Slashdot Mirror
Nissan LEAF Leaks Speed & Location To RSS Feed
thecarchik writes "An intrepid tinkerer has discovered yet another security issue with the Nissan Leaf: it could be revealing your location and speed to websites around the globe. The issue stems from CARWINGS, the telematics system that Nissan devised for the Leaf. '... when Leaf owners use Nissan's RSS reader to access sites like CNN, the New York Times, or this one, CARWINGS supplies ... the exact location of the vehicle — latitude and longitude — and even the speed at which the vehicle is traveling at the time of the request.'"
"xxxxxxxx is going 95mph while reading CNN. He is at xxxxx,xxxxx. Wonderful!
So Nissan's LEAF is just a driveable iOS device? ;-)
Porn site RSS log:
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 40 mph
speed: 60 mph
speed: 100 mph
speed: 0 mph
connection lost
Life isn't like a box of chocolates. It's more like a jar of jalapenos. What you do today, might burn your ass tomorrow.
the exact location of the vehicle â" latitude and longitude â" and even the speed at which the vehicle is traveling at the time of the request.
Heisenberg says NEIN!
AntiFA: An abbreviation for Anti First Amendment.
This is a random question, but I can't find the answer so I figured someone here might know:
What is the Leaf's gasoline MPG? Not the combined MPG, but the MPG if the battery was completely dead and you ran the car on gasoline power?
I own a Honda Insight (70MPG) and have driven the Civic Hybrid (51mpg), which are basically pure gasoline cars (no EV mode), so I'm curious how the leaf compares.
My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
Why is a car reading RSS feeds?
Where's the leak? According to the data I see in the article this feature looks like it's specifically designed in. It's not "leaking" anything, it's specifically disseminating that information.
"Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
Ok here is my question, why on earth does a car have an RSS reader? I thought the idea was to avoid crashes and avoid driver distraction?
"You can't make a race horse of a pig"
"No," said Samuel, "but you can make very fast pig"
to protect against the increasingly likely future that your car will routinely spy on you, either through simple complacency, or outright legislation.
Probably to allow RSS feeds specific to your journey - for example 'travel issues affecting my journey', or 'coffee shops en route'.
The oversight is that it isn't asking before sending that information.
The LEAF has a SIM card to do its stuff wirelessly. What happens if you take the SIM out? Will it just queue up all the tracking info and upload it as soon as it gets reconnected, or is it a shoot-and-forget thing where the local copy gets binned regardless of if the transmission was successful or not?
I've been looking at the LEAF (and Tesla's line-up, yes I know the prices are vastly different, that's not an issue for me) and the whole "phone home" thing is a deal-breaker. I won't buy a car with OnStar or the equivalent unless I can be 100% sure that it is disabled. I don't need that level of hand-holding and I won't spend my money in support of such a product unless it has a 100% provable "off switch."
When information is power, privacy is freedom.
It is a feature.
The three laws of thermodynamics:(1) You can't win. (2) You can't break even. (3) You can't even quit.
And the vehicle NAV screen displays an annoying message EVERY SINGLE TIME you start the car, explaining that it will be transmitting your location data and requires you to press a button on the screen to "agree" or "disagree." I assume if you disagree it won't send anything.
I appreciate my 72 Ford F100 more every day. Thank God I work from home and only need it to haul things every once ina while. Yes, the mileage is hideous, but being able to wrench around on it without a batcave of scopes an electronics as well as the lack of tracking/gps/logs etc is priceless.
Nissan should seriously consider a package without the GSM radio, carwings..etc... some people who would otherwise purchase a leaf may be disinclined to do so due to all the creepy unecessary features.
But they probably make at least a 50% profit margin on those 'creepy unnecessary features'.
I don't want to "compare my mileage against that of other Leaf owners". What is this, the 8th grade locker room? No idea what information about the speed of your vehicle could be used for?
My sister is considering a Leaf, so I've been reading up on it. In a nutshell, all this 'telematics' is about crowdsourcing performance data on the car, so Nissan (and others) can get an accurate sense of battery life and other performance factors under a variety of conditions over the lifespan of the vehicles. So someone in Quebec can know that "At -5C with a 68% charge on batteries that have cycled 376 times the Leaf will go for 65 kilometers at 110 kph." (Sorry I'm too lazy to convert those to imperial units. Virtually no one uses Imperial any more anyway.)
They will learn who is charging with 110V, who is on 240, how often charges happen... on and on.
Over time, with more and more owners participating, Nissan gets a pool of data that can help improve the car, tweak the computer software etc.
Like putting a swimming pool in your backyard, adding a feature that attracts one customer but drives away another gives you net zero increase in resale price.
One could spoof Carwings as a Nissan Leaf doing laps around all police stations at Mach 0.99. Sweet. And that'll play hell with the platinum ratings, especially as the battery condition will be charging instead of discharging.
Sounds like a sales person add on to me. "Built in Lo-Jack technology!"
So I can insert an Google Analytics script and track where my card is heading? Good! Maybe I can make a conversion when I goes to a cool place.
http://www.michel.eti.br