• mctoasterson@reddthat.com
    link
    fedilink
    English
    arrow-up
    67
    ·
    16 hours ago

    Yeah… fuck this shit. This is part of the reason I still drive a nearly 20 year old vehicle. It has features I want, and can’t be stolen via fucking API calls. Absolute insanity.

    I think Hyundai/Kia group has done unfathomable damage to their brands. Kia, despite being a budget brand, wants to be seen as a legit competitor to Toyota or at least Nissan. Their corner cutting with the immobilizers and the resulting “USB” theft shit was bad enough. Now this exploit.

    • chakan2@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      1
      ·
      8 hours ago

      They’re just terrible cars. I’ve had two…they were great until they weren’t. I literally had a screw fall out of the headliner the other day bringing it home from a nearly 1000$ exhaust patch/repair. It’s not 10 years old yet and only has 60k miles.

      The other one has had the engine replaced already (under warranty thank god).

      We are likely replacing both of them next year. I’m never buying a Kia again.

      • chemicalprophet@lemm.ee
        link
        fedilink
        English
        arrow-up
        2
        ·
        24 minutes ago

        My Toyota with 300k+ miles has cost me $285 in repairs minus maintenance costs. I’ll likely get at least another 100k. Just placing these goalposts here…

      • AngryCommieKender@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        1
        ·
        edit-2
        3 hours ago

        I’m so sad GM killed SAAB. Only decent cars left are Volvo and Subaru. I just wish someone would mass produce a manual transmission EV.

        • chakan2@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          ·
          2 hours ago

          Uh…what? How does a manual transmission work on a direct drive motor?

          (And if you really want to do that, drop an electric crate engine in an 80s muscle car. I’m strongly considering it)

          • AngryCommieKender@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            edit-2
            2 hours ago

            Don’t apply physics to a wishlist. That’s not how wishing works. I’m aware it’s not possible, but stick shift is just fun to drive.

            For me it would be a 1986 SAAB 900 SPG

            • Letme@lemmy.world
              link
              fedilink
              English
              arrow-up
              4
              ·
              2 hours ago

              Of course it’s possible, electric conversion kits have been around for decades, and only work with manual transmissions. We just need the battery and charging tech applied to conversion kits. Who wants to start up an EV conversion kit company with me?

              • Zron@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                2 hours ago

                I would love to convert my car to an electric, but it’s an automatic so I’d have to spend as much as a new car to convert it.

                A drop in ECU replacement and motor/battery would be great, but I doubt the auto industry or the government is going to allow the sale of third party drop in ECUs.

                • chakan2@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  2 minutes ago

                  Actually, they do allow (in the US) in an 80’s car. A lot of the regulations around that sort of thing are very relaxed for classics.

    • Echo Dot
      link
      fedilink
      English
      arrow-up
      4
      ·
      5 hours ago

      I wish, but most people don’t know / care about this stuff, it’s not going to really percolate into the public consciousness .

      According to the dealership my car isn’t worth it’s weight grass clippings because it’s too old.

      • Dran@lemmy.world
        link
        fedilink
        English
        arrow-up
        44
        ·
        16 hours ago

        Just because you can’t use it doesn’t mean a hacker can’t. If someone discovered a vulnerability in the 3g handshake or encryption protocol, it could be an avenue for an RCE.

        • Scott@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          6
          ·
          5 hours ago

          Honestly if someone manages to figure that out I would want to know, that way I can finally use my cars remote start 😄

        • Rubanski@lemm.ee
          link
          fedilink
          English
          arrow-up
          7
          ·
          9 hours ago

          Especially when there are no security updates anymore. They should just rip out any possible receiver there is for mobile communication

      • this_1_is_mine@lemmy.world
        link
        fedilink
        English
        arrow-up
        36
        arrow-down
        1
        ·
        18 hours ago

        Cool just like trying to replace a blower motor in a modern car feel free to rip the entire dash out only to find out it has a second antenna all the way in the back underneath the spare tire also behind a tail light which somehow requires you to remove the muffler to get to…

      • parpol@programming.dev
        link
        fedilink
        English
        arrow-up
        11
        arrow-down
        2
        ·
        18 hours ago

        You’d probably have more luck installing a signal jammer in your car.

        The best you can hope for is a rootkit and some Linux-based OS for cars to be developed so you can take full control.

  • JohnWorks@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    23
    ·
    17 hours ago

    I’ve noticed a lot of issues showing up for the Kia and Hyundai cars security wise. I wonder if they’re having issues because there’s more focus on those cars or if their security is really that bad.

    • mosiacmango@lemm.ee
      link
      fedilink
      English
      arrow-up
      27
      ·
      edit-2
      14 hours ago

      The Kia/Hyundai “challenge” where people were stealing their cars with a USB cord is because they opted not to include an immobilizer in US models for a decade. Every other car brand had them as standard. Kia even had them as standard in non US cars, but because the USA stupidly does not have a law about it, they opted to drastically reduce car security to save a few dollars per car.

      This has made them prime targets, as people know they make bad security choices whenever they can save a buck.

      So a bit of both, I expect.

    • ravhall@discuss.online
      link
      fedilink
      English
      arrow-up
      9
      ·
      17 hours ago

      Both probably. I’m sure a lot of cars have problems like this, but they just haven’t been found and there are already known vulnerabilities to focus on.

  • penquin@lemm.ee
    link
    fedilink
    English
    arrow-up
    37
    arrow-down
    2
    ·
    19 hours ago

    Let the fucking hacking begin. Fuck these assholes. They are milking people out of their last penny, and on top of that they’re selling people’s driving data to data brokers who sell it to insurance companies that jack up prices.

  • Ilovethebomb@lemm.ee
    link
    fedilink
    English
    arrow-up
    48
    arrow-down
    4
    ·
    20 hours ago

    There’s just no good reason to have anything beyond the radio/nav etc in a car connected to the Internet. Remote start can be done with just the key.

    • Semi-Hemi-Lemmygod@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 hour ago

      I would say even those don’t need Internet. Navigation can be updated using a USB drive, and I have a phone for audio so I just need bluetooth.

      The only network connection I want in my car is to notify emergency services if the airbags go off.

    • Frog@lemmy.ca
      link
      fedilink
      English
      arrow-up
      58
      ·
      19 hours ago

      You know what fuck builtin nav. Connect it to my phone and let that be it for navigation.

      • christopher@lemmy.ca
        link
        fedilink
        English
        arrow-up
        5
        ·
        3 hours ago

        Plus if you use your phone for nav you can use whatever maps you like. My city is mapped pretty good on openstreetmap so that’s what I use.

        • Revan343@lemmy.ca
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 hour ago

          I like using the built in radio rather than my phone for music, but it doesn’t need an internet connection, just a flash drive.

          I suppose I’m a weirdo for not using Spotify like most people nowadays though

    • kinkles@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      14
      ·
      edit-2
      20 hours ago

      That’s a very subjective take. My friends and family that live in hot climates love the ability to remotely turn on and pre-cool their vehicles. I appreciate being able to check if I remembered to lock the doors.

      • Slowy@lemmy.world
        link
        fedilink
        English
        arrow-up
        37
        arrow-down
        3
        ·
        19 hours ago

        Both of those functions have been available via key fob for at least a decade, no internet required. Though yes the range on that can be limited.

        • kinkles@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          10
          arrow-down
          2
          ·
          19 hours ago

          Thats precisely what I’m referring to- these things being possible when you’re inside of a store, restaurant, or an extreme case like you parked at the airport for a trip.

      • penquin@lemm.ee
        link
        fedilink
        English
        arrow-up
        18
        arrow-down
        1
        ·
        19 hours ago

        And by using that internet connected feature you’re 100% handing out your driving info to your car manufacturer, who in turn will sell it to LexisNexis, who in turn will sell it to insurance companies, who in turn will jack up your insurance prices.

        • kinkles@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          7
          arrow-down
          3
          ·
          edit-2
          19 hours ago

          Sure, that sucks. But I’m not saying there are zero downsides, I’m specifically countering the argument that there are “no good reasons” with my personal good reasons.

          • WhyJiffie@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            4
            arrow-down
            2
            ·
            9 hours ago

            it really depends whether that counts as a good reason. for us the downsides highly outweigh the upsides.
            and yes, I know what it’s like to sit in a hot car when I just got back to it on the hot summer day. but I can really wait 2 minutes outside the car when it’s that bad

            • penquin@lemm.ee
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              3
              ·
              9 hours ago

              Man, I’ll never understand this “car is too hot for me to sit in” to be honest. Lmao. Sounds to me like people are too spoiled and this is something kids say. Come one, you really think of this is as an issue? I don’t even have an ac in my car. It broke over 4 years ago and I never fixed it. But for each their own I guess.

              • helenslunch@feddit.nl
                link
                fedilink
                English
                arrow-up
                2
                ·
                3 hours ago

                Man, I’ll never understand this “car is too hot for me to sit in” to be honest.

                Probably because you don’t live in a hot climate?

                The interior of a car here can get up to 150 degrees. And the bits and bobs inside can get even hotter. I’ve gotten second degree burns from the seatbelt.

                Now imagine you’re out exercising for 3 hours in 107 degree heat. Or working for 6-8 hours in it. Getting in that car might literally kill you.

                • penquin@lemm.ee
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  edit-2
                  2 hours ago

                  LOL. I don’t live in a hot climate? How about the middle east? Does that sound hot enough? I grew up living in a tent. A literal tent until I was about 20, then my father decided to build a house. Then that house had no power until 2008. And our weather there can get to 130+ easily. So, imagine that heat. Imagine how getting into a car would feel. Here is a photo I took of a thermometer I took in June of 2009. It was around 1 pm. I was on a military base that day. It won’t kill you, you will be fine. Open your windows and wait outside a little so you don’t melt. lol

      • Ilovethebomb@lemm.ee
        link
        fedilink
        English
        arrow-up
        8
        arrow-down
        1
        ·
        19 hours ago

        As I said in my comment, that can be done with the key, no Internet connection needed.

        As for the lock thing, I just need to look if my mirrors are folded in or not.

        • kinkles@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          2
          ·
          19 hours ago

          The fob won’t work if you’re deep inside a store, will it? Same for checking the mirrors.

          • socphoenix@midwest.social
            link
            fedilink
            English
            arrow-up
            14
            arrow-down
            2
            ·
            19 hours ago

            A) you can survive without precooling or set it to start before getting deep into the store.

            B)if you want that feature fine, but leave it off everyone else’s car! No cell connections should be installed by default like this. It’s a walking cve list waiting to happen.

    • helenslunch@feddit.nl
      link
      fedilink
      English
      arrow-up
      13
      arrow-down
      14
      ·
      20 hours ago

      I mean, there are plenty of very good reasons.

      My car reminds me if the doors are unlocked or left open. I can adjust the charging speed at any time. I can turn on the HVAC and seat heaters before I leave. I can see my current state of charge. I can see exactly what is happening when my alarm goes off. I can see exactly where it is if it’s stolen. Etc.

      You can argue that those are not important to you, personally but I don’t think you can argue that they aren’t good reasons.

      I think there are certainly other wireless technologies that are superior in many ways and can supplement or replace the need for internet access in your immediate area.

      • corsicanguppy@lemmy.ca
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        1
        ·
        5 hours ago

        You can argue that those are not important to you, personally but I don’t think you can argue that they aren’t good reasons.

        These sound like “value-add module purchased at or after time of sale” reasons.

        In short, they’re features and not requirements.

      • WhyJiffie@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        4
        ·
        edit-2
        9 hours ago

        frankly they aren’t good reasons.

        the first bunch provides info and abilities that are only relevant when you are in the car. this is like wanting to know your house’s temperature when you are in the store, or on vacation. what the fuck you do with that information?

        the remaining about the alarm and it being stolen, what are you going to do with this? go after them with your 4th car and a shotgun? let’s hope they did not disconnect the batteries…

        if you absolutely cannot live without these, you should by an extension that does this, instead of forcing this shit on everyone

        • helenslunch@feddit.nl
          link
          fedilink
          English
          arrow-up
          1
          ·
          4 hours ago

          what the fuck you do with that information?

          I don’t know what “the first bunch” is so I can’t answer that but these are all definitely use while away from the car.

          the remaining about the alarm and it being stolen, what are you going to do with this?

          Is that a real question? You’re going to figure out why your alarm is going off, and if it’s stolen you’re going to give it to the police so they can recover it…

          if you absolutely cannot live without these, you should by an extension that does this

          I dunno what an “extension” is but pretty sure it doesn’t exist or can’t do these things.

      • Slatlun@lemmy.ml
        link
        fedilink
        English
        arrow-up
        22
        arrow-down
        3
        ·
        20 hours ago

        I think the point is that there isn’t a good enough reason to put internet in a car that negates the risk of it.

        It is like adding lead to food. It’s a cheap sweetener with no calories. You can argue that cheap sweeteners aren’t important to you, but I don’t think you can argue that it isn’t a good reason. It just isn’t a good enough reason to negate the risk.

        • helenslunch@feddit.nl
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          3
          ·
          17 hours ago

          I think the point is that there isn’t a good enough reason

          OK but that’s not what they said.

            • helenslunch@feddit.nl
              link
              fedilink
              English
              arrow-up
              2
              ·
              edit-2
              3 hours ago

              “Not good enough” = not important to you

              “no good reason” = the benefits dont exist.

              These are not the same.

            • helenslunch@feddit.nl
              link
              fedilink
              English
              arrow-up
              4
              ·
              4 hours ago

              Lol, okay. Which one?

              LOL literally all of them, unless you’re standing near the car.

              Remember that car manufacturers have the ability to put a SIM card in cars.

              …and they do. That SIM card is useless without internet…

            • helenslunch@feddit.nl
              link
              fedilink
              English
              arrow-up
              3
              ·
              4 hours ago

              LOL okay, maybe you’d like to share with the class how any of this works without internet while you’re not near the car?

              Or would you just like to insist over and over that it doesn’t while refusing to explain?