Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
nerdculture.de is one of the many independent Mastodon servers you can use to participate in the fediverse.
Be excellent to each other, live humanism, no nazis, no hate speech. Not only for nerds, but the domain is somewhat cool. ;) No bots in general. Languages: DE, EN, FR, NL, ES, IT

Administered by:

Server stats:

1.2K
active users

nerdculture.de: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

Olly 👾

Customer Data from 800,000 Electric Cars and Owners exposed Online.

Terabytes of Volkswagen customer details in Amazon cloud storage remained unprotected for months, allowing anyone with little technical knowledge to track drivers movement or gather personal information.

ccc.de/de/updates/2024/wir-wis

Volkswagen’s automotive software company [Cariad], exposed data collected from around 800,000 electric cars. The info could be linked to drivers names and reveal precise vehicle locations [for some of them being as precise as a few centimeters]. The exposed databases include details for VW, Seat, Audi and Skoda vehicles. Cariad was informed on November 26 of the issue by the Chaos Computer Club (CCC), the largest organization of ethical hackers in Europe that for more than 30 years has promoted security, privacy, and free access to information. <https://www.ccc.de/en/> Access to the car data was possible due to Cariad’s incorrect configuration in two IT applications, a company representative said. The CCC hackers could access the data only after bypassing several security mechanisms that required significant time and technical expertise. Additionally, because individual vehicle data was pseudonymized for privacy purposes, the CCC hackers had to combine different data sets to associate the details with a particular user.
A Cariad representative said that the exposed data affected only vehicles connected to the internet and had been registered for online services. From the nearly 800,000 vehicles exposed, the researchers found geo-location data for 460,000 cars, for some of them with an accuracy of ten centimeters. <https://www.carscoops.com/2024/12/vw-group-data-breach-exposed-location-info-for-800000-evs/> Most of the affected vehicles, 300,000 of them, were in Germany but the researchers also found details about cars in Norway (80,000), Sweden (68,000), the United Kingdom (63,000), the Netherlands (61,000), France (53,000), Belgium (68,000) and Denmark (35,000). Cariad said that its security team reacted quickly to fix the problem and closed access the same day the CCC sent them the report. CCC representatives confirmed that Cariad’s “technical team responded quickly, thoroughly and responsibly” and that the company reacted within hours of receiving the technical details. Based on the results of its investigation, Cariad has no evidence suggesting that other parties, except the CCC hackers, had access to the exposed vehicle data or that the information had been misused by a third party.
#volkswagen#electric#car
Dec 30, 2024, 01:04 PM·Public·Metatext
6boosts·6favorites
Public
skome

@Olly42
Why do they have any data? If telemetry is somehow useful, why can't it be aggregated.

Just yank the fuse on the LTE modem in these cars.

ExploreLive feeds
About