Nissan LEAF Leaks Speed & Location To RSS Feed
thecarchik writes "An intrepid tinkerer has discovered yet another security issue with the Nissan Leaf: it could be revealing your location and speed to websites around the globe. The issue stems from CARWINGS, the telematics system that Nissan devised for the Leaf. '... when Leaf owners use Nissan's RSS reader to access sites like CNN, the New York Times, or this one, CARWINGS supplies ... the exact location of the vehicle — latitude and longitude — and even the speed at which the vehicle is traveling at the time of the request.'"
At least tow trucks will have your precise location when the battery runs out.
"xxxxxxxx is going 95mph while reading CNN. He is at xxxxx,xxxxx. Wonderful!
So Nissan's LEAF is just a driveable iOS device? ;-)
Porn site RSS log:
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 100 mph
speed: 0 mph
connection lost
Life isn't like a box of chocolates. It's more like a jar of jalapenos. What you do today, might burn your ass tomorrow.
the exact location of the vehicle â" latitude and longitude â" and even the speed at which the vehicle is traveling at the time of the request.
Heisenberg says NEIN!
AntiFA: An abbreviation for Anti First Amendment.
This is a random question, but I can't find the answer so I figured someone here might know:
What is the Leaf's gasoline MPG? Not the combined MPG, but the MPG if the battery was completely dead and you ran the car on gasoline power?
I own a Honda Insight (70MPG) and have driven the Civic Hybrid (51mpg), which are basically pure gasoline cars (no EV mode), so I'm curious how the leaf compares.
My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
Why is a car reading RSS feeds?
Where's the leak? According to the data I see in the article this feature looks like it's specifically designed in. It's not "leaking" anything, it's specifically disseminating that information.
"Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
Ok here is my question, why on earth does a car have an RSS reader? I thought the idea was to avoid crashes and avoid driver distraction?
"You can't make a race horse of a pig"
"No," said Samuel, "but you can make very fast pig"
Good thing US Robotics is out of business.
to protect against the increasingly likely future that your car will routinely spy on you, either through simple complacency, or outright legislation.
Probably to allow RSS feeds specific to your journey - for example 'travel issues affecting my journey', or 'coffee shops en route'.
The oversight is that it isn't asking before sending that information.
The LEAF has a SIM card to do its stuff wirelessly. What happens if you take the SIM out? Will it just queue up all the tracking info and upload it as soon as it gets reconnected, or is it a shoot-and-forget thing where the local copy gets binned regardless of if the transmission was successful or not?
I've been looking at the LEAF (and Tesla's line-up, yes I know the prices are vastly different, that's not an issue for me) and the whole "phone home" thing is a deal-breaker. I won't buy a car with OnStar or the equivalent unless I can be 100% sure that it is disabled. I don't need that level of hand-holding and I won't spend my money in support of such a product unless it has a 100% provable "off switch."
When information is power, privacy is freedom.
Yeah, this has nothing to do with all the government funds Nissan has received in the last few years. About 2 years ago they got a big infusion.
It's just a backhanded way to track you and Nissan can just say "oopsie, didn't mean to do that." Just wait till all that data gets mined. I imagine the bigwigs are jizzing their pants (which will provide great lube for when they jam it up your ass).
It is a feature.
The three laws of thermodynamics:(1) You can't win. (2) You can't break even. (3) You can't even quit.
Nissan should seriously consider a package without the GSM radio, carwings..etc... some people who would otherwise purchase a leaf may be disinclined to do so due to all the creepy unecessary features.
And the vehicle NAV screen displays an annoying message EVERY SINGLE TIME you start the car, explaining that it will be transmitting your location data and requires you to press a button on the screen to "agree" or "disagree." I assume if you disagree it won't send anything.
I appreciate my 72 Ford F100 more every day. Thank God I work from home and only need it to haul things every once ina while. Yes, the mileage is hideous, but being able to wrench around on it without a batcave of scopes an electronics as well as the lack of tracking/gps/logs etc is priceless.
"as far as we can tell, there's no way to turn the feature off"
How about reaching under the fscking dashboard and unplugging the whole thing?
1. I don't want news feeds. Doesn't it come with a freakin radio?
2. I don't want to "compare my mileage against that of other Leaf owners". What is this, the 8th grade locker room?
3. No idea what information about the speed of your vehicle could be used for? No comment.
I *want* a Leaf, but I will disable that whole console the first chance I get.
was this done purposely?
Hell, just root the damn thing!
One could spoof Carwings as a Nissan Leaf doing laps around all police stations at Mach 0.99. Sweet. And that'll play hell with the platinum ratings, especially as the battery condition will be charging instead of discharging.
I'm not sure if this is mentioned elsewhere, but the Telematics system is designed to continually publish your vehicles location and speed so that if the airbag goes off, the emergency services know exactly where it happened and can respond more quickly and accurately.
Without looking into this more deeply, it sounds like Nissan is using this existing data connection to get RSS feeds (probably for traffic updates), but really the Telematics system should be isolated from that.
All this data theft is carried out by corporations wanting every last detail of your life so they can charge you more for it. And by fascist dictatorships who want to stop you doing things you want to do. Anyhow, Steve Jobs is a socialist by your definition. Are you SURE you really meant to say that here?
Hmmmmmm????
So, it can be used to listen in on cars too, just like in China?
Sounds like a sales person add on to me. "Built in Lo-Jack technology!"
Great info, thank you http://exercisesto-reducetummy.com/articles/flatten-stomach/
So I can insert an Google Analytics script and track where my card is heading? Good! Maybe I can make a conversion when I goes to a cool place.
http://www.michel.eti.br