We know where your car is

TDLR: The data was held by VW subsidiary Cariad. The location data was available for Volkswagen 460,000 vehicles in Amazon cloud. It was 300.000 cars in Germany, 80,000 in Norway, 70,000 in Sweden, 60,000 in the UK, 61,000 in the Netherlands, 50000 in France, etc

GPS car data was used to find a crossbow killer in the UK few years ago.<p>The killer torched the car but the car had already uploaded GPS and black box data.<p><a href="https:&#x2F;&#x2F;www.bbc.co.uk&#x2F;news&#x2F;uk-wales-65985341" rel="nofollow">https:&#x2F;&#x2F;www.bbc.co.uk&#x2F;news&#x2F;uk-wales-65985341</a><p>I recommend the referenced podcast there, the whole story is crazy.

You can watch the recording of the presentation at <a href="https:&#x2F;&#x2F;media.ccc.de&#x2F;v&#x2F;38c3-wir-wissen-wo-dein-auto-steht-volksdaten-von-volkswagen" rel="nofollow">https:&#x2F;&#x2F;media.ccc.de&#x2F;v&#x2F;38c3-wir-wissen-wo-dein-auto-steht-vo...</a> , including with translated audio tracks (!)

That level of telemetry-upload used to be easy enough to disable as there was a physical SIM card (usually in the glovebox); without that there was no remote connection. But I suspect it&#x27;s a lot harder now, thanks to eSIMs etc.

This isn&#x27;t the only way they know where you are. WAMI systems[1] are rumored to be deployed worldwide by many 3 letter agencies. (Much in the same way general surveillance of the public was rumored before Snowden&#x27;s revelations)<p>[1] <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Wide-area_motion_imagery" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Wide-area_motion_imagery</a>

Is this another instance of &quot;my external contractors need access my data but I cannot ask them to install an authenticator app on their BYOD mobiles&quot;... Nor manage proper authentication for my randomly built BI suite?

Privacy doesn&#x27;t exist in this 21st century.

It&#x27;s scary how surveillant car companies now. Next thing you know, the companies will track what you do in your car.

I&#x27;m so sick of everyone frivolously requiring mobile phone number and email address and there doesn&#x27;t seem to exist much resistance from general user base.

Rmeinds me of these two tweets by Elon Musk on the Cybertruck explosion at a Trump hotel:<p><a href="https:&#x2F;&#x2F;x.com&#x2F;elonmusk&#x2F;status&#x2F;1874579547452269054" rel="nofollow">https:&#x2F;&#x2F;x.com&#x2F;elonmusk&#x2F;status&#x2F;1874579547452269054</a><p>We have now confirmed that the explosion was caused by very large fireworks and&#x2F;or a bomb carried in the bed of the rented Cybertruck and is unrelated to the vehicle itself.<p>All vehicle telemetry was positive at the time of the explosion.<p><a href="https:&#x2F;&#x2F;x.com&#x2F;elonmusk&#x2F;status&#x2F;1874558969802547611" rel="nofollow">https:&#x2F;&#x2F;x.com&#x2F;elonmusk&#x2F;status&#x2F;1874558969802547611</a><p>The whole Tesla senior team is investigating this matter right now.<p>Will post more information as soon as we learn anything.<p>We’ve never seen anything like this.<p>---<p>It is obvious that car companies have a lot of access to the modern &quot;highly connected&quot; cars they are making. And perhaps also more than what they say officially and are sharing with authorities under normal circumstances.

Was it in an S3 bucket?

(de)