Couple of months prior, I read an article on Mozilla, where they did a research on automakers and found none comply to good privacy measures. I am planning to buy a used car. I want to know how the data is collected and transmitted.

The car comes with a connected app though I am not planning to use it. It also has apple car play and android auto. Should I use those? The article states some manufacturers even records sexual activities. How are they transmitting these informations? Through connected phones?

My use is fairly basic, I want to use the Bluetooth audio system in the car for listening to music on my phone. I use maps on my phone.

What about car servicing? Can they access stored information?

      • _haha_oh_wow_@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        Buy a used car, or don’t buy a car at all and ride a bike, walk, or use public transit. Might have to move to a place that has busing, subways, bike lanes, etc. but it isn’t impossible.

        • delirious_owl@discuss.online
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          This is what I do, but sometimes you have to ride in someone else’s car. Trying to tell them you don’t want to speak because its a god damn surveillance capsule doesn’t go over well

        • niucllos@lemm.ee
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          Depending on what you’re trying to avoid, even 18 year old cars had OnStar gps that could in theory always track you unfortunately

      • cmgvd3lw@discuss.tchncs.deOP
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        Yes, with emission standards, old car purchases are not encouraged here. I am looking for a fairly new used car and these features are already included in most of them.

      • _haha_oh_wow_@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        Buy commercial grade TVs or a projector: They don’t have that garbage.

        You can also just buy older used cars, which are still perfectly good and do not have invasive surveillance that companies use to profit off of you with no benefit to you.

      • azenyr@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        While editing my comment I deleted it by mistake lol. Here is what I was trying to post:

        Don’t buy a Tesla or BMW. Done.

        Edit: im joking, but you can just not connect your car to any internet. Most casual brands have literally zero outgoing connections if you don’t add or connect them to a network. Androd Auto and Apple Carplay are just displaying what your phone sends to the screen, the car itself doesn’t access the internet through those. Think of android auto and carplay like “HDMI monitors for your phone that have touch too”. Your phone does everything the car just displays it.

        Connecting via bluetooth should also not be any problem since bluetooth doesn’t include internet access (unless you activate that ok your phone but Im sure the car will not use it). Bluetooth only sends and receives small bits of data that your phone chooses to send, not what the car chooses. Contacts names, phone numbers, audio and microphone are the only few data that gets sent to your car and only during phone calls or audio listening.

        In the end, just avoid cars that have always connected systems like Teslas or modern BMWs or similar cars. Most Volkswagen, Audi, etc etc are 100% offline cars when you don’t connect them to a network. Most now can do it, but most its a subscription service that you can just not buy, and some even need SIM cards to work, that you just not use. Unless its a Tesla, those are connected even if you don’t pay the subscription.

        Test drive the car. Disconnect it from all networks or don’t turn them on. Try to use all features. If the car constantly complains that it has no internet access for all of them, thats good.

        Note that GPS access is always on and doesn’t require any subscription, so maps and navigation will still work. However that is not really a privacy violation by itself because GPS on cars and phones only receives signal, doesn’t transmit anything. You wont have traffic information or weather or anything tho. If you have traffic info, the car is connecting to some network, find how to deactivate that.

        Many modern cars are too connected, thats true, but with the exception of a few brands, most cars go 100% offline the moment you disconnect them from their data services or don’t pay for that upgrade/subscription. So you will be fine even with a modern car.

  • umami_wasabi@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    Off topic. I saw a few comments about disabling or removing the modem on the car. How about removing where the telementry code resides in? Is that feasible?

    • ReveredOxygen@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 year ago

      Probably not. You’d have to figure out how to jailbreak your car and figure out how to remove that code. Then a software update could potentially undo it, or you could brick it while trying. A hardware fix on the other hand is often much simpler and is far easier to revert

      • umami_wasabi@lemmy.ml
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        Ops. Missed important keywords. I mean replacing the hardware which contains telementry code. Like the infotainmemt system, or the ECU, or something else.

        P.S. Not too into the car world so please forgive some misunderstandings I might have.

    • Recant@beehaw.org
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      1 year ago

      For my truck, I ended up looking in the owners manual and found a fuse that is for the modem. I removed it and the vehicle functions without issue.

      I know it works because when I brought it to the dealership to get serviced they said they couldn’t connect to it via their online service app. They also asked if I had tried to connect to it via the company app on my phone. I just told them I never needed to.

      Just to be sure I verified they didn’t reinstall the fuse and they had not.

  • Steve@communick.news
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    1 year ago

    The situation here is rather bleak really.

    Generally these cars have their own always on cellular data connection paid by the manufacturer. So they don’t depend on. Your phone for anything.

    What they do is record and transmit any sensor data they can. The sexual activity you mentioned, comes from the sensors in the seats that are required to activate seatbelt warnings, or disable the airbags if a child is in the seat. Data from those pressure sensors can be used to determine if there’s a certain kind of rhythmic motion happening in a given seat.

    They also collect any and all data they can from devices they connect to. Like phones. So don’t use carplay, or android auto. Don’t use their app. When using Bluetooth audio don’t give permissions to make calls or access contacts.

    It should be possible to physically disable the onboard cellular radio. That will prevent any live data tracking. Exactly how depends on the specific car you’re looking at.

    I would assume the dealer can access and download the data manually. Use private non-dealer repair shops for any regular maintance or any repairs possible.

  • Mr. Camel999@programming.dev
    cake
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    If buying new, I believe you can ask to have the modem removed from the vehicle, which wouldn’t allow your car to access the internet. Haven’t had the opportunity to try this myself yet, but very much plan on it for whatever vehicle I purchase new in the future.

  • invertedspear@lemm.ee
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    Number 1) find the fuse that controls the modem and pull it. Without this your car can only report when the service techs hook it up to their diagnostics, and what is reported there versus what reports on the regular from the modem is a huge difference. You lose a lot of convenience this way, but that’s to be expected. CarPlay and auto give you a lot of that convenience back, but now you’re giving a lot of that same data to Apple and Google, even if all you think you’re doing is projecting maps from your phone to your infotainment. Do you trust them? You can use Bluetooth audio in most cars without using CarPlay or auto, that should be safe. Stick to maps on your phone if you don’t want Google or Apple getting your driving data.

  • TechNerdWizard42@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    You cannot stop the collection. It ALWAYS collects. It may not transmit, even if connected. For example the black box in many cars is really an assortment of ECUs that contain fine grained historical data. It does eventually roll over and get replaced but the data is there.

    For example there are public cases you can find where the police, not even needing a warrant, were allowed to dump this data off of a rental vehicle that a suspect, not convicted just suspected, was thought to have been in. Of course the copaganda story showed that they the used this data which was mostly location by gps and speed by the wheel sensors and gps to get a track of everywhere that vehicle had been in the last 6 months. Every person who rented it and drove it somewhere had their privacy violated. But I guess that’s normal now.

    The infotainment systems are the biggest jerks for data storage as they’re just mini generic computers today with lots of storage.

    To stop wireless transmission you can remove the sim card from the modem. Many vehicles won’t work or even start if the modem is disconnected (unplugged or unfused). A Nissan for example will drain its 12v battery overnight trying to find the modem if it is unplugged. But if the sim is bad or disabled, it will try and fail to communicate, then retry later which won’t kill the battery.

    You lose a lot of convenience and the data is still there. So the answer is basically you can’t drive a new vehicle without it violating your privacy with collection. You can only make the wireless transmission more private or disabled. I suppose you could buy a scanner yourself and before you leave the vehicle, factory wipe all ECUs. But even then you’ll need to enable them for emissions testing and such if that’s in your area.

  • grue@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    1 year ago

    My solution is to continue to only own old (mid-2000s or older) cars in perpetuity.

    (And also use a bicycle instead for most trips.)

  • Sub-Aquatic Helicopter@lemmy.world
    cake
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    I recently bought a 2021 vehicle that has OnStar. I knew this would be a concern, but luckily there was a guide online to replace the antenna with a dummy antenna that isn’t ever able to connect to the network to send data.

    So that might be an option! It’s still collecting but it’s not sending anything back.

  • SecurityPro@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    We need an online guide, based on make and model, on how to disable the transmission of this data.

  • unknowing8343@discuss.tchncs.de
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    As long as you have a Google or Apple phone in your pocket… The car will actually not gather much more than your phone already does… So don’t overthink it.

    • delirious_owl@discuss.online
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      You can probably cut a cable going to the transmitter than break the transmitter itself. Low voltage cables can be reconnected trivially.

  • repungnant_canary@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    One issue with “hacky” methods suggested here I can see is they might disable eCall in the EU. And eCall is actually a safety improvement so for some it might be a very suboptimal compromise. But maybe if enough people show resistance to uncontrolled data collection then some meaningful legislation will be passed.