Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
BlackEco ( BlackEco@lemmy.blackeco.com )  to Privacy@lemmy.ml · 2 years ago

Volkswagen has been collecting geolocation data from their smart cars, which were accidentally made public

infosec.exchange

external-link
message-square
22
link
fedilink
  • cross-posted to:
  • internetofshit@suppo.fi
443
external-link

Volkswagen has been collecting geolocation data from their smart cars, which were accidentally made public

infosec.exchange

BlackEco ( BlackEco@lemmy.blackeco.com )  to Privacy@lemmy.ml · 2 years ago
message-square
22
link
fedilink
  • cross-posted to:
  • internetofshit@suppo.fi
Mathias Payer (@gannimo@infosec.exchange)
infosec.exchange
external-link
Attached: 1 image As it turns out, Volkswagen has been collecting extensive geo data from all their electric cars and made them available online in an AWS bucket. Almost 10TB of geo traces from 15 MiO cars. Amazing detail and patterns. This is why I don't want a smart car 🤯 https://events.ccc.de/congress/2024/hub/en/event/wir-wissen-wo-dein-auto-steht-volksdaten-von-volkswagen/ #Volksdaten
alert-triangle
You must log in or register to comment.
  • JPAKx4 ( JPAKx4@lemmy.blahaj.zone ) 
    link
    fedilink
    arrow-up
    97
    ·
    edit-2
    2 years ago

    Let’s be 100% clear, all of these cars with “smart” features are collecting your data and selling it. Insurance companies are also buying this information and using it to raise premiums if they determine you a “bad driver.” Also this could reveal info such as where you live if anyone is determined enought depending on the info if stores (such as geolocation data).

    Basically I’m saying wrap your car in tinfoil

    • ReversalHatchery ( ReversalHatchery@beehaw.org ) 
      link
      fedilink
      English
      arrow-up
      6
      ·
      2 years ago

      Basically I’m saying wrap your car in tinfoil

      and don’t ever let diagnostic tools with network access be connected to it. just as well could say never bring it to service, which is not really possible

      • ulterno ( ulterno@programming.dev ) 
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 years ago

        At this point, just get a bicycle without a battery.

        Of course, sometimes you need to move heavy stuff and there’s nothing you can do about it, bu I tend to save enough, not owning a car/motorbike that I can afford to pay for a pickup on those occasions.

  • JustEnoughDucks ( JustEnoughDucks@feddit.nl ) 
    link
    fedilink
    arrow-up
    61
    ·
    2 years ago

    A Volkswagen id4 was the best choice I had from work (Belgian companies give company cars for personal use as perks because of tax benefits).

    I completely disagreed to all terms involving internet access in the vehicle, but I have no doubt they are tracking me without my consent too…

    • averyminya ( averyminya@beehaw.org ) deleted by creator
      link
      fedilink
      arrow-up
      5
      ·
      edit-2
      2 years ago

      deleted by creator

    • Domi ( domi@lemmy.secnd.me ) 
      link
      fedilink
      arrow-up
      1
      ·
      2 years ago

      It’s a shame that they deleted their data after their evaluation.

      Should have checksummed the e-mail addresses and put a haveibeenpwned-like website up where car owners can check if they are affected.

  • jagged_circle ( jagged_circle@feddit.nl ) 
    link
    fedilink
    English
    arrow-up
    24
    ·
    2 years ago

    Is there a company yet that let’s me pay them to internet disconnect and rip out sensors on a modern car?

    • oldfart ( oldfart@lemm.ee ) 
      link
      fedilink
      arrow-up
      7
      ·
      2 years ago

      Dacia doesn’t have that crap. They only have the mandatory SOS system.

      BTW, if someone has a way to rip that system out, please share

      • jagged_circle ( jagged_circle@feddit.nl ) 
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 years ago

        Do they make an electric car that doesn’t have such sensors (eg cabin microphone) and doesn’t have internet access?

        • Courant d'air 🍃 ( Courantdair@jlai.lu ) 
          link
          fedilink
          arrow-up
          3
          ·
          2 years ago

          They do, the Dacia Spring has nothing like that if I’m not wrong

          Edit: just checked, and it seems they added all the connected big screens crap, my bad

          • oldfart ( oldfart@lemm.ee ) 
            link
            fedilink
            arrow-up
            3
            ·
            2 years ago

            I don’t know about electric but the regular ones are available in basic versions without internet and “luxury” ones with all that crap

  • AAA ( AAA@feddit.org ) 
    link
    fedilink
    arrow-up
    21
    ·
    2 years ago

    “Accidentally” is the new “through incompetence”

    • davel [he/him] ( davel@lemmy.ml ) 
      link
      fedilink
      English
      arrow-up
      6
      ·
      2 years ago

      Negligence. Volkwagen can afford competence, but chose not to invest in it.

  • MNByChoice ( MNByChoice@midwest.social ) 
    link
    fedilink
    arrow-up
    18
    ·
    2 years ago

    Has someone located the frequent visitors of “houses of ill repute” yet?

  • Shortstack ( Shortstack@reddthat.com ) 
    link
    fedilink
    arrow-up
    17
    ·
    2 years ago

    I would love to know how to disable telemetry on my own hard drive on wheels or at worst prevent it from phoning home. Mozilla did a great job bringing this issue to light but now we need actionable solutions that don’t rely on governments passing laws

  • orcrist ( orcrist@lemm.ee ) 
    link
    fedilink
    arrow-up
    15
    ·
    2 years ago

    Accidentally, lol. The point was to mine and sell the data, wasn’t it? Not exactly private.

  • Evil_Shrubbery ( Evil_Shrubbery@lemm.ee ) 
    link
    fedilink
    arrow-up
    15
    ·
    2 years ago

    GDPR/DORA monies when?

  • fristislurper ( fristislurper@feddit.nl ) 
    link
    fedilink
    arrow-up
    4
    ·
    2 years ago

    Somewhat relevant XKCD

  • lazynooblet ( lazynooblet@lazysoci.al ) 
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 years ago

    Is it identifiable? Can it be attributed to individual car level?

    • hactar42 ( hactar42@lemmy.ml ) 
      link
      fedilink
      arrow-up
      4
      ·
      2 years ago

      I don’t imagine it would be difficult to figure out, especially if you know someone’s address.

  • EveningPancakes ( EveningPancakes@lemm.ee ) 
    link
    fedilink
    arrow-up
    2
    ·
    2 years ago

    Looking at the map, assuming these models aren’t for sale in Poland, Czech and so forth?

  • شاهد على إبادة ( PanArab@lemm.ee ) deleted by creator
    link
    fedilink
    arrow-up
    1
    ·
    2 years ago

    Spain is mostly empty

  • ulterno ( ulterno@programming.dev ) 
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 years ago

    I don’t get why they feel the need to keep it a secret.
    Google takes GeoLocation data with maps and people happily use it. I even put reviews for places I go to.

    If they were to just be above board about it while selling the stuff, they would have much happier customers and they could even get some legitimate use out of the data, like traffic status that Google does.

    I’m not a fan of Google, but must say, they definitely managed to do better in this regard.

Privacy@lemmy.ml

privacy@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@lemmy.ml

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

  • Lemmy.ml libre_culture
  • Lemmy.ml privatelife
  • Lemmy.ml DeGoogle
  • Lemmy.ca privacy

much thanks to @gary_host_laptop for the logo design :)

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1 user / day
  • 1 user / week
  • 2 users / month
  • 6.08K users / 6 months
  • 852 local subscribers
  • 51.4K subscribers
  • 4.56K Posts
  • 59.3K Comments
  • Modlog
  • mods:
  • k_o_t ( k_o_t@lemmy.ml ) 
  • tmpod ( tmpod@lemmy.pt ) 
  • Yayannick ( Yayannick@lemmy.ml ) 
  • ranok ( ranok@sopuli.xyz ) 
  • BE: 0.19.21
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code