Serious question: Is anyone making a list of where it may be possible to purchase a *new* car that isn't just spyware on wheels?

[bayoffires@infosec.exchange]

@briankrebs You could weld a giant faraday cage around it, like those Russian turtle tanks

[briankrebs@infosec.exchange]

@EverydayMoggie Motorcycles are more fun if you are surrounded by nice, smooth roads

[t2r@infosec.exchange]

@briankrebs I've been having this concern for a while as my car is 17yrs old and will need replacing soon and I don't have confidence in all the new cars' "security".

[paulehoffman@infosec.exchange]

@briankrebs The answers to this question would make a great article, albeit not typical for what you write.

[t2r@infosec.exchange]

@briankrebs A pair of wire nippers to cut the antenna.

[rootwyrm@weird.autos]

@briankrebs you literally cannot. (Hi. I'm actually an expert in these systems. I hate it.)
The only way to actually do it, is to physically remove a MINIMUM of 4 separate modules. These modules invariably function share (e.g. infotainment commonly shares with HVAC.) And even after you do that, what you get is a bunch of CANbus errors and a car that refuses to drive.

[tbortels@infosec.exchange]

@briankrebs

This is why my "new car" plan is an older VW bus and an EV conversion package.

If someone sells a non-connected "dumb car" - I might reconsider. There's certainly a market.

[saraislet@infosec.exchange]

@briankrebs *CEOs, the only truly protected class

[bradrubenstein@infosec.exchange]

This post is deleted!

[bradrubenstein@infosec.exchange]

For all the suggestions about disabling a new car's spyware access, would the resulting vehicle even be insurable?

I mean, of course you could buy insurance. But I wouldn't be surprised if there were a clause in the fine print that voided claims against a vehicle that had been hacked thusly.

@briankrebs

[noplasticshower@infosec.exchange]

@briankrebs and there's this https://youtu.be/_LXKZq0fYDw

[paul_ipv6@infosec.exchange]

@briankrebs

do publish what you find.

i went with "don't get rid of your current one". have a 2015 and 2005 vehicle for our household.

i'm lucky in that we are very low mileage (32k and 85k respectively) so they have plenty of life left.

[simon_m@infosec.exchange]

@briankrebs

The Dacia Spring is very minimalistic in its features and has a Button to disable online services (at least inside Europe). However the "pre-facelift" version does not have this button.

That might have changed with the 2024 version though.

Ultimately it is probably impossible to get a car without any data connection, especially since features like E-Call are now required.

[darkuncle@infosec.exchange]

@briankrebs pretty much have to get a dedicated sports car (Ariel Atom!), or do a build from something older (early Miata?).

[krypt3ia@infosec.exchange]

This post is deleted!

[aakl@infosec.exchange]

This post is deleted!

[briankrebs@infosec.exchange]

So "no" seems to be the answer. Fuck it. Good excuse to get a fully restored Camaro from the 60s or 70s or something.

[drsbaitso@infosec.exchange]

@briankrebs Yea, I'm honestly thinking about picking up an early/mid-90s sedan for exactly that reason.

[stephentallentyre@infosec.exchange]

@briankrebs

If you're gonna go that far, which is awesome, you might as well get one from before noise/emissions regulations were a thing so that it's grandfathered. Look it up for yourself and don't take my word for it, but I wanna say it was 1972. Anyway, just get one that's at least that old, remove the muffler entirely, annoy people. Legally. That's what I'd do, anyway, lol.

[cullenwritestech@infosec.exchange]

@briankrebs this might be the only correct answer