Article: Who is Collecting Data from Your Car?

I can see it now though … yes, it runs AGL … but … the “bootloader” is locked down so that you can only install firmware signed by the manufacturer … and all the signed firmware “collects data from your car”.

In other words, like Unprivate Secure Boot, but without the option to disable it.

I think this would present some difficult challenges for the regulatory authorities - since a car that is running non-standard, buggy firmware could be a lethal weapon, lethal to the driver or lethal to other road users. Who is going to take legal liability if the firmware goes awry?

Note that under existing Purism policy, Purism would not sign the firmware. If it is signed at all, you would sign the firmware (to prevent an Evil Maid Attack).

Running non-standard firmware might void your Compulsory Third Party insurance (or such other name as it might be known in other jurisdictions) and it might void your Comprehensive insurance (ditto) and it might void other insurance. So the right to run your own firmware might in practice not be worth much.

These legal problems of course exist regardless of whether the Librem Car exists. That is, as cars become more and more complex, who is liable when something goes wrong? There have already been a number of court cases - and the manufacturer will want to “collect data from your car” so that they can use it as exculpatory evidence for themselves in the event of a court case.

2 Likes

Discussion identified and indexed.

A little good news: One of the major sellers of detailed driver behavioral data is shutting down | Ars Technica

3 Likes

Legislative attention: Senators Expose Car Companies’ Terrible Data Privacy Practices | Electronic Frontier Foundation

And: US senators claim car makers sold driver data for pennies • The Register

4 Likes

The future no driver wanted is here: Who wants in-car ads tailored to your journey, passengers? • The Register

Ugh… Kill me now.

3 Likes

Technically, no, it’s not “here”. And best case scenario it is genuinely a defensive patent that will never be implemented by Ford.

I believe that for safety reasons this shouldn’t even be legal. If someone has an accident and claims that the accident was caused by being distracted by an advertisement at an inopportune moment, look out for a mega-lawsuit. Legislation (road rules / regulations) should demand that it at least be possible to disable this functionality completely.

No doubt Ford will claim … oh but we use in car monitoring of the car’s speed and location etc. to determine when the car is just cruising and it’s safe to hit the driver with an advertisement or even … oh but we use in car monitoring to determine when the driver’s attentiveness is declining and we use advertisements to liven the driver up.

(My car occasionally badgers me to keep my hands on the steering wheel even when I have not taken my hands off the steering wheel. Not sure how that works. Or doesn’t work. Low priority problem though.)

We are in agreement though that the future of cars looks grim from a privacy (and security) perspective - across this and many other issues.

2 Likes

Punk’s not dead!

2 Likes

Ford Motors has patent on devices in vehicles to listen in to passengers and/or driver conversations so their AI can better build a profile so ads are targeted.

  1. Who authorized them to place a bug in every vehicle so Ford can listen to conversations.
  2. Who said it was OK to send ads through the vehicle and other devices that have been attached at one time or the other.

Would you let a mattress company put a bug in your mattress so they can learn what you’re doing and send targeted ads? Have you checked it for bugs? :wink:

The problem is. They will do it with or without our permission. Once you buy a car, or lease it, you give up your rights to privacy. Even if you paid cash.

All in the game of shoving ads at us, in our vehicles and any other devices we use.

I think it only proper, fair and good for public relations if vehicle manufacturers want to put a listening stalker in our private property, we should be able to tune in and listen to manufacturers CEOs, all Board members, their families, friends, passengers, shareholders etcetera.

IMO
George Orwell’s 1984 is not a story. It is an instruction manual for corporations and governments.

*SMIRC
Stalk you
Monitor you
Inject Code to
Record and
Control you.

~s

5 Likes

Amazingly, the U.S. gov’t has its own agenda in this matter:

So if I understand correctly:

  • If you purchase a Chinese-made car before the proposed deadline of 2027, you can avoid having your car listening to your conversation and show you relevant adds - but you will have the PRC tracking your location and monitoring your whereabouts

  • if you buy american-made, you can avoid Chinese state surveillance, but at the risk of dying in an accident because an obnoxious commercial was shown to you at the worst moment

What a strange world we live in…

5 Likes

Ironically, the only ‘American Made’ car is the Toyota :man_facepalming:
Everything else is made elsewhere

2 Likes

Really? If this is indeed the case, we should expect some amazing chain supply schemes!
This industry hasn’t been hit yet with this sort of attacks, but it surely will. BOM/SBOM will be such a terrible headache

1 Like

What vehicles do they make in Detroit? Ladas? :rofl:

2 Likes

If you could import a used Lada from the front it may come with its own frequency jammer.

1 Like

What country makes the most cars that have a stalker built in?

~s

1 Like

Most likely the People’s Republic of China: List of countries by motor vehicle production - Wikipedia

1 Like

Wow - that US propaganda machine works wonders. At least the US is up front with their known stalkers placed in US assembled vehicles.

The US, and Canada too, “Most likely” don’t tell about the unnamed stalkers they build into vehicles…
Thanks for the reply
~s

BTW If we remove the words like might, most likely, maybe, possibly, probably, could be, allegedly, anonymous, and anything using single quotes to paraphrase, as in ‘She did say she hated the news.’ there would be more truth rather than dark propaganda.
So, ‘most likely’ means most likely neither of us really know.
:laughing:
:peace_symbol:

2 Likes

Since hardly any new cars come without some kind of tracking, it stands to reason that the country that makes the most cars would also probably include the most installations of tracking software.

No propagandizing required.

3 Likes

One thing that I wonder about is … if you have a lower spec model that doesn’t have built in 4G, is it able to upload its surveillance via a paired mobile phone?

2 Likes

If not that way, then it’s likely possible to collect and transmit it as soon as the car gets connected to diagnostic systems at the dealer.

Speaking of which, I’ve been pleased the last few times I took my older car in for service, and the report indicated:

“DATA RECORDER WOULD NOT COMMUNICATE WITH VEHICLE’S DATA LINK CONNECTOR.”

That could simply mean that the manufacturer stopped collecting data.

4 Likes

Although I would contend US made car stalkers are corporate sponsored rather than state sponsored. Its a business decision, and in the corporation’s interests!

(That it aligns with 3 letter intelligence service motives, is just a convenient concidence, and no doubt utilized as needed. They no doubt pay the corprations a hefty license fee to use it. Also in the copration’s interest.)

3 Likes