I think car privacy isn’t talked about amongst any privacy enthusiasts online ever, and it apparently is one of the biggest data collectors out there. For someone like me who values electric cars for there affordability and environmental reasons, but still want physical car buttons and control over my data, how would I go about this?
Volkswagen (VW) had a massive scandal that showed how dangerous this is. By leaking driving behaviour, VW leaked hidden military bases, politicians likely visiting prostitutes and more. Lucky for them ethical hackers (CCC) found that and did not use the data.
Good starting point would be looking up forum or blog posts from people who have disconnected the modem/TCU on a particular EV model. No self-interested auto manufacturer (all of them) would intentionally provide an option in the user interface to take the telemetry system offline. Take note of any side-effects they report, if it needs to be reconnected for inspections, and if there’s any gotchas between software and hardware revisions.
Gladly, it will be years before I can afford a car that doesn’t respect my privacy.
On the technological side of things, you’re pretty much fucked no matter what. Virtually all car companies now have proprietary app integrations, partnerships with Google and Apple, and other anti-privacy features.
Some practical things you can do-
Opt out of as much data collection and sharing as you can. Read the manual and menu dive to disable optional features you don’t need.
If you finance or lease from the dealer, there are likely additional data disclosures and third party sharing that you can opt out of. Read all the paperwork when you sign your purchase or lease documents. In my case I had to literally fill out and mail something in (they don’t want it to be easy to opt-out because they make money from sharing the data with third parties).
Insist on one that doesn’t have all that crap in it
There’s always a trade-off in some way, though. For instance, Toyota is one of the best in regards to keeping physical controls. But they’re basically the worst offender in regards to data privacy. “Insist” is fine on paper, but (unless you’re a millionaire who can afford a custom-built car) you’re inevitably going to have to purchase one on the existing market. And the existing market is all about digital controls and privacy violations.
Saying “just don’t get one that has those things” is a little like saying “just don’t get a house that catches on fire” after a wildfire rips through an area. It’s not exactly up to the customer, and the average person could never hope to afford the custom work that those kinds of requirements would entail.
You can’t! Even if you don’t use the cell phone based connections the car still has its own systems to wirelessly transmit data out.
You could yank the fuses associated with the cellular antennas but they’re attached to other electrical systems you’d want like the radio in every case I’ve experienced.
Also the data will be locally cached and can be collected when serviced or cause strange failures when it fills up the cars storage space. If considerate, smart engineers designed the car, they’d have different actual systems for the ecu, mcu, tcu and what have you but I’ve encountered one electric where it’s all in one.
So that’s scary.
Don’t buy a car made before 2007 and don’t buy an electric unless you know exactly what you’re doing I guess.
Or treat driving like a surveilled activity you partake of in public.
Can’t you just replace the radio? Or is it one of those custom fits
how can I improve my privacy when buying a modern car?
Buy a train ticket with cash? Not guaranteed to be fully “private” in the cyberpunk shithole we live in but presumably more private than a car.
On that note, fuck every transit agency (including TransLink in Vancouver) who make it more expensive to buy tickets with cash compared to a transit card. And especially fuck you if your transit card system is a P3 with the data handled by a private company (again, including TransLink). You’re probably paying the money they thought they could have made selling your commute data to advertisers.
Bonus non privacy related rant: TransLink, the Earth and our decedents also say fuck you for using plastic RFID cards even for single journey tickets that will get promptly thrown in the trash when they expire in 90 minutes instead of a simple piece of paper that can biodegrade. They even waste more resources to wrap the plastic in paper to give the illusion of the ticket being made of paper when it absolutely is not. Yeah make single use microcomputers and antennas why don’t you? Can’t have transit being too eco friendly after all. They’re not futuristic, future generations will curse us for being so barbarically wasteful of precious resources while digging those RFID tickets out of landfills to extract silicon and metal from. Just print QR codes on normal paper tickets for god sake since the RFID cards probably only store a single unique ID that needs to be looked up against a database anyway, or better yet, just have coin slots on the fare gates and skip giving you a ticket altogether. Oh wait, but then they wouldn’t able to know which station you get off at and refuse to let you out until you’ve paid the upcharge for having the audacity to ride a fully automated train system even one station outside your home city.
Train stations have hella cameras
So do roads, and your metal cage literally has a code on a plaque tied directly to your government ID, with a retroreflective background and each character carefully engineered to be machine readable from any angle and lighting. Hell, a good number of the cars you pass have 360 degree camera arrays pointed directly in your windows, or if you spring for a higher end model with all the features, you get the privilege of a camera pointed straight at your face and at your passengers’ faces.
Also, you can cover your face on transit with something like a medical mask and sunglasses. If you try covering your license plate you’ll literally get arrested.
I don’t really care about car privacy myself.
Where I drive to isn’t really a secret, social events are organized on Discord. And if driving recklessly raises my insurance premiums then that’s deserved. I wouldn’t risk something as expensive as a car with privacy hacks.
“I’ve got nothing to hide”
