Hacker News Reader

Comment by deepsun | Hacker News Reader

Why there has been no public car data exposures, like GPS movement data of US public?

If people could see the everyone (like their employer) could see where and how often they go to e.g. medical facilities, they'd be more willing to take care of that.

View on HN

There have been some really serious ones.. going back years.

Dodge/Chrysler U-Connect had a ridiculous vulnerability that allowed getting all the data and even controlling/disabling the car over the internet.

https://www.cisa.gov/news-events/ics-advisories/icsa-15-260-...

Who knows if there are any out in the wild now, cars have gotten way more complex since then.

There have been.

https://www.darkreading.com/cloud/toyota-discloses-decade-lo...

Most people's phones would probably be more lucrative targets as the car location data should just be a subset and isn't necessarily tied to the individual

would they? most people who leave work to go to a medical facility tell work that they left work to go to a medical facility. it's not "most people" that need to worry about that, which means they don't. it's the times when it does matter, that it's an issue, and for people to care, they have to identify with the problem.

Might be bad example, just of top of my head. It's like with security -- one can never prove there's nothing important.

Some other examples I can think of:

1. A future employer may want to filter out women candidates that recently went to a pharmacy, what if they are pregnant?

2. A prospective employer might want to know how often a candidate goes to a liquor store.

And that's only for employer/employee relationships. Location data is a gold mine of private and sensitive data.

Reply on news.ycombinator.com