HI version is available. Content is displayed in original English for accuracy.
Advertisement
Advertisement
⚡ Community Insights
Discussion Sentiment
62% Positive
Analyzed from 4112 words in the discussion.
Trending Topics
#car#data#cars#don#fuse#why#mileage#telemetry#need#find
Discussion (159 Comments)Read Original on HackerNews
I have a seven year old Volkswagen, not financed. I'm security conscious and made sure to disable all the data collection I could find in the companion app before removing my account, turn off remote access services, dig through the infotainment to turn off what I could, etc.
Last year I requested a Carfax on it, and one of the fields in the request was current mileage. I entered an estimate like 75000 miles. On form submission, that field failed validation with red subtext along the lines of 'this is less than the last reported mileage of 75345, reported <5 or so days prior>'. Checking my odometer and looking at my past few days' trips, that was indeed accurate.
The car hadn't been to a shop or out of my possession in weeks, so I can only assume the telemetry was still dialing home and selling to third parties despite my best efforts to disable it.
There's an exceedingly common type of failure I have seen myself in industrial electronics and (has happened with Tesla at least once), that some module keeps a log of some kind in a nonvolatile flash, and this flash has a limited lifecycle, which the equipment reaches at some years into its life (or earlier, if the flash came from a bad batch, or more logging happens than planned).
At this point the board usually gets bricked and replacement is very hard due to cryptographic handshakes between components.
This is never enough. You can't trust a software switch. You need to remove the hardware capability if you want to make sure the car isn't spying on you. In the best case, the telematics box has it's own fuse, and that may be enough. In other cases, you need to find the box and unplug it. The service manual will have it's location. In some cars it's easily accessible, in others less so and you need to remove the glove box or part of the dash. Dealers will probably refuse to do it, my advice would be to DIY or find an independent mechanic who will do it.
https://www.tacomaworld.com/threads/simpler-solution-for-dis...
The most reliable way to permanently silence the cellular modem is to pull the relevant fuse. In the above case, this also disables the microphone, which I think is a positive. Unplugging the DCM entirely, however, seems to disable to right speaker, which is wired through the DCM for some reason.
You could probably find some interesting info if you send out some privacy requests through the chain. LexisNexis and Verisk are consumer reporting agencies, so they have to provide you a disclosure on request. Start there.
My car is from 2011 and I do wonder if there is any telemetry in it.
I could see a fuse for cellular comms, be presumably that would also disable maps, contacting emergency services in an accident, etc. which might be an acceptable tradeoff.
Its only job is to detect harsh acceleration and brake events. Probably being sold to your insurer.
I thought, I wonder if it’s the same guy? Sure enough.
Stop it.
So fucking do it! Who died and made you the style police?
> Stop it.
He's making reasonable points, in a readable fashion.
You, on the other hand...
What's your point? AI bad? Srsly, is that all you've got?
My main motivation to get a better car was, DD goes to a super prestigious college and it seems degrading to put their bumper sticker on a 23 year old car! But I guess I won't get another car. Serves you right mfr mfrs!
Every business likes data collection, until they don't.
In other news, I think I'll be taking a trip to somewhere down south to find a nice, used 1999 F350 dually with a manual transmission, since they're going to cease to exist shortly...
This depends a lot on the region/country. IN the US, open WiFi is unusual but it's pretty common in parts of asia, for example.
I've been handed a Carfax on my own car that has a reported mileage much greater than the actual mileage on the car, and the car has not been out of my possession.
You should have an empty glovebox as well when you take it in for service if you don't trust the shop.
If you have registration / insurance paperwork, you're now on that shop's mailing list and can expect to get "$15 off your next oil change ..." flyers in the mail.
It works. Most people are happier focusing and holding forth on that and repeating familiar statements than they are talking to congressional staff about policy.
Your car that you paid a lot for and you like and have positive useful experiences with every day? That’s going to be way farther down the list of things to worry about.
In my understanding, this pretty much makes this type of driver data illegal to sell or share. CalPrivacy's enforcement division has their eye on connected car manufacturers already, so we'll see what they do with that.
https://leginfo.legislature.ca.gov/faces/billHistoryClient.x...
https://privacy.ca.gov/drop/
Facts about the car: VIN, spec, recall status, odometer. Attested by someone other than the owner. Outlives every owner and the owner is the last to have it, if at all.
Facts about the driver: speed, location, timestamp. Thats what GM sold, the fix is to not collect it but OEMs seem to take 'anonymization' approach.
The DRIVER act treats both as the same which is why it fails to fix anything. The second needs a ban. The first needs the opposite - especially as we take the driver out of the vehicle - an authoritative record of the vehicle. How do we expect AVs to have adoption when the only safety certification is the company's press release?
Obviously it would be better to have this action be illegal. But with legal privacy protections eroding in the US and other countries, it seems prudent to have a better understanding of the systems involved in the immoral surveillance.
It's wild how convenience trumps everything and then we look back to say, "we should have done better."
Sometimes it helps to have someone with their priorities in order keeping a reality check on people who don't always stay grounded.
Never underestimate the risks of spousal dissatisfaction.
Regardless, taping some foil around the connectors with the foil making okay contact with the metal chassis is more than enough attenuation at sub GHz microwave to remove this concern without having to source specialty terminations and crimpers (or worse, non-reversible damage to the OEM cable assemblies by repurposing their terminations). I've done the foil+tape on some of my vehicles, but it hasn't made a difference in binary "does it connect or not?" testing.
If your buyer is the end owner, probably increase a little bit unless they are surveillancemaxxing.
Easily reversible mods only affect price for suckers anyway.
These cars are more software than hardware now. And like everything else in the software industry, every product gets released incomplete and patched later.
Although the correct solution would be a USB port somewhere to insert a patch file rather that over-the-air updates that might happen while driving.
Although it wasn’t worth the cost of the 3 year subscription so I now just estimate the charge status based on the charge’s power consumption.
If the car is at 10% battery, it may be worth charging at .15 or .3€/kWh. If it’s at 70% charge, I’ll wait until the price drops to .005€/kWh. The whole thing is automated in HA.
Their is a cell modem in the car, so all these features are available anywhere the car has cell service.
It also seems to conflict with `right-to-repair` laws if the capability is legally required.
The near universal proliferation of owner's associations and management groups and whatnot for developments larger than ~1ac (the EPA threshold, some states/towns have lower) is something you can lay at the feet of the Clean Water Act and it's implementation and precedents over the following decades.
The exact area of the buildings, the driveways, the community park and gazebo, etc, etc, are necessary features of the site plan that makes the math that is required to meet stormwater/environmental requirements. And and some legal entity has to be responsible for that in perpetuity. Enter the HOA. This is also why HOAs often won't allow you to expand your driveway or add a non-permeable patio, it could (prob not, but still) ruin the environmental calculations they're responsible for enforcing as a condition.
I'm not nearly as familiar with car regulatory stuff but I would bet a lot of money that they're using OTA telematics to check some sort of compliance box...
An obvious thing may be to say the software must be published or the spec released, but we've had computers in cars since the 80s. It seems like a tall task but people can and do reverse engineer entire ECU systems (See Trionic Tuning)
Another seemingly very obvious one - requiring manufacturers to publish specifications regarding ALL OBD interface options. Of course this immediately runs into trouble. Saab for example gated features of the security system to prevent key reprogramming, swapping of certain components without a dial out to the internet using specific saab software that runs on a laptop and interfaces.
Either via permanent 4G/5G link or during service intervals in the shop.
Source: I analyzed these data as an intern for one.
- Chat Control law, now all messaging must be intercepted and monitored.
- eIDAS law, mandating that web-browser vendors must now accept state issued root certificates, so that states can selectively and without any legal procedure deploy MITM attacks at will.
- ADDW law, mandating that all new cars must a permanent mandatory camera and microphone surveillance module inside a car, which can't be disabled by law (bye-bye insurance if you will). There also other fun things in it like mandatory autobraking, mandatory auto lane-assist etc.
- ProtectEU laws, demanding backdoors to emails and such (maybe it's the same as Chat Control, not sure).
- AI Act legalizes AI surveillance over CCTV recordings without any judicial approval.
- European Media Freedom (duh) Act legalizes deployment of shit like Pegasus against journalists.
I'm pretty sure I'm missing a lot here too. You get the picture. EU is getting fast track into Stazi 2.0, everyone is fine with it, "because children" /s
If you are a CA resident you can also get on the state's DROP platform to request that all registered data brokers delete your data, but it's only for deletion and not the other 4 types of data requests allowed under the CCPA (right to know, right to collect, right to opt out, and right to limit use).
It's still better than other modern cars though? I think.
Can I disable all data collection from my vehicle?
https://news.ycombinator.com/item?id=47967786
> third-party partners process information about you and how you use our services, including clicks and screen recordings, using first and third-party cookies, pixels, and similar technologies
I appreciate Tesla's position on the matter, but I'd still rather have the collection and dissemination of the data more tightly regulated by law.
We need a solution, not a Band-Aid like the "Freedom Car Act." I believe that legislators are deliberately coming up with legislation that mildly hinders, but in no way resolves the issue in order to keep their sugar-daddies freewheeling.
This is why I'm a vocal advocate for having an LLC own any vehicles you might drive. It protects you from the license-plate reading lookup as well from Flock et all. Though I don't know it guarantees you can't be looked up by insurance it's resistance by one more bit of friction. The vehicle I drive now is an old 2012 Lexus owned by Montana LLC and it also has no smart technology and very little insurance costs.
And they're stautorily exempted from a whole boatload of privacy laws, like HIPAA.
I'm going to pirate shit until this is fixed.
Unless you’re of the opinion that since it’s data, it’s not stealing?
Or: "All companies are essentially gigantic conglomerates eating each others' food by selling my own and others' data to each other, so I basically have rights to their claimed assets anyway."
Or: "No company or government respects my privacy or property rights, so why should I respect theirs?"
Some of that is a form of "I am going to steal, because others are stealing", and well, if stealing becomes the norm, yeah, I would say the comment has some validity in a few words for the common citizen.
https://youtu.be/Ft12aZffCEg?si=qP1J5k6RXAxmZChf
https://youtu.be/SeMZGICNSMg?si=-YLnt5Q477xpFbra
https://youtu.be/8Kp108x4tQA?si=j7JV-_Dpl5afP99F
Talking as an eastern european: unless you live in a sunshine place (~Mediterranean) most of the 90s car already eaten by the rust + the salt used for defrosting on roads in the winter.
Also by my experience cars (except from SUVs) somehow never kept up with the road quality. Pot holes are a problem everywhere but you can see that certain brands for example japanese and korean ones never designed for deteriorating road quality (and I don't mean offroad) because... you know they just don't exist in the home market. So the tires, wheels, suspension are not as robust as they should be.
Sure _everything can be fixed_ but then your car becomes a hobby and might not everyone has an attitude and time for that.
But it never is economical or more environmental friendly.
Whatever I saved on my old car compared to a newer one will never be less than the theoretical fuel savings on a newer car. Repair costs will never be as much (assuming you buy a popular repair friendly car). And nothing new needs to be built for me either.