Cybersecurity

5875 readers

29 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

225

VW Suffers Major Breach Exposing Location of 800,000 Electric Vehicles (cyberinsider.com)

submitted 4 days ago by minyaen@lemmy.ml to c/cybersecurity@sh.itjust.works

26 comments fedilink hide all child comments

If emphasis wasn't already concentrated on the security of these connected vehicles, major oversight obviously...

you are viewing a single comment's thread
view the rest of the comments

[–] original_reader@lemm.ee 8 points 4 days ago (2 children)

What happens if I disable the Internet connection of my car?

[–] atrielienz@lemmy.world 5 points 3 days ago

Depends on the car and whether or not you can even get to that modem connection without tearing apart the interior. The main problem is if it's linked to the main computer (ECU), or similar. If it is, your vehicle may be undrivable. It's better to talk to the company who made your car and have them disable it. You may have to have a lawyer do so. If you're buying a new car it is certainly possible to disagree to those terms that would activate it. But apparently not possible to have them build the car without it (which I think is bogus as hell). There was a big article about this after an investigation by Mozilla more than a year ago. People on reddit (I know !) were pretty mad about it then and they were looking for solutions. The consensus was that some cars you can get to the modem, some cars you can't.

Also, you may not be able to receive necessary software updates (recalls etc) if you do disable it.

[–] MonkderVierte@lemmy.ml 2 points 3 days ago* (last edited 3 days ago) (2 children)

You are not allowed to drive anymore; your car needs to be able to call emergency response. Is an EU rule.

Edit: called eCall, compulsory.

When eCall is activated, it connects to the nearest emergency response centre, using both a telephone and data link. This allows you and the passengers in the vehicle to communicate with the emergency centre operator and at the same time, a minimum set of data is automatically transmitted (your exact location, the time of the accident, your vehicle's identification number and direction of travel). This allows the emergency services to assess and manage your situation.

[–] Mr_Blott@feddit.uk 3 points 3 days ago* (last edited 3 days ago) (1 children)

Your eCall system is only activated if your vehicle is involved in a serious accident. The rest of the time the system remains inactive. This means that when you are simply driving your vehicle, no tracking (registering your car's position or monitoring your driving) or transmission of data takes place.

When a call is made through your 112-based eCall system, your personal data is processed according to EU data protection rules. This means that the emergency services only receive the limited data they need to deal with the accident situation, your data is not stored for any longer than necessary, and is removed when no longer required. Read more about EU data protection and privacy rules.

Important bit emphasised

[–] MonkderVierte@lemmy.ml 1 points 3 days ago (2 children)

Yes, thanks. My question is more, if the vendor already has to add a sim card and data plan, are they forbidden from using it for other things?

[–] gloriousspearfish@feddit.dk 1 points 3 days ago (1 children)

They don't need a sim and days plan, if they only call 112.

[–] MonkderVierte@lemmy.ml 1 points 3 days ago

using both a telephone and data link. […] a minimum set of data is automatically transmitted (your exact location, the time of the accident, your vehicle's identification number and direction of travel).

[–] Mr_Blott@feddit.uk 1 points 3 days ago (1 children)

G D P R

[–] MonkderVierte@lemmy.ml 1 points 3 days ago

Can't sue if nobody knows about it.

[–] InFerNo@lemmy.ml 2 points 3 days ago

That sounds like it should be able to make a mobile call, not connect to the internet, but they probably require the latter.