Edit: Just asked because of curiosity. I’m not actually looking for such vehicles.

Edit 2: So for context, my parents new Toyota has this feature that allows the GPS location of the car to be sent to toyota, then you can see the location via an app on android/ios (it’s supposed to be an anti-theft feature). The data is sent via an antenna that connects to cell towers, which then connects to the internet, and to the toyota servers. “Diagnostic” and “maintenance” information is also sent via those same antennas.

The dealer said it could be turned off, but who knows if they are really off. There’s not a hard switch on the car.

    • Helix 🧬@feddit.de
      link
      fedilink
      arrow-up
      35
      arrow-down
      1
      ·
      1 year ago

      Hyundai’s privacy policy says, for example, that they can share data with law enforcement and governments based on “formal or informal” requests.

      Wow. Informal requests means that someone just has to pretend they’re a LEO and Hyundai might share the information.

    • sic_1@feddit.de
      link
      fedilink
      arrow-up
      16
      arrow-down
      2
      ·
      1 year ago

      Ouff.

      A few cars use Android Automotive OS. I wonder if it’s possible to run a privacy focused custom OS on them.

      • krnpnk@feddit.de
        link
        fedilink
        arrow-up
        11
        ·
        1 year ago

        Doubtful. Android automotive OS runs on a single ECU in the car while a lot more are in there running QNX, Linux or some embedded OSes (sometimes there are more than 100 such ECUs in the car). So there’s no guarantee that the “problematic” services are even running on this ECU (I bet it’s more distributed). Furthermore updating / changing the software of a single ECU is done using special hardware or through some kind of gateway ECU. They will perform validation on the to-be-flashed software to ensure it’s from the vendor itself.

        And even if you’d get it flashed I can guarantee you that nothing will work.

  • bzz@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    25
    ·
    edit-2
    1 year ago

    In most legacy manufacturers (e.g, not Tesla) vehicles you can disable/remove the communication module, which is a cell phone modem that interfaces with the car.

    For Toyota specifically this is called the DCM (data communication module). It’s a little black box. In Fords/Hondas it’s called a TCU (telematics control module).

    In some cases, you can just pull the fuse for the telematics box.

    In general, when you research whether you can physically remove this tracking stuff from modern cars, the key word is to use is “telematics”.

    I’m afraid it’s going to get much worse. Right now you can at least disable/take out the little box out of most cars without losing functionality for the most part. Soon it’ll be crippling to do so.

    • akwd169@lemmy.sdf.org
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      Yeah I can’t wait for the day that securing my privacy on my car cripples it to the same extent that disabling bloatware cripples my phones functionality (literally couldn’t send/recoeve calls or texts or use any browser)

      Doesn’t seem far off with that Mozilla study honestly

  • /home/pineapplelover@lemm.ee
    link
    fedilink
    arrow-up
    23
    ·
    1 year ago

    I read somewhere one time that you can ask the dealership to rip out the modem thing for you so there’s no internet. I wonder if there’s a guide or manual to do it ourselves though. I recall it’s towards the trunk area and sometimes near the top of the cabin.

    • Hubi@feddit.de
      link
      fedilink
      arrow-up
      27
      ·
      edit-2
      1 year ago

      The dealership won’t do it but most independent workshops probably will. You might get into trouble with your warranty though if there’s ever an electric issue, the disconnected unit will show up as a fault code during diagnostics.

        • bzz@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          5
          ·
          1 year ago

          What’s worse is that in the EU, the connectivity is mandated with eCall, which calls the police with your coordinates in the event of a crash.

          Though the EU has strong data privacy so at least you can be semi confident you can opt out and have your data forgotten from the manufacturer

    • Dr_Evil@sh.itjust.works
      link
      fedilink
      arrow-up
      6
      ·
      edit-2
      1 year ago

      While this is probably the only real solution for complete peace of mind, you may be able to find and disconnect the fuse to the telemetry system as an easier (and cheaper) fix - check out the fuse box diagram in your owner’s manual!

    • Siliconic
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      That’s what I was thinking. No need to worry about telemetry if your car’s got no network connection

  • viking@infosec.pub
    link
    fedilink
    arrow-up
    21
    ·
    1 year ago

    You can buy a 2023 Dacia Logan and it will still have none of the gizmos and knicknacks that track you and your behaviour.

    Whether you call that a “modern” car is another debate, but for sure it’s a recent one.

    • dakku@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 year ago

      The great part of Dacia is that you can probably buy any faulty part for a bag of peanuts and a pack of cigarettes and thieves won’t even bother you so no need for “anti-theft” feature

      • ExLisper@linux.community
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        The bad part of Dacia is that last time I checked they only offered diesel and LPG versions (for the model I was interested in).

  • mctoasterson@reddthat.com
    link
    fedilink
    arrow-up
    18
    arrow-down
    1
    ·
    1 year ago

    Your best bet for a “hardware switch” is reading the service manual to find which fuse controls the comms module, and pull it. Depending on the vehicle it may have other side effects.

    Maybe we will get to the point where people are selling modchips for cars, like the OG PlayStation.

  • Jordan Lund@lemmy.one
    link
    fedilink
    English
    arrow-up
    28
    arrow-down
    17
    ·
    1 year ago

    Define “privacy” and define “modern car”.

    In the end, it doesn’t matter what car you’re driving if you bring your Android/iPhone…

    • WtfEvenIsExistence@lemmy.caOP
      link
      fedilink
      English
      arrow-up
      38
      ·
      1 year ago

      There are “privacy oriented” smartphone replacements. You could flash graphene os to a Pixel.

      There is not really such thing for cars.

      • Jordan Lund@lemmy.one
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        48
        ·
        1 year ago

        And, again, what is your definition of “privacy” and what is your definition of “modern car”?

        • WtfEvenIsExistence@lemmy.caOP
          link
          fedilink
          English
          arrow-up
          29
          ·
          1 year ago

          Privacy as in either no telemetry being sent back to the dealer, or the option to turn it off (actually being turned off, not just being set to “off”) The digital aspects of privacy, not car window tint.

          Modern car as in a car that’s built within the last 5 years.

          Also, I’m not actually looking for a car, just curious.

          • schizoidman@lemmy.ml
            link
            fedilink
            English
            arrow-up
            6
            arrow-down
            4
            ·
            1 year ago

            Well the base model of the perodua axia sold in Malaysia probably fits your requirements as it does not come with central locking or even a radio.

          • Jordan Lund@lemmy.one
            link
            fedilink
            English
            arrow-up
            14
            arrow-down
            21
            ·
            1 year ago

            First, you need to differentiate between “dealer” and “manufacturer”, except in minority cases like Tesla, they are two separate entities.

            Dealers, as a rule, don’t have the capacity to accept telemetry data from vehicles. Source: I’m a former dealer sysadmin.

            What they can and do do, is download telemetry data stored onboard when you bring the vehicle in for service. This is done through the OBD-II port which has been in every car since 1996.

            https://www.makeuseof.com/tag/obd-ii-port-used/

            If you’re concerned (or curious) about what data is passed over OBD-II, you can buy your own scanner, $20 to $100 on Amazon depending on features.

            Now, MANUFACTURERS, that’s a different deal:

            https://www.chicagotribune.com/autos/sc-auto-tips-0102-driving-data-collection-20181225-story.html

            • FaulerFuffi@lemmy.ml
              link
              fedilink
              arrow-up
              26
              ·
              1 year ago

              For you asking OP twice to specify “privacy” and “modern” (which was very clear what they means, to me at least) your answer is somewhat disappointing now 😁

              • Ready! Player 31@lemmy.world
                link
                fedilink
                English
                arrow-up
                3
                ·
                1 year ago

                Huh it’s almost like he was using a socratic questioning method in bad faith to make himself look clever (which failed incidentally) rather than actually be part of a conversation or provide any information.

              • Jordan Lund@lemmy.one
                link
                fedilink
                English
                arrow-up
                1
                arrow-down
                2
                ·
                edit-2
                1 year ago

                Telling them that a) dealers don’t have access to telemetry data beyond what’s passed on the vehicle data port and b) providing a news article showing that 3/4 new cars communicate data back to the manufacturers unless you specifically opt out isn’t helpful?

                Guessing you didn’t actually read the article?

  • extant@lemmy.world
    link
    fedilink
    English
    arrow-up
    9
    ·
    1 year ago

    Some cars even have cameras inside them now to verify the driver, so consider that next time you have sexy time.

  • trippingonthewire@lemmy.ml
    link
    fedilink
    arrow-up
    8
    arrow-down
    1
    ·
    1 year ago

    Maybe have them pull out the router at the dealership. I think they have to listen to your request. They may argue with you about it and be like “yeah but you won’t have internet and all this cool stuff” but yeah whatever people have phones nowadays anyway.

    • WtfEvenIsExistence@lemmy.caOP
      link
      fedilink
      English
      arrow-up
      5
      ·
      1 year ago

      It has to connect to the internet somehow. Otherwise how could I see where the car is are using the Toyota app? I could see the tire pressure in each tire and the amount of fuel.

      There is also this button at the top (the ceiling?) of the car that basically acts like an emergency button. Pressing it connects your car to someone at toyota that calls for roadside assistance. But idk why then even have that since most people have phones anyways.

      • darcy@sh.itjust.works
        link
        fedilink
        arrow-up
        4
        ·
        1 year ago
        1. i would highly recommend never connecting it to internet. a small inconvinience for much better privacy. zero trust rule: only enable an abusable feature like internet on things which absolutely need it

        2. the emergency button probably connects to any cell tower, regardless of your provider (like a phone with no sim), or maybe even satellite? i highly doubt that toyota would use this for anything besides emergencies (although one can never be sure)

        3. some people still dont have phones, and that is not a bad thing.

        • WtfEvenIsExistence@lemmy.caOP
          link
          fedilink
          English
          arrow-up
          3
          ·
          1 year ago
          1. You don’t need touch anything in the car for it to connect to the internet. It’s a brand new car, and the car salesperson just put the VIN in the app and you can see the location of the car. Which means, it was already connected right out of the factory.