From 38c3

https://reynardsec.com/en/volkswagens-bad-streak-we-know-whe...

"The data, which includes detailed location information and even vehicle owner details, was left exposed and unprotected on the internet for an extended period of time."

Wir wissen wo dein Auto steht Volksdaten von Volkswagen

https://media.ccc.de/v/38c3-wir-wissen-wo-dein-auto-steht-vo...

>VW was also bound by emission standards, yet Dieselgate still happened.

Sure, but it is not like they just got away with that (ironically other manufacturers who did essentially the same thing, did mostly get away with it).

>I would be very surprised if it didn't have some kind of "heavily-restricted debugging interface, only available to select VW engineers, which provides a limited set of fully anonymous vehicle diagnostic metrics" - which in practice is of course used to sell trivially deanonymizable data to anyone with a few bucks to spare.

The GDPR allows you to receive a copy of all data a manufacturer has about you, "trivially deanonymizable" is by any reasonable interpretation of the GDPR personal data. Of course you can believe that VW and other manufacturers are secretly ignoring laws (again) and of course evidence for that would be hard to come by, but it it did come out it would be a massive scandal, with a massive criminal investigation.

In general, do you want to have minimal laws protecting your privacy and manufacturers blatantly not caring about existing laws and individuals having no recourse or do you want strict laws protecting your privacy with manufacturers facing heavy sanctions, when they ignore those laws? The choice seems pretty clear.

Dieselgate essentially happened due to the interaction of the EU and US emission standards. EU emission standard got lowered until it wasn't physically possible, without reducing the machine power, which the market doesn't want. Thus, they introduced test mode, which does have the emissions actually allowed, but is worse in all other aspects. This worked in the EU, because the tests environment is defined and no other tests are performed.

The US regulators wouldn't have cared about higher emission levels as all cars in the US have them anyway, but the cars were still introduced with the EU specs. First because otherwise they would need to remeasure all the car emissions and second, because even as the real emissions would still be low by US standards that would have questions why the same car has different emissions in EU and US. That plan however didn't work out, as the US doesn't do tests in a controlled environment, but while actually driving. Thus, the scandal started becoming public. That is the official part.

The following comes from an "industrial expert", that held a guest lecture at our university: This whole thing was actually done with knowledge (and silent agreement) of the EU regulators, as they aren't dumb and know what is physically possible. However they were still forced to act once this became public in the US, as the politicians and the general voter don't like regulators doing there own thing against the law. Also this was done by a VW supplier, which is basically the only shop in town, so of course this wasn't specific to VW.

So in my opinion, blaming VW, while legally correct, is actually kind of dumb. At last a bit anecdotal evidence: We also did the update for our car. Of course we tried to delay it, but eventually the car would have lost it's street legality, so we needed to do it. And afterwards the car is louder, has visible emissions and smells (more). (No, this isn't even a car from VW or any other company of the same business group.) Thanks. Sometimes the best option would have been to just keep quite and stick to gentlemen agreements.

I've done this on a W222, a W223, a continental GT and an Urus. On each of those cars it was as easy as disconnecting the antenna, on none of them did I have to tear into the roof pillars.

I've never seen an antenna that was difficult to disconnect, on the super simple end you have something like the W222 where you can literally just pop out the antenna cover on the roof and just remove the antenna module inside.

>But this is usually not without consequences as well such as a perpetual error code display or the radio, navigation or entertainment functions stop working.

Well sure, I do have cars without GPS because I was lazy. Carplay still works fine, so can't really bother to do anything about it.

> If you had tried, you would know that there is no fuse dedicated to "network connectivity".

Depends on the car. On modern Fords, it’s the TCU fuse.

> What I have seen done is to tear into the right roof pillar and cut the wires going to the antenna on the roof

Nonsense. Only a fool would do this, rather than simply disconnecting the antennas from the back of the module.

Manufacturers almost universally use FAKRA connectors for quick and error-free assembly on the production line.