this post was submitted on 02 Aug 2024
247 points (97.0% liked)

Privacy

31172 readers
364 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago
MODERATORS
 

I wanted to get others' takes but it seems like the only real way to get a non-spying car is to get an older car without any sort of telemetrics. I saw a video about different car companies' security policies, well specifically the new Mental Outlaw video, and it just blew me away how even our cars aren't safe. Anyone got tips for how to anonymize their car?

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 85 points 1 month ago (2 children)

Mozilla Foundation did a deep dive into this. And the results where abysmal. The only brands not completely horrifying where Renault/Dacia because they are European and only serve the European market so they have to follow GDPR.

[–] [email protected] 5 points 1 month ago (2 children)

Wait, Renault doesn't ship anything outside the EU?

[–] [email protected] 5 points 1 month ago

It does, to India.

load more comments (1 replies)
load more comments (1 replies)
[–] [email protected] 48 points 1 month ago (6 children)

The problem with the "just buy old cars" is that I want a used electric car for like $10k.

We need a wiki of EVs that.has a section on each model enumerating which components are used to spy on you and videos showing how to neuter them.

[–] [email protected] 12 points 1 month ago (5 children)

The best privacy from an EV is an electric bicycle

[–] [email protected] 10 points 1 month ago* (last edited 1 month ago) (2 children)

Well, would be nice to be able to haul drywall and not get wet. There are some projects for this, but they're a bit immature and documentation is lacking

https://openmotors.co

load more comments (2 replies)
load more comments (4 replies)
[–] [email protected] 9 points 1 month ago (2 children)

Yeah with EVs it seems like improving the privacy would be a pain, since they are reliant on parts of the digital system that is causing the privacy problem in the first place. I'm planning on sticking with a gen 3 Prius for awhile.

load more comments (2 replies)
[–] [email protected] 6 points 1 month ago (1 children)

We need a wiki of EVs that.has a section on each model enumerating which components are used to spy on you and videos showing how to neuter them.

I have been thinking we need something like this but for all new vehicles, not just EVs. Like instructables but for how to locate and rip out the cellular radio/antenna on every make and model that has one.

[–] [email protected] 6 points 1 month ago (1 children)

Definitely. But its more complicated than that.

My understanding is that many cars store the information airgapped and then upload it to the dealer when the mechanic pluggs into the car doing routine service checks.

So we need the wireless/radio neutering, but also someone needs to hook up to the car and see if/what data can be leaked via hard wire. And possibly find ways to disable the sensors, send random/nonsense data, update the software to not store sensitve data, automatically wipe the data every time the car turns on, or at least document how to manually wipe the data when you pull into the shop for maintenance.

load more comments (1 replies)
load more comments (3 replies)
[–] [email protected] 42 points 1 month ago (12 children)
[–] [email protected] 30 points 1 month ago (5 children)

What are the chances the software is designed to throw errors and "See a technician" messages if you dk?

[–] [email protected] 25 points 1 month ago* (last edited 1 month ago)

I’ve heard it can cause problems in some models, so people need to do their research. With my truck it’s dead easy and are no drawbacks.

[–] [email protected] 12 points 1 month ago

We need an iFixit-like database giving each car a score about how easy it is to unplug the telematics units and what errors it may result in, complete with a score.

[–] [email protected] 9 points 1 month ago

My suggestion, if you're looking for a new car, is to research where the modem in the car is, and unplug it during the test drive (assuming it's reachable).

I unplugged the one in my work truck, 2023 Ford F150. They call it the "Telematics unit" and it's on the rear cab wall on the right side, hidden behind the sound deadening foam. I did this after it was bought, but if I had known about it before my boss paid it, I definately would have tried it before the test drive to make sure, and I plan to do it if/when I look for a newer car!

I unplugged every cable coming into it - power, antennas, data, all of them! The only issue that comes up is the center screen on the dash crashes back to the main menu when you try to open the data/wifi settings.

No other issues so far after almost 5k miles! No warnings, no lights on the dash, nothing! Android auto/carplay even still works! Don't know yet if the dealer will try to plug the unit back in during the next service, but I intend to raise hell if they try!

[–] [email protected] 5 points 1 month ago

Not small, but I think you’ll have better chances with the mid level commuter cars. You’ll probably get some error messages on some of them, but if you can ignore them, they wouldn’t stop the car from running.It’s the high end ones and EVs that have a higher chance of bricking if you disable the antenna.

[–] [email protected] 5 points 1 month ago

Depends on the car but I'd say the chance is above 50%

[–] [email protected] 7 points 1 month ago (1 children)

Most of the cars will still try to connect to open Wifi when available to upload data.

[–] [email protected] 5 points 1 month ago (2 children)

Very nice ! That's when you can start spying on your car's behavior.

load more comments (2 replies)
load more comments (10 replies)
[–] [email protected] 22 points 1 month ago

ITT people are all dismissive because you can't actually be anonymous on the road (license plates, speed cameras...), but, honestly, I just want a car that doesn't listen in on my conversations, sell my data to brokers, require any passanger to accept the privacy policy, or record the times I have sex (jk it won't be able to if I don't have any)

[–] [email protected] 16 points 1 month ago (1 children)

It's possible to get cars as new as 2019 where you can just pull a fuse. But it starts to get tricky.

Example my C7 Vette it only took about that (it was a bit of an ordeal to not brick the car) but it's not connected to shit anymore.

[–] [email protected] 11 points 1 month ago (1 children)

Telemetry data will still be saved in the car systems, but not broadcast anywhere. So not too bad

[–] [email protected] 14 points 1 month ago

Right to repair must apply to cars as well.

[–] [email protected] 14 points 1 month ago (1 children)

Buy an electric bicycle and use the money you would have spent on a car to run for a seat for local office on the platform to improve local transit infrastructure

[–] [email protected] 11 points 1 month ago (2 children)

How good are they in ice and snow? Probably a bit dangerous and cold I'd think.

[–] [email protected] 12 points 1 month ago* (last edited 1 month ago) (2 children)

I did all my transportation and shopping with a mountain bike for a year and it's kind of difficult on snow and ice, fell over some. The trick is to never turn at all when on that stuff, but it's still hard. The cold makes the oil for the mechanisms work worse too, you need special oil. My hands got very cold holding on to the handlebars, you need to find some balance between gloves that hold warmth and resist the wind and gloves that let you have enough dexterity for the brakes and shifters.

load more comments (2 replies)
load more comments (1 replies)
[–] [email protected] 13 points 1 month ago* (last edited 1 month ago) (3 children)

Depending on the car you might be able to physically disable telemetry. Here are some thoughts/ideas I've been collecting:

  • Hit "SOS" button and opt-out of all services through customer service. This of course requires trusting the company to actually do it.
    • It's possible that the info could be stored locally and then uploaded when it gets serviced though
  • Remove the fuse to the modem/data communication module (DCM)
  • Disconnect wiring to the LTE antennas
  • A number of people have mentioned that they can get the dealer to disconnect the telemetry as a precondition to buying. For instance, here.
  • Jump the data communication module (DCM) cable with a ~$70 dongle to bypass just the telematics components
  • Disconnect the DCM cable, which will likely gimp the infotainment if not other systems, or remove the entire DCM unit
[–] [email protected] 7 points 1 month ago

Quite a few cars also still have a SIM card hidden somewhere, which can be removed. The location of it varies widely though and they're usually pretty hard to find.

load more comments (2 replies)
[–] [email protected] 12 points 1 month ago (3 children)

I’ve got a 2009 dumb car and I am babying it because I dread having to try to buy a new to me car that isn’t full of telemetrics and other modern car garbage.

load more comments (3 replies)
[–] Sparkega 10 points 1 month ago (1 children)

I don't recall what kind of car it was, but there was one that saved the phone number associated with any phone that connected via Bluetooth.

While I don't think it's likely as a way to trick people to connecting to get their phone number, it was a rental car which opened them up to impersonation scams. Knowing they just rented from the company and where in the city provides quite a bit of information on you.

load more comments (1 replies)
[–] [email protected] 9 points 1 month ago

As long as data harvesting is legal and profitable, privacy will be a cat and mouse game. Gotta wonder how much capital and human effort is invested into all these anti-consumer innovations.

[–] [email protected] 9 points 1 month ago* (last edited 1 month ago) (2 children)

I plan to buy 2003 Skoda Octavia for obvious reasons or some car with automatic transmission.

load more comments (2 replies)
[–] [email protected] 7 points 1 month ago (2 children)

Definitely keeping me far away from upgrading, newest vehicle is an early 2000s Corolla and still does 40mpg.

Honestly with how cheap and easy it is to fix at home, barring safety improvements I really don't see a point in upgrading. Infotainment is just another component that will eventually go obsolete like the ones from ~2010 that are dog slow and a pain to go aftermarket on.

load more comments (2 replies)
[–] [email protected] 6 points 1 month ago* (last edited 1 month ago) (1 children)

I don't have any tips, but I wish I did. My car's just over a year old and I don't even like driving it since I found out it's spying on me all the time. The 'infotainment' system is also integrated with everything in the vehicle so turning it off isn't an option. I really like the car, but I feel like privacy is something that shouldn't have to be a consideration when buying a vehicle. I'm just about positive there's not a new vehicle available in the US market without one of these things in it unless you're buying fleet vehicles.

[–] [email protected] 8 points 1 month ago

Sell it and get a old pickup truck. Those things go forever

[–] [email protected] 6 points 1 month ago

Are there any write-ups on the situation in Europe under GDPR-legislation? Mostly I read about the US-situation which seems like the wild west, but I can't imagine that it is perfectly fine in the EU either even if you opt-out of using their apps etc.

[–] [email protected] 6 points 1 month ago* (last edited 1 month ago) (1 children)

Should be quite easy to remove any WiFi/cellular/satellite antennas from the car's computer. (Might be trace/chip antennas, so make sure to get those). If you're extra paranoid, get the GPS antenna too, so it can't simply record data indefinitely.

Might take a few hours to go through the car to make sure you get everything, but you won't be limited to super old cars.

[–] [email protected] 7 points 1 month ago (1 children)

I don't believe for a second that the car won't be sending either an unremovable error message, a constant and un-mute-able audible alarm, or a complete lockout of subsystems or the entire system itself. The best case scenario is that this is a mild inconvenience.

load more comments (1 replies)
[–] [email protected] 6 points 1 month ago

I did not watch the mentioned video so I am not sure if what I am about to mention is discussed there or not. Also, sorry for the really long reply!

I am not aware of any available truly privacy respecting, modern cars. However, assuming theat you obtain one or you can do things like physically disconnect/remove all wireless connectivity from the car to make it as private/secure as possible, there still is little you can do to be truly anonymous.

Your car likely has a VIN and license plate as well as a vehicle registration. Assuming you legally obtained the vehicle and did not take any preventative measures prior to purchasing the car, those pieces of information will be tied back to you and your home address (or at least someone closely connected to you). You would need to initially obtain the vehicle via a compsy/LLC/partnership/etc. as the owner/renter/leasee of the vehicle and an address not associated to you. Additionally, you would need to find some means of avoiding or limiting the additional information connected to you that is likely required to obtain the vehicle like car insurance and your drivers license.

Additionally, any work that certain mechanics perform may be shared (either directly or indirectly) with data brokers - even just routine maintenance like an oil change or alignment. Hopefully you didn't use your credit card, loyalty rewards program, etc. when you had any work done!

There is also CCTV, security cameras, and other video recorders that are nearly impossible to avoid. Given enough time/resources and maybe a little bit of information, your car could be tracked from its origin to destination locations. This location history can be used to identify you as the owner (or at least driver/passenger) of the car. Unless your car never leaves your garage, you can almost guarantee that your car is on some Ring camera, street camera, etc.

Furthermore, anything special or different about your car (custom decal, unusual window tinting, funny bumper sticker, uncommon color for the car, uncommon trim/package for the car, dented bumper, fancy rims, replaced tires, specific location of toll reader placement on the windshield, something hanging from your rear mirror, etc.) all help identify your car. The make/model and year of your car can also be used to identify your car if its not a common car in the area. These identifiers can be used to help track your car via the video feeds mentioned above.

Then there are license plate readers which are only slightly easier to avoid than the video recordings. Permanent, stationary license plate readers can be found on various public roads and parking lots. There are also people who drive around with license plate readers as part of their job for insurance/repossession purposes. You may be able to use some sort of cover over your license plate(s) to hinder the ability of license plate readers to capture your plate number, but that could be used to help identify your car in video feeds/recordings.

[–] [email protected] 6 points 1 month ago (1 children)

I was driving in a rented car and just decided to start randomly singing and... yeah, the car's AI asked me to repeat.

Cars have had GPS capable black boxes for a long time. They claim it is for the same reason as airplane black boxes, but I call bullshit on that.

load more comments (1 replies)
[–] [email protected] 5 points 1 month ago

Also ford recently redesigned their app so the users have to use built in google maps in order to track their car.

[–] deranger 5 points 1 month ago* (last edited 1 month ago) (6 children)

Let me try this comment again.

There is no driving with privacy or anonymity unless you’re on private land.

Anyone got tips for how to anonymize their car?

Remove the license plate. You will rarely have privacy driving a car on a public road. You should disable the modem, of course, but you’re still not going to be driving anonymously or privately. Automated license plate readers means your travels are going into databases that very well could be breached at some point in time.

Law enforcement use of ALPRs is rapidly expanding, with tens of thousands of readers in use throughout the United States; one survey indicates that in 2016 and 2017 alone, 173 law enforcement agencies collectively scanned 2.5 billion license plates.

According to the latest available numbers from the Department of Justice’s Bureau of Justice Statistics, 93 percent of police departments in cities with populations of 1 million or more use their own ALPR systems, some of which can scan nearly 2,000 license plates per minute. In cities with populations of 100,000 or more, 75 percent of police departments use ALPR systems.

Despite this expansive data collection effort, many departments have not developed a policy to govern the use of ALPR technology, or provided privacy protections.

https://www.brennancenter.org/our-work/research-reports/automatic-license-plate-readers-legal-status-and-policy-recommendations

load more comments (6 replies)
[–] [email protected] 5 points 1 month ago

Holding onto my 2016 van with zero telemetry for as long as possible.

load more comments
view more: next ›