this post was submitted on 12 Feb 2024
314 points (98.5% liked)
Technology
58754 readers
4743 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Not just phone numbers and email addresses, but a recent ruling by a federal judge allows them to record and collect text messages without worry:
https://www.theverge.com/2023/11/9/23953798/automakers-collect-record-text-messages-federal-judge-ruling
Wouldn't end-to-end encryption with, for instance, Signal sidestep some of this data collection? Specifically related to text, telephony, video conferencing? Could one use a masked email to put a layer between oneself and one's car/ car company?
I'm just 'brainstorming' as this is a big issue, and I"m sure there are folks that have done deeper study and thinking on these impacts on our privacy. What about using a VPN?
Government agencies have already been permitted to read notifications, so if it is readable and recordable by the car in any form, then you bet your ass law enforcement can obtain access to it.
Yeah E2EE doesn't really matter much if your notification service routes through Google or Apple. Which they pretty much all do if you have push notifications enabled.
E2EE does help. Notifications can include the content of the notification but they don't have to and it's generally recommended to send a notification telling the device to launch the app in the background to check the server for new content. The app will then decrypt the message and display a plain text notification that is not sent to any servers.
If you're worried about metadata leaks, you can delay delivery by a random time interval.