GMC to Begin Remotely Scanning Cars for Trouble

Momoru writes "GMC, in an effort to give their vehicles more appeal to consumers, will begin offering an "OnStar Vehicle Diagnostics" program for free, where GM will remotely scan your vehicle for problems once a month via it's OnStar system. GM has had this ability for a while, however it was always "On Request". OnStar is already automatically notified in the event of an airbag deployment, and can remotely unlock your vehicle. While this seems handy, I am interested if anyone here fears the security implications of the OnStar system's power?"

Comments

Onstar is easy to disable.

[TodLiebeck]

Onstar is easy to disable (pull a fuse) and doing so has no ill effects as far as I can tell from first-hand experience. Once the fuse was reinstalled the system continued to function as before. A description of which fuse must be pulled can be found here:

http://www.hypertech-inc.com/install_instructions/ pp4/pp4pg2.html

Onstar uses cellular networks to phone home

[Whizzmo2]

http://www.onstar.com/us_english/jsp/explore/onsta r_basics/technology.jsp

From the linked article (bold emphasis mine):

Telematics is the transmission of data communications between systems and devices. OnStar's in-vehicle safety, security, and information services use Global Positioning System (GPS) satellite and cellular technology to link the vehicle and driver to the OnStar Center.

From the images on the linked page, the cellular antenna appears to be mounted at the top-rear of the vehicle.

"Scanning" is a bit more than it actually is.

[Otto]

The OnStar system interfaces to the data bus of the various computer modules in the car. What this is actually doing is what's often called "reading the trouble codes".

It's the same thing you can do with a $50 tool from AutoZone. Any time a problem is detected by the computer, it throws up a code. Some of these codes cause the SES light to come on, some don't. An ODBII scanner plugs in behind the dash and reads these codes from the computer modules, then displays them. Usually in a nicer to read format.

That's all this is doing. They call the OnStar system in the car, tell it to read the codes, and send it back to them. While it's possible for them to send other commands, there's really not much in it for them to do so. You can do some unusual things via that interface (I could have endless fun sticking your car into diagnostic mode and triggering the windshield wipers to run a test cycle), but you can't get back a whole lot of information that they don't already have. VIN, info on the car components, maybe miles travelled and such, but nothing that I would consider crucial to "privacy".

You could figure out MPG and average speed, but hell, I speed all the time and my computer system says my average is only around 40-ish. Instantaneous speed couldn't be gotten from the car via this interface.

Of course, they don't need the car to get that info. OnStar systems have a GPS built in, and that will give them instantaneous speed. But that doesn't require them talking to the car to do it.

Re:yes but it's OPT-IN

[Jah-Wren Ryel]

okay folks repeat after me. ON-star is a service the user signs up and pays for. it is not forced on you. there are no privacy issues,

FALSE

OnStar is both a package of remote telematics equipment included in the base configuration of many GM vehicles AND a subscription service that makes use of the remote telematics equipment.

Here's the key part - even if you do not subscribe, the equipment is still in the car and functional. It can be turned on at a moments notice without the consent or even knowledge of the vehicle's owner.

GM has publically promised to include the OnStar equipment in the base configuration of ALL GM vehicles within a few years.

If you do not understand how such a system can enable extreme abuses of privacy, you must have been living in a cave for the last 200 years.