Toyota, Progressive Insurance, and a data analytics firm are now being accused of collecting detailed personal driving information without proper consent

top 96 comments

sorted by: hot top controversial new old
[–] 79 points 9 months ago (11 children)

The Mozilla foundation did a great report on cars & privacy.

  • source
  • hideshow 11 child comments
  • [–] 16 points 9 months ago (10 children)

    I bought a new dishwasher and that wants to be connected to the internet "to let me know when it's finished".

  • source
  • parent
  • hideshow 10 child comments
  • [–] 12 points 9 months ago (8 children)

    Matter over Thread is what you want. It means it can work locally with anything. You do need a Thread controller (called a "thread border router"), but most people already have one. Google Home, Alexa, or Apple things all do it.

    Ikea is starting to move over to this stuff. Just be aware that they're also trying to get rid of the old tech still.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 19 points 9 months ago (7 children)

    Why though? Why does he want a networked dishwasher at all? There's no benefit or reason for that in the first place

  • source
  • parent
  • hideshow 7 child comments
  • [–] 12 points 9 months ago* (2 children)

    I really hate those guys, you know. They really are the creeps of the cosmos, buzzing around the celestial infinite with their junky little machines that never work properly or, when they do, perform functions that no sane man would require of them and,’ he added savagely, ‘go beep to tell you when they’ve done it!’

    Ford Prefect
    "So long & thanks for all the fish" Douglas Adams

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 9 months ago*

    Douglas Adams, apparently ever prescient, was on top of this long before the rest of us. This is from The Long Dark Tea-Time Of The Soul, which I will remind you was published in 1988 and in the foreword says it was typeset on a Macintosh II:

    There was a pay phone in one of the dark corners where waiters slouched moodily at one another. Dirk threaded his way through them, wondering whom it was they reminded him of, and eventually deciding it was the small crowd of naked men standing around behind the Holy Family in Michelangelo's picture of the same name, for no more apparent reason than Michelangelo rather liked them.

    He telephoned an acquaintance of his called Nobby Paxton, or so he claimed, who worked the darker side of the domestic appliance supply business. Dirk came straight to the point.

    "Dobby, I deed a fridge." (At this point in the book, Dirk has recently been punched in the face and is talking funny due to a broken nose.)

    "Dirk, I been saving one against the day you'd ask me."

    Dirk found this highly unlikely.

    "Only I wand a good fridge, you thee, Dobby."

    "This is the best, Dirk. Japanese. Microprocessor-controlled."

    "What would a microprothehtor be doing in a fridge, Dobby?"

    "Keeping itself cool, Dirk. I'll get the lads to bring it round right away. I need to get it off the premises pretty sharpish for reasons I won't trouble you with."

    "I apprethiade thid, Dobby," said Dirk. "Problem id, I'm not home at preddent."

    "Gaining access to houses in the absence of their owners is only one of the panoply of skills with which my lads are blessed. Let me know if you find anything missing afterwards, by the way."

  • source
  • parent
  • [–] 5 points 9 months ago (3 children)

    Some people would like the feature where they are notified that the job is finished but don’t want to allow it to connect to the manufacturer. That would be possible if you could get one that uses Thread over Matter.

    Most people either don’t care about the feature or don’t care about their privacy so it’s a real niche market.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 9 months ago (1 child)

    My 15 year old dishwasher makes a happy little jingle when it's done to let me know it's finished. Alternatively, I can just look at it the next time I'm in the kitchen and see if it's done. I can't think of any scenario where I am so pressed for time that I must be notified the second my dishwasher is done, but also be far enough away that I don't hear it's pretty loud jingle. All so I can... What? Do another load of dishes? Who would ever need that?

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (1 reply)
  • [–] 59 points 9 months ago (8 children)

    Maybe it's time to create some rules about data brokering? It's not really about tracking and consent, it's about who can sell what data about whom to what parties.

    It's become an enormous business, it deals with you and I, it delights in living in the shadows, and it is almost completely unregulated. I don't really care if Toyota records my data, I care that it's allowed to sell it or share it.

    I think a reasonable first step would be that all data about a specific person belongs to that person and nobody else. We have rules about photos, we need to expand them to data brokering, because the problem is the same: if you can be identified and placed, you are at risk.

  • source
  • hideshow 8 child comments
  • [–] 7 points 9 months ago* (1 child)

    When approaching this proposition, remember that there will be a lot of push back that might sound sincere but remember that there are a lot of people in the data mining business and they will definitely not be arguing in good faith.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 9 months ago*

    Maybe we can just learn to disable the parts of the vehicle that spy on us. It's actually a federal felony to alter programming on products like this that we own. But maybe a surgically placed electromagnet or cut wire could do the trick?

    Because government will not be fixing anything for the better. This is the best the government will be for the forseeable future.

  • source
  • parent
  • [–] 2 points 9 months ago*

    Yeah i agree with most of what you said. I don't have massive issues with companies tracking and recording data. By default they should only be allowed to use that data themselves (which can get a bit murky when the company in question is that of a conglomerate) and you should have to explicitly allow the sharing of data to third parties that is separate to standard TOC's.

    GDPR tried to solve this but it kind of made a lot of the options available to the user a bit of a mess and overwhelming because there's not much regulation about what can be done with data (somewhat - there actually are limitations but it's not very well enforced), just that the user has to say they agree. And that's not even thinking about how the banners and pop ups are obtrusive as fuck.

    I'm not smart enough to know what the actual solution should be other than I know it needs to be better than it is now.

  • source
  • parent
  • [–] 1 point 9 months ago (2 children)

    Maybe it's already called GDPR?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 9 months ago* (1 child)

    The same GDPR that allows every website or app to share your data with their 816 partners, as long as they claim they have a 'legitimate interest'?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 162 points 9 months ago (21 children)

    When do companies ask for consent? Look at Google and incognito mode. Look at 23&me, I can go on. And nobody sees anything done about it. We are numbers. Not people. That's our world

  • source
  • hideshow 21 child comments
  • [–] 56 points 9 months ago (11 children)

    They ask for consent in the terms and conditions, you know, that long annoying text that no one really reads when signing up for stuff.

    That is where they put the consent.

  • source
  • parent
  • hideshow 11 child comments
  • [–] 40 points 9 months ago (1 child)

    The thing about 23&Me is that they’re collecting data not just on the people who signed up for the service - the ones who actually skipped and accepted the T&Cs - but their family members as well.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 25 points 9 months ago (2 children)

    It's not real consent if you're forced to agree to use the product or if the terms allow the company to alter the terms.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 9 points 9 months ago

    And it's so ubiquitous that the only way to avoid them altogether is to become Amish.

    Good luck never agreeing to binding arbitration. And even if you do get out of it, good luck ever holding them accountable in a class action. You might be able to file a class action, but no one can join you.

  • source
  • parent
  • [–] 4 points 9 months ago

    Further, like, as a third party I can't really consent. Say I'm out on a walk and I pass a Tesla, or that Tesla drives by me. It has a bunch of cameras, it's recording a bunch of shit. I as a passerby have no ability to consent or decline being recorded just going about my business.

    I fucking hate that. Every time I see a modern car I'm grossed out because I feel like I'm being watched.

  • source
  • parent
  • [–] 4 points 9 months ago (4 children)

    Is it consent if it is forced?

  • source
  • parent
  • hideshow 4 child comments
  • [–] -1 points 9 months ago (3 children)

    No one is forcing you to use their services

  • source
  • parent
  • hideshow 3 child comments
  • load more comments (-1 replies)
  • [–] 2 points 9 months ago

    Seen the third party message on the Wirecutter comments section?

    “If you comment on these socks we’re recommending YOUR DATA WILL BE SOLD!!!”

    Incredible and actually good guy vendor (Disqus) in a way for not hiding it unless it was their lawyers’ doing :)

  • source
  • parent
  • [–] 8 points 9 months ago (1 child)

    My new car had a whole Wikipedia worth of terms and conditions in the screen that had to accept before turning on for the first time.

    There was no alternative other than "accept" or "leave the car at the dealership and pay the most expensive parking in the world forever".

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 9 months ago*

    The fact that they can sell you a car without having to give you all of the terms and conditions is kinda nuts. Imagine if you went to buy a house and they just went "Nuh uh, pay first, we give you all the HOA rules and city ordinance laws you have to follow afterwards. What is in them? It's a mYsTeRy!".

  • source
  • parent
  • [–] 4 points 9 months ago

    Little look at Julian Assange. Look at North Korea. Look at porn. Look at open source encryption. Look at the tor network. Look at mesh wifi. Look at private dns. Look at ungoogled chromium or librewolf. Look at webgl. Look at a little porn again. Look at the stars for a while. Look at signal. Smoke a cigarette and finally look at yourself

  • source
  • parent
  • [–] 55 points 9 months ago (9 children)

    The only way to truly avoid that outcome is with enforceable rules around consent, transparency, and control, letting drivers see exactly what’s being collected, who it’s going to, and giving them a real way to say no. That, or skip the connected car entirely and drive something that isn’t quietly reporting back every time you hit the brakes.

    Yeah none of that's gonna happen anytime soon. When my 16 year old car bites the dust my next car will be another one from that same era. I'm not letting big brother know everything about me and jack up my insurance rates for the privilege of being spied on.

  • source
  • hideshow 9 child comments
  • [–] 34 points 9 months ago (3 children)

    Amen. We all drive cars older than 2015, and I've gone against anything newer.

    The other issue is all those Flock cameras all over our state and surrounding areas, is almost impossible to not be tracked. I didn't consent to those being used by or municipal or city.

    I'm sick of being data points on a spreadsheet!!

  • source
  • parent
  • hideshow 3 child comments
  • [–] 17 points 9 months ago (2 children)

    I'm so happy my city took down our flock cameras

  • source
  • parent
  • hideshow 2 child comments
  • [–] 12 points 9 months ago (1 child)

    Leave your mobile phone at home as it knows when you're driving, speed, acceleration, routes, times. Then you have the CCTV on the roads tracking your every move with your licence plate and facial recognition.

    And when you get home turn off the smart TV, smart fridge, smart dishwasher, doorbell cameras, Alexa's, Google's. These devices aren't for our convenience primarily; they're built to collect our valuable data about our living habits.

    Digitally connected electricity, gas and water meters all monitor our usage thus working out our lifestyle patterns and habits. Even smart lightbulbs have the capacity to snoop on our private lives.

    From the moment we wake up to turning off the light these connected devices quietly gather data about us innocuously... even when we sleep (phones monitoring breathing sounds).

  • source
  • parent
  • hideshow 1 child comment
  • You can get "smart" devices that do not sell your data, but they are less common and they can be hard to find when shopping. You may not get a choice about "smart" meters, but you may be able to obfuscate your electrical usage with batteries. However, if the batteries have an internet connection they'll probably sell your data.

  • source
  • parent
  • [+] 2 points 9 months ago (3 children)
  • load more comments (-1 replies)
    [–] 102 points 9 months ago (15 children)

    Time to make data sharing illegal. If it is technically needed, the industry needs to have a written contract with the user, which describes in detail which data is shared. It must be a separate contract from anything else, and one each for each industry partner.

  • source
  • hideshow 15 child comments
  • [–] 14 points 9 months ago (5 children)

    Notarized. The agreements need to be notarized.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 1 point 9 months ago (3 children)
  • [–] 4 points 9 months ago (2 children)

    Because the seriousness of this contract should require proof that you agreed to it

    A little click box is fine for something that doesn’t matter, but for lifetime real time surveillance, that’s important enough that you should have a serious contract with proof that you actually signed it

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 9 months ago (1 child)

    I feel like this was something that needed to be stopped decades ago but now it's just not possible to do this. You can't wait until it's this big then start thinking how to change it

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 9 months ago*

    The other option is to look at the possible outcomes and in this case the direction we are on is unacceptable.

    Better to start now because it gets costlier by the minute to delay.

    That which is unsustainable tends not to be sustained.

  • source
  • parent
  • [–] 10 points 9 months ago (2 children)

    it is technically needed, the industry needs to have a written contract with the user, which describes in detail which data is shared. It must be a separate contract from anything else, and one each for each industry partner.

    That's the Terms and Conditions that nobody reads.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 9 months ago (2 children)

    In the owner's manual, it says you consent to data collection by driving the car and if you don't consent, you should return the car to the nearest dealer.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 43 points 9 months ago (3 children)

    What amazes me is how many people not only willingly giving up their privacy without any understand of what it means to do so or the implications of it, but also so many have a defense of 'if you are in public you have no right or expectation of privacy at all'.

    This is bullshit. While you have a reduced expectation of privacy by virtue of being in public, the fact that your movements are alp documented so completely either by private or public entities without warrants, your face and expressions and dress scanned, and even videos you watch on your phone based on some flock cameras I have seen is an outrage.

    People have a right to sometimes just go out and disappear for a while. I used to do it all the damn as a teenager and very young adult. I didnt run away from home or skip school, but I needed genuine alone time to think and let my mind and body feel free for a moment and give myself a minor mental reset. This is impossible if I am on camera all the damn time. The last thing I want is to take a walk through some artsy parts of town or a park and then get ads on 'want to escape? Here are some nice vacation spots to go to', or get ads on shit just because I did some window shopping or in-store browsing.

    And then there is this shit. How all that spying affects you financially and maybe even professionally as AI now is reviewing CVs and you better damn well believe that they will be integrating all information on you if you apply anywhere.

    And for the 'this prevents crime' shit no it does not. Crime resolution rates have been dropping throughout even the wealthiest most surveillance heavy countries. A study from around 20 years ago in the UK showed thay the places with the most cameras don't have less crime or more solved crimes than those with less cameras. More funding for police and more police tools have ironically lead to a massive reduction in murder rate resolution in the US and elsewhere. Which is surprising snd terrifying... because just how many innocent people have been put in prison in the past without anyone knowing?

    It is entirely about social control. Have you ever wondered why protests seem to be less effective and there aren't that many revolutions or successful coups as there were last century? That is why. (And yes I am aware they still happen, but they are much harder to pull off)

  • source
  • hideshow 3 child comments
  • [–] 48 points 9 months ago (2 children)

    The best example I've heard is, if I wait outside your house and follow you around everywhere you go, every single time you leave the house, even though you're "in public," that's still a crime and it's called "stalking."

  • source
  • parent
  • hideshow 2 child comments
  • [–] 10 points 9 months ago

    Even searching for someone obsessively online and being a little TOO interested in them online is cyberstalking.

    The line there is different than in off-line settings, but it does exist. Someone who is a fan of an entertainer and likes all of their online posts is one thing, but a person who has plans that involve harassment is something else.

  • source
  • parent
  • [–] 42 points 9 months ago (14 children)

    Honestly if a car has any form of internet connectivity built in, it should raise so many red flags before you even sit down to talk financing.

  • source
  • hideshow 14 child comments
  • [–] 36 points 9 months ago (8 children)

    Good luck finding a modern car that doesn't, I just yank out the power to the modem

  • source
  • parent
  • hideshow 8 child comments
  • [–] 3 points 9 months ago (2 children)

    I wouldn't mind doing this on my vehicle. Elaborate?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 9 months ago (3 children)

    my rates do seem high. I had a wreck a few years back but it was a dented door and fixed just fine. I work from home so I dont drive all that much, and the car is cheap. But it does have telemetry. I wonder if I should just bridge a resistor across the onstar antenna terminals

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 9 months ago (2 children)

    Casually reading, you could put a 50ohm or larger resistor there.

    You will have a better result removing/disabling the module completely. There are several searchable tutorials based on the vehicle module.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 9 months ago (1 child)

    Yes but if it ever goes into the shop a software update can teach it to misbehave when things are disconnected. An artificially weak signal, on the other hand, would fall under a practical failure mode they would have accommodated for in firmware.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 9 points 9 months ago (4 children)

    So, OnStar, for decades now, has had cellular activity whether you were paying for it or not. They just used to be careful about not selling data. But even if the user didn't pay and the manufacturer didn't sell, those models are trackable by ISP.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 9 months ago (3 children)
  • [–] 1 point 9 months ago (2 children)
  • [–] 24 points 9 months ago (2 children)

    Next: Insurance premiums rise if you cannot be tracked and verified to be a safe driver.

  • source
  • hideshow 2 child comments
  • [–] 22 points 9 months ago (2 children)

    There won't just be an "AI" bubble burst if this surveillance tech bros crap goes on for too much longer. Everyone wants to be an overlord. No one just wants to make a reasonable healthy profit anymore.

  • source
  • hideshow 2 child comments
  • [–] 8 points 9 months ago

    It's because high constant profits were never sustainable. Perpetually maximizing GDP in the short term was never a good idea to begin with. But that's the macroeconomic policy.

    We've been preventing all forest fires at all costs and guess what - there's still gonna be a big forest fire.

  • source
  • parent
  • [–] 4 points 9 months ago

    Yes they do. The issue is that people won’t really tell each other about products and business that are doing that. They won’t boycott the bad shit, either. That goes for everyone… BMW, IBM, and BOSS are still around and that’s the tip of the list.

    In order to get seen you got to pay those people that want to be an overlord.

    So you see the issue.

  • source
  • parent
  • load more comments
    view more: next ›
    10 comments in c/news@lemmy.world view that post
    10 comments in c/cars@lemmy.world view that post
    8 comments in c/automotive@discuss.tchncs.de view that post