3 ms·

Why there has been no public car data exposures, like GPS movement data of US public? If people could see the everyone (like their employer) could see where an

Why there has been no public car data exposures, like GPS movement data of US public? If people could see the everyone (like their employer) could see where and how often they go to e.g. medical facilities, they'd be more willing to take care of that.

sampli 3y ago
There have been. https://www.darkreading.com/cloud/toyota-discloses-decade-long-data-leak-exposing-2-15m-customers-data https://www.darkreading.com/cloud/toyota-discloses-decade-lo...
yummypaint 3y ago
Most people's phones would probably be more lucrative targets as the car location data should just be a subset and isn't necessarily tied to the individual
ben7799 3y ago
There have been some really serious ones.. going back years. Dodge/Chrysler U-Connect had a ridiculous vulnerability that allowed getting all the data and even controlling/disabling the car over the internet. https://www.cisa.gov/news-events/ics-advisories/icsa-15-260-01 https://www.cisa.gov/news-events/ics-advisories/icsa-15-260-... Who knows if there are any out in the wild now, cars have gotten way more complex since then.
fragmede 3y ago
would they? most people who leave work to go to a medical facility tell work that they left work to go to a medical facility. it's not "most people" that need to worry about that, which means they don't. it's the times when it does matter, that it's an issue, and for people to care, they have to identify with the problem.
- deepsun 3y ago
  Might be bad example, just of top of my head. It's like with security -- one can never prove there's nothing important. Some other examples I can think of: 1. A future employer may want to filter out women candidates that recently went to a pharmacy, what if they are pregnant? 2. A prospective employer might want to know how often a candidate goes to a liquor store. And that's only for employer/employee relationships. Location data is a gold mine of private and sensitive data.

sampli 3y ago

There have been. https://www.darkreading.com/cloud/toyota-discloses-decade-long-data-leak-exposing-2-15m-customers-data https://www.darkreading.com/cloud/toyota-discloses-decade-lo...

yummypaint 3y ago

Most people's phones would probably be more lucrative targets as the car location data should just be a subset and isn't necessarily tied to the individual

ben7799 3y ago

There have been some really serious ones.. going back years. Dodge/Chrysler U-Connect had a ridiculous vulnerability that allowed getting all the data and even controlling/disabling the car over the internet. https://www.cisa.gov/news-events/ics-advisories/icsa-15-260-01 https://www.cisa.gov/news-events/ics-advisories/icsa-15-260-... Who knows if there are any out in the wild now, cars have gotten way more complex since then.

fragmede 3y ago

would they? most people who leave work to go to a medical facility tell work that they left work to go to a medical facility. it's not "most people" that need to worry about that, which means they don't. it's the times when it does matter, that it's an issue, and for people to care, they have to identify with the problem.

deepsun 3y ago
Might be bad example, just of top of my head. It's like with security -- one can never prove there's nothing important. Some other examples I can think of: 1. A future employer may want to filter out women candidates that recently went to a pharmacy, what if they are pregnant? 2. A prospective employer might want to know how often a candidate goes to a liquor store. And that's only for employer/employee relationships. Location data is a gold mine of private and sensitive data.