Serious question: Is anyone making a list of where it may be possible to purchase a *new* car that isn't just spyware on wheels?

BrianKrebs

Probably the only way this gets better is when all these 5G internet connected cars start DDoSing the highway signs, or each other because they're all compromised by some 0day.

BrianKrebs

Heck we've had firewalls in cars since the early days of the automobile. Maybe it's time we added another <ducks>. I mean, your car is constantly receiving updates. Why should this machine be any different?

Adam Stasiniewicz

@briankrebs You can always unplug/cut the cellular and wifi antennas. Since the metal body of the car inhibits radio signals, the antennas tend to be externally mounted and (relatively) easy to access.

cR0w h0 h0

@briankrebs I know it's fairly specific, but as an example of a lesser degree of suckiness, the DCM in the Toyota Tacomas up to 2023 can be disabled by simply removing the fuse. The only negative impact I know of is the loss of the microphone for Bluetooth calls.

Dan Goodin

@briankrebs

Yeah, I plan to hold onto my 2015 Honda Fit for the indefinite future. I see replies in this thread suggesting we disable the modem. I'll bet money that doing so will void multiple warranties so ‍️

moggie

You could learn to ride a motorcycle? As far as I know, they haven't gone all in on collecting data yet.

Or maybe an ebike?

@briankrebs

Zimmie

@briankrebs Factory Five.

Bay of Fires

@briankrebs You could weld a giant faraday cage around it, like those Russian turtle tanks

BrianKrebs

@EverydayMoggie Motorcycles are more fun if you are surrounded by nice, smooth roads

T2R

@briankrebs I've been having this concern for a while as my car is 17yrs old and will need replacing soon and I don't have confidence in all the new cars' "security".

Paul Hoffman

@briankrebs The answers to this question would make a great article, albeit not typical for what you write.

T2R

@briankrebs A pair of wire nippers to cut the antenna.

RootWyrm 🇺🇦:progress:

@briankrebs you literally cannot. (Hi. I'm actually an expert in these systems. I hate it.)
The only way to actually do it, is to physically remove a MINIMUM of 4 separate modules. These modules invariably function share (e.g. infotainment commonly shares with HVAC.) And even after you do that, what you get is a bunch of CANbus errors and a car that refuses to drive.

Tom Bortels

@briankrebs

This is why my "new car" plan is an older VW bus and an EV conversion package.

If someone sells a non-connected "dumb car" - I might reconsider. There's certainly a market.

Fullmetal Manager 🌈💖🔥

@briankrebs *CEOs, the only truly protected class

Brad Rubenstein “:verified:”

This post is deleted!

Brad Rubenstein “:verified:”

For all the suggestions about disabling a new car's spyware access, would the resulting vehicle even be insurable?

I mean, of course you could buy insurance. But I wouldn't be surprised if there were a clause in the fine print that voided claims against a vehicle that had been hacked thusly.

@briankrebs

noplasticshower

@briankrebs and there's this https://youtu.be/_LXKZq0fYDw

Paul_IPv6

@briankrebs

do publish what you find.

i went with "don't get rid of your current one". have a 2015 and 2005 vehicle for our household.

i'm lucky in that we are very low mileage (32k and 85k respectively) so they have plenty of life left.

Simon Michalke

@briankrebs

The Dacia Spring is very minimalistic in its features and has a Button to disable online services (at least inside Europe). However the "pre-facelift" version does not have this button.

That might have changed with the 2024 version though.

Ultimately it is probably impossible to get a car without any data connection, especially since features like E-Call are now required.