this post was submitted on 06 Sep 2023
168 points (96.7% liked)

Privacy

31833 readers
247 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Edit: Just asked because of curiosity. I'm not actually looking for such vehicles.

Edit 2: So for context, my parents new Toyota has this feature that allows the GPS location of the car to be sent to toyota, then you can see the location via an app on android/ios (it's supposed to be an anti-theft feature). The data is sent via an antenna that connects to cell towers, which then connects to the internet, and to the toyota servers. "Diagnostic" and "maintenance" information is also sent via those same antennas.

The dealer said it could be turned off, but who knows if they are really off. There's not a hard switch on the car.

top 50 comments
sorted by: hot top controversial new old
[–] ExceptionalCow@feddit.de 78 points 1 year ago* (last edited 1 year ago) (2 children)
[–] Helix@feddit.de 34 points 1 year ago (1 children)

Hyundai’s privacy policy says, for example, that they can share data with law enforcement and governments based on “formal or informal” requests.

Wow. Informal requests means that someone just has to pretend they're a LEO and Hyundai might share the information.

[–] sic_1@feddit.de 14 points 1 year ago (1 children)

Ouff.

A few cars use Android Automotive OS. I wonder if it's possible to run a privacy focused custom OS on them.

[–] krnpnk@feddit.de 10 points 1 year ago (1 children)

Doubtful. Android automotive OS runs on a single ECU in the car while a lot more are in there running QNX, Linux or some embedded OSes (sometimes there are more than 100 such ECUs in the car). So there's no guarantee that the "problematic" services are even running on this ECU (I bet it's more distributed). Furthermore updating / changing the software of a single ECU is done using special hardware or through some kind of gateway ECU. They will perform validation on the to-be-flashed software to ensure it's from the vendor itself.

And even if you'd get it flashed I can guarantee you that nothing will work.

[–] Pantherina@feddit.de 4 points 1 year ago

I watched a video of some People hacking scooters from CCC. Damn scooters. They gave up.

[–] bzz@sh.itjust.works 24 points 1 year ago* (last edited 1 year ago) (1 children)

In most legacy manufacturers (e.g, not Tesla) vehicles you can disable/remove the communication module, which is a cell phone modem that interfaces with the car.

For Toyota specifically this is called the DCM (data communication module). It’s a little black box. In Fords/Hondas it’s called a TCU (telematics control module).

In some cases, you can just pull the fuse for the telematics box.

In general, when you research whether you can physically remove this tracking stuff from modern cars, the key word is to use is “telematics”.

I’m afraid it’s going to get much worse. Right now you can at least disable/take out the little box out of most cars without losing functionality for the most part. Soon it’ll be crippling to do so.

[–] akwd169@lemmy.sdf.org 1 points 1 year ago

Yeah I can't wait for the day that securing my privacy on my car cripples it to the same extent that disabling bloatware cripples my phones functionality (literally couldn't send/recoeve calls or texts or use any browser)

Doesn't seem far off with that Mozilla study honestly

[–] pineapplelover@lemm.ee 22 points 1 year ago (2 children)

I read somewhere one time that you can ask the dealership to rip out the modem thing for you so there's no internet. I wonder if there's a guide or manual to do it ourselves though. I recall it's towards the trunk area and sometimes near the top of the cabin.

[–] Hubi@feddit.de 27 points 1 year ago* (last edited 1 year ago) (1 children)

The dealership won't do it but most independent workshops probably will. You might get into trouble with your warranty though if there's ever an electric issue, the disconnected unit will show up as a fault code during diagnostics.

[–] krnpnk@feddit.de 8 points 1 year ago (1 children)

Which at least in Germany should lead to failing vehicle inspections.

[–] bzz@sh.itjust.works 5 points 1 year ago

What’s worse is that in the EU, the connectivity is mandated with eCall, which calls the police with your coordinates in the event of a crash.

Though the EU has strong data privacy so at least you can be semi confident you can opt out and have your data forgotten from the manufacturer

[–] Dr_Evil@sh.itjust.works 6 points 1 year ago* (last edited 1 year ago)

While this is probably the only real solution for complete peace of mind, you may be able to find and disconnect the fuse to the telemetry system as an easier (and cheaper) fix - check out the fuse box diagram in your owner's manual!

[–] electric_nan@lemmy.ml 20 points 1 year ago (1 children)

Even your 'tire pressure sensors' can be used to track individuals around a city. https://www.schneier.com/blog/archives/2008/04/tracking_vehicl.html

[–] trippingonthewire@lemmy.ml 12 points 1 year ago

In 2008 they knew about this? Holy crap I need to do some research.

[–] viking@infosec.pub 18 points 1 year ago (1 children)

You can buy a 2023 Dacia Logan and it will still have none of the gizmos and knicknacks that track you and your behaviour.

Whether you call that a "modern" car is another debate, but for sure it's a recent one.

[–] dakku@sh.itjust.works 4 points 1 year ago (1 children)

The great part of Dacia is that you can probably buy any faulty part for a bag of peanuts and a pack of cigarettes and thieves won't even bother you so no need for "anti-theft" feature

[–] DreadPotato@sopuli.xyz 2 points 1 year ago

Just hope you're never involved in an accident, they're generally pretty shitty safety-wise.

[–] mctoasterson@reddthat.com 17 points 1 year ago

Your best bet for a "hardware switch" is reading the service manual to find which fuse controls the comms module, and pull it. Depending on the vehicle it may have other side effects.

Maybe we will get to the point where people are selling modchips for cars, like the OG PlayStation.

[–] jordanlund@lemmy.one 12 points 1 year ago (1 children)

Define "privacy" and define "modern car".

In the end, it doesn't matter what car you're driving if you bring your Android/iPhone...

[–] WtfEvenIsExistence@lemmy.ca 36 points 1 year ago (10 children)

There are "privacy oriented" smartphone replacements. You could flash graphene os to a Pixel.

There is not really such thing for cars.

load more comments (10 replies)
[–] Rouxibeau@lemmy.world 10 points 1 year ago

My LEAF has no connectivity since 3g eas shutdown.

[–] extant@lemmy.world 8 points 1 year ago

Some cars even have cameras inside them now to verify the driver, so consider that next time you have sexy time.

[–] ExLisper@linux.community 6 points 1 year ago

Not really, no. It's all super closed sourced so you will never know what's tracking you.

[–] trippingonthewire@lemmy.ml 5 points 1 year ago

Maybe have them pull out the router at the dealership. I think they have to listen to your request. They may argue with you about it and be like "yeah but you won't have internet and all this cool stuff" but yeah whatever people have phones nowadays anyway.

[–] sturmblast@lemmy.world 5 points 1 year ago

I'm still happy driving an older car but the writing is on the wall for the next one I think

[–] marx2k@lemmy.world 4 points 1 year ago (2 children)
[–] darcy@sh.itjust.works 4 points 1 year ago (1 children)

is it possible for the car to connect to internet without u letting it? maybe just never connect?

[–] WtfEvenIsExistence@lemmy.ca 5 points 1 year ago (1 children)

It has to connect to the internet somehow. Otherwise how could I see where the car is are using the Toyota app? I could see the tire pressure in each tire and the amount of fuel.

There is also this button at the top (the ceiling?) of the car that basically acts like an emergency button. Pressing it connects your car to someone at toyota that calls for roadside assistance. But idk why then even have that since most people have phones anyways.

[–] darcy@sh.itjust.works 4 points 1 year ago (1 children)
  1. i would highly recommend never connecting it to internet. a small inconvinience for much better privacy. zero trust rule: only enable an abusable feature like internet on things which absolutely need it

  2. the emergency button probably connects to any cell tower, regardless of your provider (like a phone with no sim), or maybe even satellite? i highly doubt that toyota would use this for anything besides emergencies (although one can never be sure)

  3. some people still dont have phones, and that is not a bad thing.

[–] WtfEvenIsExistence@lemmy.ca 3 points 1 year ago (1 children)
  1. You don't need touch anything in the car for it to connect to the internet. It's a brand new car, and the car salesperson just put the VIN in the app and you can see the location of the car. Which means, it was already connected right out of the factory.
[–] darcy@sh.itjust.works 1 points 1 year ago

damn that sucks

[–] chicken@lemmy.dbzer0.com 4 points 1 year ago

Couldn't you physically remove the antenna?

[–] Killercat103@infosec.pub 2 points 1 year ago

I doubt what the dealer says is true. Intentionally or not. I don't really believe cars do us much net good anyway. Public transport and biking/walking for the win.

[–] Pantherina@feddit.de 2 points 1 year ago (1 children)

I am really curious now. I would never buy one but share, so also spread my fingerprint which isnt that bad.

But now I wonder, are there any electric cars that dont suck?

[–] abrasiveteapot@sh.itjust.works 4 points 1 year ago (1 children)

All of the ICE have this too. It's not just EVs.

[–] Pantherina@feddit.de 1 points 1 year ago (1 children)

Ice? Like in intercity express trains?

[–] cosmic_skillet@lemmy.ml 4 points 1 year ago (1 children)

Internal Combustion Engine

load more comments (1 replies)
load more comments
view more: next ›