汽车就是装在轮子上的智能手机。是谁在听?
Automatic Transmission – a data-privacy study of connected vehicles

原始链接: https://automatictransmission.khoury.northeastern.edu/index.html

《消费者报告》及其合作伙伴审视了联网汽车的隐私影响。这些汽车通过 Wi-Fi、蜂窝网络和 GPS 收集并分享位置、身份及驾驶数据。他们测试了 21 款较新型号的汽车和 30 款配套移动应用,发现 19 款汽车至少与一家第三方进行了通信,7 款应用向外部公司传输了敏感标识信息。车辆系统和应用经常联系广告商及数据追踪机构。研究人员审阅了制造商的披露内容和相关观点后,强调需要提高透明度、开展独立测试,并持续审查联网汽车的数据处理 practices。

《The Hacker News》上的讨论主要围绕东北大学的《Automatic Transmission》研究展开。该研究发现,联网汽车可以将位置信息、驾驶行为以及持久标识符传输给汽车制造商、数据经纪公司、保险公司和其他第三方。即使车辆提供了隐私设置,相关退出选项也可能隐藏在深处、需要用户反复操作,或者与失去导航、应用和远程功能挂钩。 评论者对薄弱的同意机制、数据出售、保险激励以及网络安全风险感到不满,不过也有人承认联网汽车可能带来安全方面的益处。常见的建议是购买较老、未联网的车辆,或者通过移除保险丝来禁用蜂窝调制解调器。另一些人则提醒,阻止数据传输并不能阻止车辆在本地记录数据,而且经销商进行维修保养时可能会上传车辆中存储的数据。 争论主要集中在消费者责任与更强监管之间、维修权法律、永久退出机制,以及开放或模块化的车辆硬件。几个人担心,拒绝共享数据可能会导致更高的保险费率。有人提到,Slate 可能是一种更注重隐私且易于维修的替代选择,但其遥测能力仍受到审查。
相关文章

原文

The first large-scale measurement study of the connected-vehicle ecosystem.

A connected car is a vehicle with built-in internet access — Wi-Fi, cellular, GPS — that lets it communicate constantly with its manufacturer and outside companies. Over 75% of vehicles sold globally have this connectity built-in.

A connected vehicle

Photo is not loadingimages/connected-car.jpg

It knows where you drive.

It knows who you are.

It can share this data and more with insurance companies, advertisers, etc...

Report Summary

Partnering with Consumer Reports, we tested 21 late model vehicles and 30 companion mobile apps to understand the privacy implications of the connected vehicle ecosystem.


  • 01We find that both vehicles and companion apps contact numerous third-party domains, including advertisers and trackers.
  • 0219/21 vehicles tested send traffic to at least one third party
  • 03Seven of 30 apps transmit sensitive identifiers to third-party companies

We go through a lengthy discolure process and provide insight into how manufacturer's perceive this data sharing issue.
Our findings underscore the need for continued measurement and scrutiny of the connected vehicle ecosystem.

联系我们 contact @ memedata.com