Back to News
Advertisement
Advertisement

⚡ Community Insights

Discussion Sentiment

74% Positive

Analyzed from 2092 words in the discussion.

Trending Topics

#car#data#don#cars#https#android#never#still#vehicle#privacy

Discussion (154 Comments)Read Original on HackerNews

bitparadoxabout 10 hours ago
I posted a flavor of this comment on an article a few months ago, but it's relevant here:

I have a seven year old Volkswagen, not financed. I'm security conscious and made sure to disable all the data collection I could find in the companion app before removing my account, turn off remote access services, dig through the infotainment to turn off what I could, etc.

Last year I requested a Carfax on it, and one of the fields in the request was current mileage. I entered an estimate like 75000 miles. On form submission, that field failed validation with red subtext along the lines of 'this is less than the last reported mileage of 75345, reported <5 or so days prior>'. Checking my odometer and looking at my past few days' trips, that was indeed accurate.

The car hadn't been to a shop or out of my possession in weeks, so I can only assume the telemetry was still dialing home and selling to third parties despite my best efforts to disable it.

noman-landabout 9 hours ago
Try finding the fuse and pulling it. It will be in the manual.
trouve_searchabout 10 hours ago
Couldn't you put some sort of faraday cage around the antenna?
anjelabout 10 hours ago
What happened to just pulling (the mfr's) sim card?
greesilabout 9 hours ago
Not trivial, not impossible
Simulacraabout 10 hours ago
What did you do, or what are you going to do? That would piss me off until i found the antenna and broke it
bookofjoeabout 10 hours ago
"Resistance is futile." See also: LG TVs, etc.
jbogganabout 3 hours ago
I'd like to point out that the CA assembly has passed AB-1542 and it is likely going to be signed by the governor this week. This would make the sale and sharing of "sensitive" personal information illegal, and one of the sensitive personal categories is geolocation data that can map an individual to within a 1850-ft radius.

In my understanding, this pretty much makes this type of driver data illegal to sell or share. CalPrivacy's enforcement division has their eye on connected car manufacturers already, so we'll see what they do with that.

https://leginfo.legislature.ca.gov/faces/billHistoryClient.x...

porkshoeabout 2 hours ago
Another note for Californians -- the California DROP (delete request and opt-out platform) takes VINs as one of the inputs.

https://privacy.ca.gov/drop/

samsullivanabout 6 hours ago
Two different things are getting called "car data" here.

Facts about the car: VIN, spec, recall status, odometer. Attested by someone other than the owner. Outlives every owner and the owner is the last to have it, if at all.

Facts about the driver: speed, location, timestamp. Thats what GM sold, the fix is to not collect it but OEMs seem to take 'anonymization' approach.

The DRIVER act treats both as the same which is why it fails to fix anything. The second needs a ban. The first needs the opposite - especially as we take the driver out of the vehicle - an authoritative record of the vehicle. How do we expect AVs to have adoption when the only safety certification is the company's press release?

tomrodabout 11 hours ago
How can this be stopped, from a technical perspective? Can I wrap the comms in a Faraday cage?

Obviously it would be better to have this action be illegal. But with legal privacy protections eroding in the US and other countries, it seems prudent to have a better understanding of the systems involved in the immoral surveillance.

schmeichelabout 11 hours ago
It is possible to remove the hardware itself that is responsible for this, but depending on the car it can very involved: https://arkadiyt.com/2026/05/13/removing-the-modem-and-gps-f...
willis936about 11 hours ago
I've had good luck with pulling service manuals, finding the telematics antenna connectors, and unplugging them. It's popular to pull the telematics module fuse, but that typically disables internal microphones and GPS that are used by android auto and carplay. This severely degrades features spouses expect to just work. The antenna pulling is a much lighter touch.
greenavocadoabout 10 hours ago
You should be using a 50 ohm 1 watt dummy load / termination. It's better at attenuating the signal than leaving the antenna unplugged.
dylan604about 10 hours ago
I wonder if this increases or reduces the value of the car???
tomrodabout 10 hours ago
If your buyer is an institution like Carmax or similar, lower.

If your buyer is the end owner, probably increase a little bit unless they are surveillancemaxxing.

classifiedabout 11 hours ago
> features spouses expect to just work

Never underestimate the risks of spousal dissatisfaction.

WarmWashabout 11 hours ago
What sucks is that at least with my car, if you pull their access, you also lose all your remote access as well, and the ability to receive updates.
ryandrakeabout 11 hours ago
Why does a car need "remote access" and to "receive updates?" I'd consider this a bonus side effect.
ellisvabout 11 hours ago
People who live in cold or hot places like to prestart the climate control in their car.
derwikiabout 11 hours ago
Why do you need remote access to your car? What updates does your car need?
slauabout 9 hours ago
It’s practical to see battery level so I can optimise the electricity price at which I charge it.

Although it wasn’t worth the cost of the 3 year subscription so I now just estimate the charge status based on the charge’s power consumption.

If the car is at 10% battery, it may be worth charging at .15 or .3€/kWh. If it’s at 70% charge, I’ll wait until the price drops to .005€/kWh. The whole thing is automated in HA.

WarmWashabout 11 hours ago
You can do stuff like like turn it on to heat or cool the cabin, live track it's location, lock/unlock doors, open/close trunk, and updates are mostly for the infotainment systemn and driving assists.

Their is a cell modem in the car, so all these features are available anywhere the car has cell service.

natchabout 11 hours ago
Vote with your dollars. I know one brand that has the most leading edge tech and does not sell my data so I bought from them. However they do use my anonymized data to train models for a future FSD capability but only because I opted in to that.
bix6about 10 hours ago
Which brand? And what's to stop them from changing your opt in toggle on after an update as we've seen countless companies do time and time again?
skrauseabout 10 hours ago
I want a car that doesn't collect the data, not one that gives a pinky promise not to sell still collected data.
mnmalstabout 10 hours ago
Which brand is that if you don't mind me asking?
SirHackalotabout 10 hours ago
“FSD?” You aren’t talking about Tesla, are you? “Vote with your dollars?” So you voted for regulatory capture, election interference, erosion of free speech (due to concentration of media power), and you’re financially supporting an openly racist, openly fascist oligarch who’s let the mask completely slip? I can’t even mention the gesture he did on the inauguration stage, because the mods tend to delete any mention of that. Galaxy brain moment. /s

The fact that you even said that with a straight face. If you buy a Tesla in >2025 you’re morally bankrupt. Yeah… I’d rather my data get sold than support any Musk-led company.

93poabout 9 hours ago
don't forget that elon is personally responsible for the deaths of 14 million people, now ranked #4 just below hitler and above stalin
forgetfreemanabout 11 hours ago
Simple: don't own a vehicle with this capability.
tomrodabout 11 hours ago
Much like owning a home without an HOA attached, it is becoming harder and harder to meet this requirement.

It also seems to conflict with `right-to-repair` laws if the capability is legally required.

calvinmorrisonabout 11 hours ago
How do you think right-to-repair intersects with cars?

An obvious thing may be to say the software must be published or the spec released, but we've had computers in cars since the 80s. It seems like a tall task but people can and do reverse engineer entire ECU systems (See Trionic Tuning)

Another seemingly very obvious one - requiring manufacturers to publish specifications regarding ALL OBD interface options. Of course this immediately runs into trouble. Saab for example gated features of the security system to prevent key reprogramming, swapping of certain components without a dial out to the internet using specific saab software that runs on a laptop and interfaces.

cucumber3732842about 11 hours ago
>Much like owning a home without an HOA attached, it is becoming harder and harder to meet this requirement.

The near universal proliferation of owner's associations and management groups and whatnot for developments larger than ~1ac (the EPA threshold, some states/towns have lower) is something you can lay at the feet of the Clean Water Act and it's implementation and precedents over the following decades.

The exact area of the buildings, the driveways, the community park and gazebo, etc, etc, are necessary features of the site plan that makes the math that is required to meet stormwater/environmental requirements. And and some legal entity has to be responsible for that in perpetuity. Enter the HOA. This is also why HOAs often won't allow you to expand your driveway or add a non-permeable patio, it could (prob not, but still) ruin the environmental calculations they're responsible for enforcing as a condition.

I'm not nearly as familiar with car regulatory stuff but I would bet a lot of money that they're using OTA telematics to check some sort of compliance box...

cc62cf4a4f20about 11 hours ago
That‘ll happen when you don‘t have meaningful data protection laws.
ameliusabout 11 hours ago
My question is why, with their protection laws, Smart TVs and Smart Cars are still sold in the EU?
thfuranabout 10 hours ago
Do they do the same spying on the models/units produced for sale in EU? It’s not actually a necessary part of the operation of the device, so it makes sense they’d be able to sell them without it.
BlackRabbit1about 11 hours ago
All European car manufacturers pull a crazy amount of telemetry data from your car.

Either via permanent 4G/5G link or during service intervals in the shop.

Source: I analyzed these data as an intern for one.

derwikiabout 11 hours ago
Can I invoke CCPA to get a report of and/or delete my data?
kaladin-jasnahabout 10 hours ago
In my GM car I have the wonderful opportunity to pull the OnStar fuse and disable all cellular connectivity. However, I am concerned the telematics information are stored in long term storage and if I have to reconnect the fuse, all my driving will be batch uploaded. I hope not!! And the GPS still works. Maybe I can find some dummy loads as well or the antennae.

It's still better than other modern cars though? I think.

Cider9986about 10 hours ago
Apparently Rivians can be prevented from doing this:

Can I disable all data collection from my vehicle?

https://news.ycombinator.com/item?id=47967786

hughesabout 10 hours ago
Terms of use to even read the article:

> third-party partners process information about you and how you use our services, including clicks and screen recordings, using first and third-party cookies, pixels, and similar technologies

heaney-555about 10 hours ago
I notice that not one comment here, nor the article, notes that this doesn't happen with a Tesla.
polyterativeabout 10 hours ago
My car is from 2017, so thankfully it's not.
gdulliabout 10 hours ago
My car is much older and I used to hope it would last forever. But now I hope it dies soon enough that when I go to replace it, the options for non smart cars haven't gone away.
hn_submitabout 5 hours ago
Like I've said here before: we need to push for legislation that bans the sale of consumer data collected by websites and manufacturers to third-parties.

We need a solution, not a Band-Aid like the "Freedom Car Act." I believe that legislators are deliberately coming up with legislation that mildly hinders, but in no way resolves the issue in order to keep their sugar-daddies freewheeling.

Advertisement
tamimioabout 4 hours ago
Just don’t get a car with connected internet, or smart X in any way, which is most modern cars unfortunately, and if you do, disable the telemetry. I have a clean, cool, low mileage ~15yo car, has no screen or apps, no internet, no back camera or even digital dashboard. I put a screen that has offline CoMaps app, if I ever needed it, and its OBD connected to a local app that does usual diagnostics. Sure, there’s logging I see and it happens, but it’s all local and never shared let alone connect things gas or odometer or driving habits.
mannanjabout 5 hours ago
And the DMV (Department of Motor vehicle Services) has also sold registration data. In California, and Texas, they have been fined for this - I'm unsure they aren't completely barred from using a loophole to still do that.

This is why I'm a vocal advocate for having an LLC own any vehicles you might drive. It protects you from the license-plate reading lookup as well from Flock et all. Though I don't know it guarantees you can't be looked up by insurance it's resistance by one more bit of friction. The vehicle I drive now is an old 2012 Lexus owned by Montana LLC and it also has no smart technology and very little insurance costs.

octoberfranklinabout 3 hours ago
It won't protect you from the insurance agencies; they demand a DL ID# and a VIN. And you are required by law to purchase from them.

And they're stautorily exempted from a whole boatload of privacy laws, like HIPAA.

sagarmabout 1 hour ago
In California you can post a surety bond in lieu of insurance. I'm sure the same applies in other states with governance that is not captured by corporate interests.
mannanj20 minutes ago
They don't ask for license plates. At least through a camera tech like Flock, it isn't super easy to pick up a vin. So thinking this through more, at least having an insurance agency have your vin isn't as bad as having a flock & flock affiliated agency have your license plate - because if flock & flock affiliated dont have your vin they may never have the vin to find you via insurance company.
ameliusabout 10 hours ago
How is this not stealing?

I'm going to pirate shit until this is fixed.

Simulacraabout 10 hours ago
I drive a restored 2002 Citroen C5.
everyoneabout 11 hours ago
Another reason to use a car from 90's or 2000's.. Also they wont burn oil like a modern car + more durable and repairable metal parts.

https://youtu.be/Ft12aZffCEg?si=qP1J5k6RXAxmZChf

https://youtu.be/SeMZGICNSMg?si=-YLnt5Q477xpFbra

https://youtu.be/8Kp108x4tQA?si=j7JV-_Dpl5afP99F

thrownawayszabout 11 hours ago
>Another reason to use a car from 90's or 2000's

Talking as an eastern european: unless you live in a sunshine place (~Mediterranean) most of the 90s car already eaten by the rust + the salt used for defrosting on roads in the winter.

Also by my experience cars (except from SUVs) somehow never kept up with the road quality. Pot holes are a problem everywhere but you can see that certain brands for example japanese and korean ones never designed for deteriorating road quality (and I don't mean offroad) because... you know they just don't exist in the home market. So the tires, wheels, suspension are not as robust as they should be.

Sure _everything can be fixed_ but then your car becomes a hobby and might not everyone has an attitude and time for that.

wkjagtabout 10 hours ago
My wife's Ioniq 5 was hit on the bumper while it was parked. Took weeks for all parts to get to the dealer and cost thousands of dollars because sensors etc. if someone hit my 1981 Volvo 240 the same way I'm not even sure it would cause any noticable damage.
herbstabout 11 hours ago
I really wanted a modern car because of the fancy automation stuff, I thought.

But it never is economical or more environmental friendly.

Whatever I saved on my old car compared to a newer one will never be less than the theoretical fuel savings on a newer car. Repair costs will never be as much (assuming you buy a popular repair friendly car). And nothing new needs to be built for me either.

bookofjoeabout 12 hours ago
jeffbeeabout 11 hours ago
Contrary to the HN bias, but a way to avoid this if you want to get a new car full of tech gadgets is to get one that runs on Android Automotive. The privacy policy is a normal tech company privacy policy. Other cars come with privacy notices that just say they can give your data to anybody.
VCFundedGenYerabout 11 hours ago
1. Android Automotive is run by Google, so that entire argument goes out the window immediately, because Google

2. Car companies bypass CarPlay/Android Auto with their own head units with software that executes before the projection software does.

jeffbeeabout 10 hours ago
Android Auto and Android Automotive are not the same thing.
thepryzabout 10 hours ago
Sorry, but a lot of cars, even if they run Android Automotive, maintain a separate TCU/DCM with its own cellular connection that can collect vehicle information independently of Android Automotive.
wallkroftabout 11 hours ago
BREAKING: The water found in the ocean