[1569] in Privacy_Forum
[ PRIVACY Forum ] Nissan Leaf reportedly leaks lotsa data (including
daemon@ATHENA.MIT.EDU (privacy@vortex.com)
Tue Jun 14 12:27:31 2011
Date: Tue, 14 Jun 2011 09:02:18 -0700
To: privacy-list@vortex.com
Message-ID: <20110614160218.GC11021@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: privacy@vortex.com
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Nissan Leaf reportedly leaks lotsa data (including location/speed) via RSS
http://j.mp/kB3GYB (This message on Google Buzz)
- - -
http://j.mp/kRtCEs (Casey Halverson)
"Looking at the GET string above, "lat" and "lon" variables contain the
current position of the vehicle, "speed" is the vehicle speed,
"car_dir" is the direction of the car, and "lat_dst" and "lon_dst" is
your destination configured in your navigation system ... All of these
lovely values are being provided to any third party RSS provider you
configure: CNN, Fox News, Weather Channel, it doesn't matter! While a
lot of these providers are probably not aware of these (rather
valuable) parameters the car passes, they probably sit in thousands of
HTTP logs already, waiting to be parsed out - or perhaps supported in
the future."
...
"Update June 13 3:23 PDT: While nobody bothered to inform the
customers, Nissan does document this functionality in this
obscure Japanese developer document:
http://lab.nissan-carwings.com/CWL/Spec.cgi [Google Translated]."
- - -
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- Global Coalition for Transparent Internet Performance: http://www.gctip.org
- PRIVACY Forum: http://www.vortex.com
Member: ACM Committee on Computers and Public Policy
Blog: http://lauren.vortex.com
Twitter: https://twitter.com/laurenweinstein
Google Buzz: http://j.mp/laurenbuzz
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
