Serious question: Is anyone making a list of where it may be possible to purchase a *new* car that isn't just spyware on wheels?

[briankrebs@infosec.exchange]

Heck we've had firewalls in cars since the early days of the automobile. Maybe it's time we added another <ducks>. I mean, your car is constantly receiving updates. Why should this machine be any different?

[cryptonerd@infosec.exchange]

@briankrebs You can always unplug/cut the cellular and wifi antennas. Since the metal body of the car inhibits radio signals, the antennas tend to be externally mounted and (relatively) easy to access.

[cr0w@infosec.exchange]

@briankrebs I know it's fairly specific, but as an example of a lesser degree of suckiness, the DCM in the Toyota Tacomas up to 2023 can be disabled by simply removing the fuse. The only negative impact I know of is the loss of the microphone for Bluetooth calls.

[dangoodin@infosec.exchange]

@briankrebs

Yeah, I plan to hold onto my 2015 Honda Fit for the indefinite future. I see replies in this thread suggesting we disable the modem. I'll bet money that doing so will void multiple warranties so ‍️

[everydaymoggie@sfba.social]

You could learn to ride a motorcycle? As far as I know, they haven't gone all in on collecting data yet.

Or maybe an ebike?

@briankrebs

[bob_zim@infosec.exchange]

@briankrebs Factory Five.

[bayoffires@infosec.exchange]

@briankrebs You could weld a giant faraday cage around it, like those Russian turtle tanks

[briankrebs@infosec.exchange]

@EverydayMoggie Motorcycles are more fun if you are surrounded by nice, smooth roads

[t2r@infosec.exchange]

@briankrebs I've been having this concern for a while as my car is 17yrs old and will need replacing soon and I don't have confidence in all the new cars' "security".

[paulehoffman@infosec.exchange]

@briankrebs The answers to this question would make a great article, albeit not typical for what you write.

[t2r@infosec.exchange]

@briankrebs A pair of wire nippers to cut the antenna.

[rootwyrm@weird.autos]

@briankrebs you literally cannot. (Hi. I'm actually an expert in these systems. I hate it.)
The only way to actually do it, is to physically remove a MINIMUM of 4 separate modules. These modules invariably function share (e.g. infotainment commonly shares with HVAC.) And even after you do that, what you get is a bunch of CANbus errors and a car that refuses to drive.

[tbortels@infosec.exchange]

@briankrebs

This is why my "new car" plan is an older VW bus and an EV conversion package.

If someone sells a non-connected "dumb car" - I might reconsider. There's certainly a market.

[saraislet@infosec.exchange]

@briankrebs *CEOs, the only truly protected class

[bradrubenstein@infosec.exchange]

This post is deleted!

[bradrubenstein@infosec.exchange]

For all the suggestions about disabling a new car's spyware access, would the resulting vehicle even be insurable?

I mean, of course you could buy insurance. But I wouldn't be surprised if there were a clause in the fine print that voided claims against a vehicle that had been hacked thusly.

@briankrebs

[noplasticshower@infosec.exchange]

@briankrebs and there's this https://youtu.be/_LXKZq0fYDw

[paul_ipv6@infosec.exchange]

@briankrebs

do publish what you find.

i went with "don't get rid of your current one". have a 2015 and 2005 vehicle for our household.

i'm lucky in that we are very low mileage (32k and 85k respectively) so they have plenty of life left.

[simon_m@infosec.exchange]

@briankrebs

The Dacia Spring is very minimalistic in its features and has a Button to disable online services (at least inside Europe). However the "pre-facelift" version does not have this button.

That might have changed with the 2024 version though.

Ultimately it is probably impossible to get a car without any data connection, especially since features like E-Call are now required.

[darkuncle@infosec.exchange]

@briankrebs pretty much have to get a dedicated sports car (Ariel Atom!), or do a build from something older (early Miata?).