cross-posted from: https://infosec.pub/post/21710275
Volkswagen has inadvertently exposed the personal information of 800,000 electric vehicle owners, including their location data and contact details. The breach, which occurred due to a misconfiguration in the systems of Cariad, VW’s software subsidiary, left sensitive data stored on Amazon Cloud publicly accessible for months. The exposed information included precise GPS data, which allowed […] The post Volkswagen Data Breach: 800,000 Electric Car Owners’ Data Leaked appeared first on Cyber Security News.
…man if only there was something in my pocket that has an infotainment app that auto makers can add to their cars that provided that functionality without the automakers needing to add much.
If only right?
That just shifts the privacy problems from the automaker to the smartphone OS maker.
I use GrapheneOS which only within the last year got Android Auto support, and even then it requires giving Google shit a lot of deep access to stuff I really don’t want to give.
Carplay and Android Auto should not be the only options (like when the car native nav is requires for stuff like battery preconditioning)
So, car manufacturers have to give up control of their car and use software by other people which will impose limitations on them. Gotcha. And everything needed for that to work is exactly what they would need to add if they did it themselves, except a cell connection (edit: and the GPS)
I take it you’re not familiar with apple car play and Google auto (which I was eluding to).
You connect your phone to it, and then it takes over some displays in the cars infotainment unit.
But that means it needs a screen. The car already has a computer in it, so it could output it’s own stuff to the screen if it really wanted to.
Everything they need to show you a map is already there in the car if they wanted to write the software themselves, add a gps, and a cellular connection.
Edit: And by making this the main system, they give up control of a critical part of the car. If it’s optional and not the only system, then they likely have their own software stack with maps and a gps/cellular connection anyway.
Edit: And just to be clear, you statement of
Why the fuck do cars need to be connected to the Internet all the time?
And your response is, but the car should be connected to the internet and have all the internet connectivity that people want, but i just want it to be through my phone, and I want the OEMs to be beholden to Apple and Google in the process because of that demand.
