@ShutterbugDoug @dangillmor @mozilla I think you'd be better off looking for what isn't in the car. My cars don't have (builtin) Bluetooth, cell\onstar or WiFi, despite two of them being 2014 and 2017. They don't have any outside communications.
I'm very curious what electric (or even hybrid) cars 'lack' those amenities. It seems those cars have all leaned into connectivity.
The example of nissan is repugnant
https://foundation.mozilla.org/fr/privacynotincluded/nissan/
Wow, @derekreilly and @bobbyllew, this is an eye opener. It hadn't even occurred to me that these car companies are monetizing their owners. Makes perfect sense - of course they would do this; they're tech/auto businesses, many of whom have publicly dodgy pasts.
I think this needs to be highlighted. Surely each company must have PR-trained privacy officers who can be held accountable, who can try to justify this?
@dangillmor @[email protected] I run a pi-hole on my home network, Tesla is by far at the top of the blocked servers on the list. It’s basically nonstop communications. I didn’t even know about this but added new blocklists recently & it climbed up to the top fast. I own a Volvo, never seen anything but reading this I’ll have to do some research, see what IPs they might be using. But in the end they have LTE so it doesn’t matter
I now always have to make clear that I bought a Tesla before Mushk lunacy.

@goc @dangillmor @mozilla The article is mostly making fun of privacy agreements & policies and not very usable about practical questions like that. For example, while Teslas are more than capable of collecting all kinds of information on you, as a practical matter, unless they're just outright lying, which I suppose is possible, they don't send that data off the car in most cases.
I suspect the items about sexual activity are there just because any cameras on the car might pick that up, so they're enumerating it – it is something to keep in mind, I guess?
I suspect most data selling is the same sort of data selling every other merchant does.
To note, Tesla was the absolute worst on their list.
@jmcrookston @dangillmor Is it really the worst, though? They mostly don't send data off the car unless you opt-in or there's a crash/security event or something, and they let you delete everything associated with your account. They seem pretty upfront about what they do. (Unless they are outright lying about it, which I suppose is a possibility.) This article is mostly mocking the agreements, which I appreciate, but as far as what they actually do, it seems about what you'd expect? am I wrong?
I suspect most car makers are actually pretty good, as well. Same problems with any bush-league online merchant apply, of course – financial details stored using less-than-best-practice.
@jmcrookston @dangillmor although, the whole "safety-critical event" thing makes me wonder – suppose you're speeding in an accident; will that be subpoenaed?
But I guess they could probably even subpoena your cell records to get that, so I suppose that ship has sailed.
Well it's the last on the list, is all I was pointing out.
But to answer, the problem is who knows. Have to know what they do, and I think Mozilla's point writ large is who knows.
That's probably bad drafting for quite a bit of it. I remember more than one kerfuffle where a social media platform was called out for an irrevocable worldwide licence to reproduce your copyrighted works. Well, of course. Because they need to show your pictures.
But we never really know ...
If they are the worst on the list and don't send data off the car that strikes me as decent for privacy.
Save me looking, what does Mozilla say about that? Maybe I'll have to read the whole report.
I suspect the thrust of all of this is the privacy policies don't really say what is collected, and what it's used for. They tend to end up these boilerplate statements and once in a while one hits the news for wanting to own your first born.
@jmcrookston @dangillmor Well, they do send data off the car for "safety-critical events"
They say about Tesla:
* good that they don't sell data to 3rd parties (but you can opt-in, and maybe that is confusing)
* reminder of the scandal regarding employees sharing pictures from the cameras
* privacy policy is somewhat vague in some areas (sharing with law enforcement, and so on)
* if you opt-out of all data sharing, you don't get software updates/etc because they cut all connectivity, so that is stupid
I think those are the highlights.
my note: the picture sharing scandal implies super-poor internal processes for handling customer data, which is unfortunately far too common for low-end tech firms. (I've worked in several, and it is quite shocking.)
This is going to become an ever more challenging problem, especially for existing at-risk populaces. We're already seeing the need for safe, anonymous human medical transport across geographic boundaries as a direct result of certain recent political policy changes in the US over the past couple years
@dangillmor @[email protected] @siracusa
What is the metric for ‘sexual activity’? Parked with 2 people in car? Parked near the No-tell motel? Parked at a location not home, work, or public shop? Date night?
@dangillmor @[email protected] @siracusa
If the van is a rocking, don’t come a knocking; faraday cage is electrified.
Super creepy, but I just got an idea for #writing a celebrity stalker fic