1 year ago

My LEAF has no connectivity since 3g eas shutdown.

[–] [email protected] 9 points 1 year ago

Some cars even have cameras inside them now to verify the driver, so consider that next time you have sexy time.

[–] [email protected] 7 points 1 year ago

Not really, no. It's all super closed sourced so you will never know what's tracking you.

[–] [email protected] 7 points 1 year ago

Maybe have them pull out the router at the dealership. I think they have to listen to your request. They may argue with you about it and be like "yeah but you won't have internet and all this cool stuff" but yeah whatever people have phones nowadays anyway.

[–] [email protected] 5 points 1 year ago

I'm still happy driving an older car but the writing is on the wall for the next one I think

[–] [email protected] 4 points 1 year ago (1 children)

is it possible for the car to connect to internet without u letting it? maybe just never connect?

[–] [email protected] 5 points 1 year ago (1 children)

It has to connect to the internet somehow. Otherwise how could I see where the car is are using the Toyota app? I could see the tire pressure in each tire and the amount of fuel.

There is also this button at the top (the ceiling?) of the car that basically acts like an emergency button. Pressing it connects your car to someone at toyota that calls for roadside assistance. But idk why then even have that since most people have phones anyways.

[–] [email protected] 4 points 1 year ago (1 children)
  1. i would highly recommend never connecting it to internet. a small inconvinience for much better privacy. zero trust rule: only enable an abusable feature like internet on things which absolutely need it

  2. the emergency button probably connects to any cell tower, regardless of your provider (like a phone with no sim), or maybe even satellite? i highly doubt that toyota would use this for anything besides emergencies (although one can never be sure)

  3. some people still dont have phones, and that is not a bad thing.

[–] [email protected] 3 points 1 year ago (1 children)
  1. You don't need touch anything in the car for it to connect to the internet. It's a brand new car, and the car salesperson just put the VIN in the app and you can see the location of the car. Which means, it was already connected right out of the factory.
[–] [email protected] 1 points 1 year ago

damn that sucks

[–] [email protected] 4 points 1 year ago

Couldn't you physically remove the antenna?

[–] [email protected] 4 points 1 year ago (2 children)
[–] [email protected] 3 points 1 year ago (1 children)

I am really curious now. I would never buy one but share, so also spread my fingerprint which isnt that bad.

But now I wonder, are there any electric cars that dont suck?

[–] [email protected] 4 points 1 year ago (3 children)

All of the ICE have this too. It's not just EVs.

load more comments (3 replies)
[–] [email protected] 2 points 1 year ago

I doubt what the dealer says is true. Intentionally or not. I don't really believe cars do us much net good anyway. Public transport and biking/walking for the win.

load more comments
view more: next ›