News for hackers. Stuff that matters.
Re:Totaled Teslas contain unencrypted and personally reveali... by siruncledrew on Saturday March 30, 2019 @02:09AM (#19528050)
It seems like cars should have some sort of “remote wipe” feature that is automatically triggered by the owner or insurance after a vehicle is totalled and sold/scrapped.

It’s an interesting thought to get a junk car a rich person owned for cheap and then trace the location data back to their house and other places they frequently visit. It could be useful for espionage, extortion, theft, etc.

Re:Totaled Teslas contain unencrypted and personally reveali... by digitalixus on Saturday March 30, 2019 @02:41AM (#19528149)
Or car markers could just stop being stubborn and greedy with their proprietary trash and just support Car Play/Android Auto. That way the car acts as a dumb terminal for displaying stuff from the phone and nothing is actually stored in the car.

But no, gotta charge hundreds for in-car map updates (that only get updated as often as you purchase them) and radio/traffic subscription that mobile apps charge a fraction of and always up-to-date for as long as you keep the apps updated.

Re:Totaled Teslas contain unencrypted and personally reveali... by ndnxhs on Saturday March 30, 2019 @03:40AM (#19528325)
You just listed 2 more bits of proprietary crap though.
Re:Totaled Teslas contain unencrypted and personally reveali... by hanniabu on Saturday March 30, 2019 @05:49AM (#19528636)
They're more slave than masters though, pretty much relayers in a sense. They're also more standard. For some reason standardization is always underappreciated
Re:Totaled Teslas contain unencrypted and personally reveali... by cptskippy on Saturday March 30, 2019 @02:53AM (#19528197)
I agree with you that car makers should stop trying to provide piss poor alternatives to our phones and instead acts as conduits for them and I remember things like PlaysForSure so I am much more in favor of an open standard like Bluetooth that doesn't live or die by one company.
Re:Totaled Teslas contain unencrypted and personally reveali... by voltagex_ on Saturday March 30, 2019 @06:54AM (#19528808)
I'm pretty sure the phonebook thing is OBEX. You probably don't want the car hitting your phone for the phonebook every time you want to make a call. IVI systems are slow enough as it is.
Re:Totaled Teslas contain unencrypted and personally reveali... by cptskippy on Saturday March 30, 2019 @12:06PM (#19530099)
Yeah, I was reluctant to say Bluetooth because it implied that we should stick with existing protocols but that isn't exactly what I meant to say. Rather we should have some forward thinking protocol that works over multiple interfaces and is still open and platform independent like Bluetooth. Maybe even just a baseline Car Dock standard requiring Microphone, Speakers, and a Touch Display.

Bluetooth is just so encumbered with legacy concepts and limitations. It hosts a myriad of protocols that don't benefit users but are easy to implement to check the Bluetooth feature checkbox. There's a full generation of Bluetooth equipped cars that only support headset or handsfree protocols but not A2DP or other useful protocols people want.

Re:Totaled Teslas contain unencrypted and personally reveali... by mikeash on Saturday March 30, 2019 @08:39AM (#19529110)
I agree for most car makers, but I personally find Tesla’s UI to be better than CarPlay. And the map updates are free.
Re:Totaled Teslas contain unencrypted and personally reveali... by eclipxe on Saturday March 30, 2019 @10:25AM (#19529554)
Agree 100%
Re:Totaled Teslas contain unencrypted and personally reveali... by eclipxe on Saturday March 30, 2019 @10:24AM (#19529548)
Tesla doesn’t charge for map updates.
Re:Totaled Teslas contain unencrypted and personally reveali... by dustindiamond on Saturday March 30, 2019 @06:42AM (#19528777)
I was really hoping for Apple and Google to create a bidirectional standard similar to PCoIP (a la VMware), and be able to essentially use the car’s touchscreen as a thinclient to the phone.
Re:Totaled Teslas contain unencrypted and personally reveali... by lozaning on Saturday March 30, 2019 @02:17AM (#19528069)
I like the idea of a remote wipe, but foresee issues if the part of the car required for remote connectivity gets broken in the crash too.

It would be nice to have a way to physically remove the data from the car if remote connectivity is down. Some kind of FRU part in the trunk where all the user specific data for the car lives.

Get in a crash and just make sure to take the "hard drive" out of the car and then you dont have to worry.

Re:Totaled Teslas contain unencrypted and personally reveali... by skookumchuck on Saturday March 30, 2019 @03:47AM (#19528348)
A USB thumb drive. But that would be too easy.
Re:Totaled Teslas contain unencrypted and personally reveali... by rzzzt on Saturday March 30, 2019 @07:59AM (#19528985)
Store it in the ignition key.
Re:Totaled Teslas contain unencrypted and personally reveali... by frosted-flakes on Saturday March 30, 2019 @10:53AM (#19529691)
Aren't the 3 models keyless, and you have to use your phone? I seem to remember reading that a while back.
Re:Totaled Teslas contain unencrypted and personally reveali... by rzzzt on Saturday March 30, 2019 @11:32AM (#19529904)
Not totally: https://www.tesla.com/support/model-3-key-fob

But they can also store the content on the phone, and then we have gone full circle with the idea. :)

Re:Totaled Teslas contain unencrypted and personally reveali... by CamperBob2 on Saturday March 30, 2019 @04:08PM (#19531512)
If I were a young turk looking to get started in a life of crime, I could do worse than to get a job washing cars at a high-end dealership. Never mind the customer cars, the various telematics memories in the service loaners are always fun to surf through.

When I take my car in for service, they get the address of a gas station down the street.

Re:Totaled Teslas contain unencrypted and personally reveali... by Spooky23 on Saturday March 30, 2019 @08:40AM (#19529115)
This is a dumb story, ginned up because it’s “<bad thing> + <apple|tesla>”.

This happens with any rental car or and car transaction.

Also, end of the day, this data isn’t particularly sensitive. Your state DMV provides your registration and license data in real-time to third party data brokers. Cellular carriers sell geo data. Its pretty common for folks to have contact lists slurped up by third parties.