Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Privacy Technology

OnStar Considered Harmful 480

Frisky070802 writes "A few weeks ago Slashdot ran an article on the privacy issues in EzPass. Some of the comments referred to other things Big Brother could do with GPS in cars, and now the New York Times has run a column on what else your car is saying about you (free registration req'd). From the article: 'Aviel D. Rubin, the technical director of the Information Security Institute at Johns Hopkins University, said that every new technology with the potential to invade privacy was introduced with pledges that it would be used responsibly. But over time, he said, the desire of law enforcement and business to use the data overtook the early promises. "The only way to get real privacy," he said, "is not to collect the information in the first place."'"
This discussion has been archived. No new comments can be posted.

OnStar Considered Harmful

Comments Filter:
  • "Real privacy"? (Score:4, Insightful)

    by ObviousGuy ( 578567 ) <ObviousGuy@hotmail.com> on Monday December 29, 2003 @08:52PM (#7831811) Homepage Journal
    It is impossible to be completely private. This is not a bad thing.
    • by Lemmy Caution ( 8378 ) on Monday December 29, 2003 @08:58PM (#7831842) Homepage
      Exactly. Homeowner: "My house is on fire!" 411 Dispatcher: "Where are you?" Homeowner: "Erm, I don't want to say..."
      • by Anonymous Coward on Monday December 29, 2003 @09:04PM (#7831877)
        If you call directory assistance (411) when your house is on fire, then you're probably going to die.

        Then again, they can tell you the number for 911 and connect you for just 75 cents more...
      • by Gordonjcp ( 186804 ) on Tuesday December 30, 2003 @10:04AM (#7834521) Homepage
        ... but I once had a customer on the phone ordering satellite TV. Having given me her name, date of birth, maiden name, and credit card details, I asked for her address.

        Her - "Oh, I never give my address out over the 'phone, you just don't know do you?"

        Me - "Erm, you do know that we need to send someone to your house to fit the dish?"

        Her - "Yes, but I won't give out my address on the phone"

        I hung up on her.
    • by Txiasaeia ( 581598 ) on Monday December 29, 2003 @08:59PM (#7831850)
      Speak for yourself. I'm "typing" this via semaphore (you'd be surprised how quick it is once you get used to it, although you need to browse in text-only) in my underground, off-grid palace in the Mojav... ah, dammit!
    • Re:"Real privacy"? (Score:5, Interesting)

      by NanoGator ( 522640 ) on Monday December 29, 2003 @09:00PM (#7831855) Homepage Journal
      "It is impossible to be completely private. This is not a bad thing."

      Eh I dunno. Personally, I'm kind of in the middle on the issue. On one hand, I don't really care if the gov't is aware of where I'm driving. (It's not like they don't have me by the balls without that information.) On the other, due process is VERY important to me. Worse, the data they could gather is very out of context. If I'm suspected of a crime, and they don't have a process to find information like this, they could find circumstantial evidence that I was guilty of the crime, as opposed to searching for stronger legitimate evidence that may point at somebody else.

      So yeah, I want to be found if my airbag goes off, but I don't want somebody correlating my trip to Lake Oswego with a murder I wasn't involved with. Get a search warrant before looking at my data.

      I think there's a middle ground here. Unfortunately, it'll require that the government be more disciplined, and the citizens will have to ditch the attitude that the gov't is out to get them.
      • Re:"Real privacy"? (Score:2, Insightful)

        by Anonymous Coward
        That's not the way shit flows.
        Given more power the gumnt will abuse their power more and citizens who have the attitude that the gumnt is out to catch them will be proven correct.

      • Re:"Real privacy"? (Score:5, Insightful)

        by cfuse ( 657523 ) on Monday December 29, 2003 @09:36PM (#7832023)
        Unfortunately, it'll require that the government be more disciplined, and the citizens will have to ditch the attitude that the gov't is out to get them.

        Two things that will happen shortly after hell freezes over.

        Seriously, I expect my elected officials to abuse any and all surveillance methods available to them. They do so already (ie echelon, et al.), why is this any different?

      • Re:"Real privacy"? (Score:2, Informative)

        by JPriest ( 547211 )
        I just don't want to get pulles over for an expired inspection or a busted tail light and have the cops pull up a GPS "how's my driving" record for the last few days. Or worse yet, have onstar send my ticket in the mail becasue they detected my speeding. So yeah, as long as the information is not used against me I really don't catre.
        • Re:"Real privacy"? (Score:3, Insightful)

          by NanoGator ( 522640 )
          " Or worse yet, have onstar send my ticket in the mail becasue they detected my speeding. So yeah, as long as the information is not used against me I really don't catre."

          Hmm mixed feelings on that one too. I *don't* want YOU speeding. I don't want to drive in fear that some maniac is going to come plowing around the corner. I want you to fear speeding, as opposed to fearing being caught by a random patrol.

          At the same time, GPS won't tell the cops the context. It won't tell them that a hostile man
          • Re:"Real privacy"? (Score:3, Interesting)

            by JPriest ( 547211 )
            That is because you have never seen it around here, plenty of wide open roads with hardly anybody on them. Pretty much everyone speeds or they are in the way. You also have to consider that you can be legally blind, mentally retarded, and have frequent seizures and still get a drivers license in this country as long as you have a doctor sign a slip. Roads like that in many other countries don't even have speed limits.
            • Re:"Real privacy"? (Score:5, Insightful)

              by YrWrstNtmr ( 564987 ) on Tuesday December 30, 2003 @03:33AM (#7833491)
              You also have to consider that you can be legally blind, mentally retarded, and have frequent seizures and still get a drivers license in this country as long as you have a doctor sign a slip.

              Roads like that in many other countries don't even have speed limits.


              Those two statements do not mesh well. The sometimes no-speedlimit Autobahn in Germany is possible because the standards to get a license are higher. Lower the limit on who can drive (and how they are trained) and you (we in the US) must accept lower limits on driving speeds.
          • Re:"Real privacy"? (Score:5, Insightful)

            by lone_marauder ( 642787 ) on Monday December 29, 2003 @11:32PM (#7832623)
            I think there's middle ground, especially when the cost of that freedom is the saving of human life.

            I don't know about you, but I am tired of being held hostage by the words "If it could save just one life, it would be worth it."

            Well, no, actually, it wouldn't. The idea of freedom, as it exists (however tenuously) in the United States, came about as a result of those willing to die for that freedom. I consider that principle one of the more noble and valuable in human history, and choose to reflect that in my own life, even if it affects my personal safety.
          • I don't know about you guys, but I generally find that my GPS is always off when it comes to my speed.

            Firstly, I've got a 2003 honda civic. In my area they've got boxes on the side of the road that tell you your speed. I've tested it and as far as I can tell my speedometer is spot on. The box says I'm going 40 and my speedometer is right on 40. However, my GPS (Garmin Legend) is always over by about 7mph. Also, I'm not sure how it calculates my max speed, but last time I checked it said something lik

      • Re:"Real privacy"? (Score:5, Insightful)

        by tx_kanuck ( 667833 ) on Monday December 29, 2003 @09:49PM (#7832100)
        and the citizens will have to ditch the attitude that the gov't is out to get them.

        On the contrary, this attitude should never get weaker, but stronger. Everyone knows the quote "Power corrupts, absolute power corrupts absolutly", and this is true with regards to the gov't as well. As citizens, we cannot afford to give the gov't any more power then they are required to have in order to do thei job we hired them to do. When they start taking power just to do a job they think they should do to be re-elected, then they have too much power.
    • by Glonoinha ( 587375 ) on Monday December 29, 2003 @11:42PM (#7832666) Journal
      Folks - this isn't about speeding. OnStar is everything : GPS, location tracking, speed, locking and unlocking your car doors, disabling the engine, knowing how many people are in the car (determined by how many seat belts are latched), and the real kicker : real time audio surveillance.

      You read that right - they can open the phone connection on your in-dash phone and listen to everything said and done in the vehicle. In theory they should announce themselves, but don't kid yourself.

      Think you are being entirely too cool taking your secretary out in your new Mercedes Benz for a ride in the country and a romp in the back seat? Not only do they know where you picked her up, where you went, where you stopped in the country to tap a little ass, they can listen in on the juicy parts.

      If you think they are not already doing it, think again. Watch the movie Enemy of the State and remember it is about 5 years old. That's about 28 in computer years.
      • Really?? (Score:3, Insightful)

        by iii_rjm ( 551978 )
        Your best evidence for this government intrusion into our lives is a 5 year old Will Smith movie? Are you planning on pointing to Independence Day next as evidence for how dangerous computer virus' are?
  • The usual. (Score:5, Insightful)

    by Renraku ( 518261 ) on Monday December 29, 2003 @08:54PM (#7831819) Homepage
    Most technology can be used to violate your privacy.

    OnStar is a good system, and can even save your life in the event of an accident.

    Or, the government can use it to track you down and assassinate you because of your contributions to .

    Which one of these two situations are you more likely to be in?
    • Re:The usual. (Score:3, Insightful)

      by Locky ( 608008 )
      Good one.
      Option A is very likely to happen to a great many people, I'd wager a deal of people posting here have been in some car accident or other.
      Option B is an extremist depiction of the government. A more realistic Option B would be 'To monitor whether you go to any Al Franken book signings'.
      To the current administration, any opposing political views are wrong and support the terrorists.
    • by brundlefly ( 189430 ) on Monday December 29, 2003 @09:04PM (#7831874)
      Or, the government can use it to track you down and assassinate you because of your contributions to .
      Oh Jesus, the black-helicopters censored the end of your sentence! Run! Run!
    • Re:The usual. (Score:5, Insightful)

      by Angus Prune ( 660032 ) <angusprune@@@gmail...com> on Monday December 29, 2003 @09:04PM (#7831879)
      I imagine your likely to be someone who wouldn't raise suspician. There are allot of people who could be seen as suspect. From anyone with a muslim sounding name to the guy who went on an anti-war march to some poor guy on holiday in africa who gets mistaken for a wanted fraudster. As soon as the data is collected we have no control over it. I get worried when I have no say in who knows more about myself than I do.
    • Re:The usual. (Score:5, Interesting)

      by DrDoombender ( 681389 ) on Monday December 29, 2003 @09:14PM (#7831918)
      You forgot the third option. Where onStar can lock you out of your car because your late on your payment. How about insurance companies viewing the information to see how you drive to determine whether they should jack up your insurance rates. In either case, I think the government in itself is the least of our worries in this case. For some reason, there are always people who believe that the government is out to get us. The problem is that while they are right, they don't realize that they already have us. I mean, we pay taxes. I'd say the government has us right where they want us.
      • Cool! (Score:5, Interesting)

        by Inoshiro ( 71693 ) on Monday December 29, 2003 @09:47PM (#7832086) Homepage
        "How about insurance companies viewing the information to see how you drive to determine whether they should jack up your insurance rates."

        I'm all for that, and so should you be. I drive obeying all posted signs and speed limits. Were it not for the fact that I live in a provice with socialized insurance on my car, I'd be paying about 3-4 grand per year to insure my car (worth about 1500$ CDN), rather than the 720$/year I pay now. Plus, since I have no accidents on record, I get a discount of 1% per each year of no accidents (6 years since I got my licence accident free).

        The thing is, I'm a male in my low 20s. Most insurance companies traditionally track what they'd charge based on the age and gender, which (thanks to other drivers my gender and age being retards) would put me in a very shitty spot. Anything that lets insurance companies rape bad drivers while leaving better drivers with lowered rates and protection in case of stupid drivers is fine by me!
        • I've been fiddling with some online insurance quotes just to see what happens when I change a few things (age, gender, single/married). I'm 22 and live in Ontario right now. When I give the proper information, I'm quoted at about $3300/year. It drops to $2800 when I hit 23. It drops to $1400 when I hit 25.

          If I say I'm female, 22, and single, it drops to $2200. Male, married, and 22, $2800. In Ontario, car insurance is done by private companies which are allowed to discriminate based on age and sex. Since t
        • Re:Cool! (Score:3, Insightful)

          Sorry but they do "rape" bad drives aka people with accidents on there record or even getting caught speeding. Be aware there is a difference between a bad driver and somebody that dries well but above the posted artificialy low limits. Funny that you thing the insurance would be so high without socialization I pay 1280 a year for car worth 12k in the US I'm also an unmarried male in my 20's.

          Besides all of this is there realy a good reason to require insurance to drive it's realy an artificial industry i
          • Re:Cool! (Score:5, Insightful)

            by Detritus ( 11846 ) on Tuesday December 30, 2003 @12:44AM (#7832896) Homepage
            Be aware there is a difference between a bad driver and somebody that dries well but above the posted artificialy low limits.

            The difference is rationalization.

            Most people believe that they are "better than average" drivers, even if they have no evidence to support that belief. That's just human nature.

            • Re:Cool! (Score:5, Funny)

              by penguin7of9 ( 697383 ) on Tuesday December 30, 2003 @07:23AM (#7833909)
              Be aware there is a difference between a bad driver and somebody that dries well but above the posted artificialy low limits.

              The difference is rationalization.


              No, the difference is obviously how wet they start out, whether they go through the spin cycle, and what temperature they dry at. If the drivers are soaking wet, you put them through the spin cycle, and you dry them at a high temperature, drivers get all bent out of shape and shrink.

              Your best bet with drivers, like with all sensitive items, is to drip-dry them.
          • Re:Cool! (Score:3, Insightful)

            by plover ( 150551 )
            They "rape" bad drivers?

            Setting aside your exceedingly poor taste in word choices, just what exactly do you think insurance is for? It's to pay for expenses associated with accidents.

            And how do they pay these expenses? With premiums from everyone. As insured people, we pool our money with the expectation that if we are involved in an accident the pool will cover our expenses. We expect that the persons managing this pool will take good care of it, and dole it out when necessary, and only when necess

          • by Inoshiro ( 71693 ) on Tuesday December 30, 2003 @03:13AM (#7833434) Homepage
            In my province, registering your car (= making legal to drive) is also insuring it. SGI is the one government body which does the car registration, auto insurance, and licencing for everything in the province.

            There's no way you can drive your car without insurance, as everyone has it. If you do decide to drive an unregistered car, it's immediate jail time. The insurance is no fault; if there's an accident, you pay your deductible, and they cut a cheque for the rest. This also makes for the interesting situation where it may be cheaper to swerve into a pedestrian that it would be to let yourself be hit by a car that's out of control, because the no-fault stuff covers any liability in that case.

            SGI's also pretty reasonable for an insurance company. I bike all summer, and some guy decided to open his door into me (despite my shouting and his looking back at me). I ended up being fine, but he managed to destroy everything in my pocket (GSM phone, Palm pilot, pen). I got a cheque for $400 after a week and 1 report to SGI.

            I like insurance on something like a car. Nowhere else do you typically involve yourself with devices that can easily cause so much personal or property damage. Insurance means you have a small, controlled expense in the event of an accident. That's really the goal of insurance -- everyone pays a small amount so that those who need it aren't fucked. If I hit a 70,000$ BMW, I pay my deductible and walk away fine mostly fine: I will pay more for registration and have points on my licence if I'm at fault, but I won't have to sell everything I own and declare bankruptcy!

            Yea, you can argue that you'd be better off sticking that money in a bank account and accumulating interest on it, but insurance is always there with no build up period, plus it requires no discipline on your part beside paying for it -- there's no temptation to run out and buy a new car or home theatre with the money. In that sense, insurance is already escrow.

            Saying that auto insurance is an artificial industry is like saying that medical insurance is an artificial industry. The only people who say that are those who haven't yet used it, or incredibly naive people. Everyone wins with these kinds of social agreements -- go take an economics course, and you'll understand why :)
      • Re:The usual. (Score:2, Insightful)

        by Anonymous Coward
        How about insurance companies viewing the information to see how you drive to determine whether they should jack up your insurance rates.

        Or, how about insurance companies looking at where you drive? You drive into the city? You may live in zipcode X, but your car spends most of the time in zipcode Y which is a higher crime area. Up goes your insurance.

      • Re:The usual. (Score:3, Insightful)

        "Where onStar can lock you out of your car because your late on your payment."

        While you are making payments, it's not really your car, and if you stop making payments, they *can* and *will* reposess it. They don't need OnStar to lock you out of your car - they will simply come for it and take it away.
    • Re:The usual. (Score:5, Interesting)

      by zurab ( 188064 ) on Monday December 29, 2003 @09:43PM (#7832066)
      OnStar is a good system, and can even save your life in the event of an accident.


      OnStar commercials remind me of the crime prevention system commercial in the Minority Report. The idea that FBI can tap in and listen to the conversation in your or any car without anybody realizing anything is idiotic.

      Now, from the article:

      A three-judge panel in San Francisco rejected the request, but not on privacy grounds; the panel said the wiretap would interfere with the operation of the safety services.

      Yes, this is true.

      OnStar has said that its equipment was not involved in that case.

      I don't think so. I got an impression that it was exactly OnStar technology that was involved in that case from this CNet article [com.com], saying the following:

      The court did not reveal which brand of remote-assistance product was being used but did say it involved "luxury cars" and, in a footnote, mentioned Cadillac, which sells General Motors' OnStar technology in all current models. After learning that the unnamed system could be remotely activated to eavesdrop on conversations after a car was reported stolen, the FBI realized it would be useful for "bugging" a vehicle, Judges Marsha Berzon and John Noonan said.

      When FBI agents remotely activated the system and were listening in, passengers in the vehicle could not tell that their conversations were being monitored.


      Now back to NYT article:

      As for law enforcement, the company said it released location data about customers only under a court order. "We have no choice but to be responsive to court orders," Ms. Lama said.

      Then do not track more information, and not for any longer than it is necessary for you to provide emergency and related services. Also, do not under any circumstances let FBI listen in to people's conversations in their cars via your remotely activated microphone. But that's probably not in your business plan, or PR statement.
      • I got an impression that it was exactly OnStar technology

        Minor quibble. Same technology, but not the same company. It was Tele Aid (from ATX, used by Mercedes Benz), not OnStar, that was involved in this case. This is covered by Kevin Poulsen in this SecurityFocus article [securityfocus.com].
    • Re:The usual. (Score:5, Insightful)

      by JaredOfEuropa ( 526365 ) on Monday December 29, 2003 @10:11PM (#7832226) Journal
      Holland has a law that states "any data about the customer that is gathered into a databank, shall not be re-sold or used for any purpose other than the one stated without the customer's consent". So if I sign up for OnStar, the data cannot be sold to insurance companies, unless the fine print in the contract allows the company (GM?) to do that. Not a bad law...

      Even so, I still don't trust this. Naturally, governmental organisations are more or less exempt from these rules, not so much by the letter of the law as in the way it is enforced. The law does not allow law enforcment to use the data without a search warrant... which means that they cannot use it to gather evidence that is admissible in court, for example to give me speeding tickets. But, it can still be used to gather interesting data. As another reader pointed out, the police might use OnStar records to check on every person in the vicinity when a homicide has taken place. Not admissible in court, but it may still expose you to some interest from the police, perhaps even arrest.

      Farfetched? Our country has seen many illegal phone taps and even searches of peoples' houses, not to gather evidence for a court case, but to gather clues in order to further certain crime investigations. Mind you, the people being investigated were suspect, but with such tenous ties to the case that no court would and has issued search warrants. It became quite the political scandal, but in our fine tradition of sweeping internal governmental affairs under the rug, nothing ever came of the inquiry.

      Yes, you would do well to mistrust your government.
    • This may be offtopic, but I'm interested to know.

      All new GM cars come with the OnStar service that aids in dialing 911 when the airbags are deployed. However, they act like the system is disabled after 6 months (or whatever the time period is) if you don't pay for an OnStar subscription.

      After this time period, do they really disable this feature? Do they also quit tracking you (e.g. the privacy issue)? Or are both of these issues up to the OnStar god to decide?
    • I don't think Occam's razor applies to a false dilemma. There are invasive and unreasonable things the government could do short of assassinating you using your Onstar system.
  • by Papa Legba ( 192550 ) on Monday December 29, 2003 @09:00PM (#7831852)
    Maybe if the Beagle 2 had onstar they would have an idea where it is now. privacy be damned.

    Onstar: "Onstar operator here. I see that your airbags have deployed do you need assitance?"

    Beagle 2: "Uh, no, everythings fine here."

    Onstar: " We are concerend that you have fallen in a crator, can you confirm?"

    Beagle 2 : " Look can I get some privacy here! I am in the crator taking a wicked piss. You would to if you had to travel that far without a potty break! I'll be in contact when I am done."

    See mystery solved and an example of when to much privacy causes confussion.

  • Google link (Score:4, Informative)

    by Via_Patrino ( 702161 ) on Monday December 29, 2003 @09:01PM (#7831860)
    Google link here [nytimes.com]
    • by Stigmata669 ( 517894 ) on Monday December 29, 2003 @09:16PM (#7831936)
      What is it with everyone and their phobia of registering for the nytimes? Use fake information, do it once, and save us all from your "requires sacrifice of first born" comments and useless google caches.

      It seems like it's relevant to ask in a privacy related thread, so please share with us all of you who don't register for the nytimes.com silliness, why do you avoid this formality? The cost seems very slight for some of the best journalism (IMHO), especially compared to salon.com which makes you watch click-through ads.

      This may sound like flamebait, but take a moment to think about the complaints about the registration vs. the information that the ny times provides, then if you still think i'm a jerk for asking, mod me down.

      • I'll bite (Score:5, Interesting)

        by freeweed ( 309734 ) on Monday December 29, 2003 @09:50PM (#7832108)
        As they say around here, RTFB (blurb):

        "The only way to get real privacy," he said, "is not to collect the information in the first place."'"

        That, my friend, is the bottom line of the article summary, and also the bottom line for many of us. Some fights are worth fighting for purely on their merits, and privacy is one of them. Pragmatism has nothing to do with it. I just enjoy my privacy, so do thousands of others here on Slashdot, and it's nice to remind everyone else of that.

        The more people sign up for the NYT online, the more acceptable it is for companies to do it. Thanks, but no thanks.
  • by User 956 ( 568564 ) on Monday December 29, 2003 @09:02PM (#7831863) Homepage
    every new technology with the potential to invade privacy was introduced with pledges that it would be used responsibly. But over time, he said, the desire of law enforcement and business to use the data overtook the early promises. "The only way to get real privacy," he said, "is not to collect the information in the first place."'"

    From the New York Times' mandatory registration page: "We'll keep your information private. The following fields are required. NYTimes.com respects your privacy, so we will never share any personal information without your consent."

    What's on the front page tomorrow, an in-depth report on the pot and the kettle?
  • by Rodrin ( 729362 ) <chris@[ ]gburn.us ['cog' in gap]> on Monday December 29, 2003 @09:03PM (#7831868) Homepage Journal
    You see this all more and more often, our privacy is pushed back to make room for more and more "helpful services." I wouldn't be surprised if OnStar would report you to the police if you just happened to go over the speed limit or some other activity. Pfft, for all we know we could have to submit to random memory scans in the future as a new wave of "drug tests" that can do much more. Where is our privacy now?
  • Mr car (Score:4, Funny)

    by KalvinB ( 205500 ) on Monday December 29, 2003 @09:04PM (#7831878) Homepage
    wears a tinfoil hat.

    Ben
  • Real Privacy (Score:2, Insightful)

    by Anonymous Coward
    The only way to get real privacy is not to give them the information in the first place.

  • by RealProgrammer ( 723725 ) on Monday December 29, 2003 @09:11PM (#7831912) Homepage Journal
    As with most things in life, this is an easy problem when approached from a cost/benefit viewpoint.

    In this case, we have:

    (risk of being spied OnStar)*(loss of privacy) +
    (risk of being stranded)*(result of being stranded) +
    (added price of OnStar and service)
    (<,=,>?)
    (risk of being spied on with a cell phone)*(loss of privacy) +
    (risk of being stranded w/ cell phone)*(result of being stranded) +
    (added price of cell phone and service)

    If you've already got a cell phone, and you always have it with you, that side of the question is pretty small.

    My little formula ignores the gee-whiz-me-too value of having a built-in car phone and other trivial factors.
    • That's a point, it mighty be as easy to crack the onstar as cracking a cellphone.

      Tracking you and recording phone conversations it's a problem in both.

      But you can't turn onstar off, and with it (or others) crackers may record everything you say on the car and you wouldn't even notice any noise/display/battery drops, and worse, some cracker can drive you outside the road and make it look as an accident.
  • by shrinkwrap ( 160744 ) on Monday December 29, 2003 @09:13PM (#7831917)
    ... can it also STOP your car and LOCK your doors?
    • by Anonymous Coward on Monday December 29, 2003 @09:21PM (#7831963)
      In 2002, Nebraska's largest bank robbery took place in Norfolk, Nebraska. 5 people were shot and killed, and the robbers stole a brand new Subaru. They got about 100 miles away and would probably have gotten away with it except that the OnStar system shut the car down and told the police the location of the car (it had been reported hijacked an hour or so earlier).

      I don't post this with the intention of saying how "great" OnStar is - infact I am wearing my tinfoil hat right now - but simply to illustrate what the system is capable of.
  • by the arbiter ( 696473 ) on Monday December 29, 2003 @09:14PM (#7831924)
    This Car Can Talk. What It Says May Cause Concern. By JOHN SCHWARTZ Published: December 29, 2003 Last year, Curt Dunnam bought a Chevrolet Blazer with one of the most popular new features in high-end cars: the OnStar personal security system. The heavily advertised communications and tracking feature is used nationwide by more than two million drivers, who simply push a button to connect, via a built-in cellphone, to a member of the OnStar staff. A Global Positioning System, or G.P.S., helps the employee give verbal directions to the driver or locate the car after an accident. The company can even send a signal to unlock car doors for locked-out owners, or blink the car's lights and honk the horn to help people find their cars in an endless plain of parking spaces. A big selling point for the system is its use in thwarting car thieves. Once an owner reports to the police that a car has been stolen, the company, which was started by General Motors, can track it to help intercept the thieves, a service it performs about 400 times each month. But for Mr. Dunnam, the more he learned about his car's security features, the less secure he felt. A research support specialist at Cornell University, he is concerned about privacy. He has enough technical knowledge to worry that someone else - say, law enforcement officers, or even hackers - could listen in on his phone calls, or gain control over his automotive systems without his knowledge or consent. Any gadget that can track a carjacker, he reasons, can just as readily be used to track him. "While I don't believe G.M. intentionally designed this system to facilitate Orwellian activities, they sure have made it easy," he said. OnStar is one of a growing number of automated eyes and ears that enhance driving safety and convenience but that also increase the potential for surveillance. Privacy advocates say that the rise of the automotive technologies, including electronic toll areas, location-tracking devices, "black box" data recorders like those found on airplanes and even tiny radio ID tags in tires, are changing the nature of Americans' relationship with their cars. Beth Givens, founder of the Privacy Rights Clearinghouse, said the car had long been a symbol of Kerouac-flavored freedom, and a haven. "You can talk to yourself in your car, you can scream at yourself in your car, you can go there to be alone, you can ponder the heavens, you can think deep thoughts all alone, you can sing," she said. With the growing number of monitoring systems, she said, "Now, the car is Big Brother." James E. Hall, a transportation lawyer and former chairman of the National Transportation Safety Board, said the monitoring systems presented a subtle blend of benefit and risk. "We are moving toward a kind of automobile that nobody's ever known," he said. "It's mostly good news, but there are negative things that we will have to work through." Mr. Dunnam said he had become even more concerned because of a federal appeals court case involving a criminal investigation in Nevada, in which federal authorities had demanded that a company attach a wiretap to tracking services like those installed in his car. The suit did not reveal which company was involved. A three-judge panel in San Francisco rejected the request, but not on privacy grounds; the panel said the wiretap would interfere with the operation of the safety services. OnStar has said that its equipment was not involved in that case. An OnStar spokeswoman, Geri Lama, suggested that Mr. Dunnam's worries were overblown. The signals that the company sends to unlock car doors or track location-based information can be triggered only with a secure exchange of specific identifying data, which ought to deter all but the most determined hackers, she said. As for law enforcement, the company said it released location data about customers only under a court order. "We have no choice but to be responsive to court orders," Ms. Lama said. Other information systems being added to cars can be used for tracking as well. Electronic toll systems ar
  • by eaglebtc ( 303754 ) * on Monday December 29, 2003 @09:15PM (#7831929)
    This company [networkcar.com] is promoting a 24/7 GPS service that enables you to track your vehicle and it will keep you informed if there is any maintenance needed.

    I've heard the commercials on the radio, and they spend about 20 seconds describing the technology, then the other 40 seconds are spent on a female voice reading what at first sound like legal disclaimers. But then she says something like "Network Car may not be used to track your husband, find out how lost he got on the way to the grocery store, and then call him to make fun of him." Pretty funny stuff, actually.
  • Duh... (Score:2, Redundant)

    by blankmange ( 571591 )
    Anything that can track when and where you are is subject to violation - either by the government or anyone else. Get used to it or abstain; take your pick.
  • I think slashdot hashing id so that we can't vote twice, yet nobody can look up our id/address as associated with an action (except by brute force). Wait, just had a thought. If my address is adam@somedomain.com and the law was interested in whether I said something, they could just subpeona your hashes and the key and see if mine was the right one. So, it's like a brute force with a very, very good guess. Hmmmm.
  • by jesterzog ( 189797 ) on Monday December 29, 2003 @09:27PM (#7831991) Journal

    I think that's a general rule with information that's often not taken very seriously.

    When I look at my (non-US) government and a large number (not all) of organisations that I give personal information to, I generally trust them. Within certain bounds, it's not very likely that most people will abuse the trust that you put in them. They ask for information because they think it might be useful for what they're doing for you, and that's initially its primary use. There are obviously some exceptions with marketing motivations -- I don't trust spammers with my email address and never gave them permission to use it. Partly that's where privacy policies and legislation should come in where possible.

    The problem, though, is that times change, organisations change, the people running them change, societial views change, and ethics change. Data that you've given to an organisation, on the other hand, doesn't change on its own. It stays right there to be interpreted and used in whichever ways the current powers see fit.

    Consider how many organisations and governments have changed over the last 50 years. Then consider that most of the information collected 50 years ago is probably still on record. Just because you trusted the people heading an organisation or a committee or a council or a government at a particular time does not mean that those people won't change later on.

    Information collected today will almost certainly be on record 50 years from now. In fact, it's likely that much more of it will remain on record than from the past 50 years until now, because digital information is so easy and cheap to manage and manipulate compared with paper.

    For the same reasons when I was a membership secretary for a small-medium organisation I felt an ethical obligation to destroy at least the digital membership records of former members a year after they left, unless there was a good reason to keep them. I wasn't going to do anything deceptive with them, but I couldn't guarantee who would be on the committee in five or ten years' time. This isn't the norm with most organisations, though.

    Realistically I do trust the majority of people and organisations when they tell me that they wouldn't abuse information that I give them. It means a lot more to me though if they'll commit to destroying it after they no longer need it.

    I don't know if this is a problem that can easily be fixed. Realistically information about people is what the world runs on -- it's a fuzzy boundary and matter of opinion that determines how much is too much or what constitutes misuse. If it suits you then you could get all paranoid and not give out any personal information to anyone, but that's not an option for most people and in some situations it's not legal for arguably reasonable reasons.

    • There is a way round this. In the UK the Data Protection Act (Here) [hmso.gov.uk] Specifies that data is kept no longer than required.
      I'm not sure how enforcable this is, but the legislation is there.
    • by HangingChad ( 677530 ) on Monday December 29, 2003 @10:43PM (#7832384) Homepage
      And every invasion of privacy is attached to a good cause. It saves lifes, it makes cars safer, parents know what their kids are doing, it helps 911 find you faster. At Kroger your little card gets you a discount, product activation helps prevent piracy and keeps the prices down for the honest users...although I haven't seen prices actually come down and don't shop at Kroger.

      I think everyone that collects information starts out with the best intentions. But, sooner or later, any information resource that can be abused will be. So the more persistent information becomes the greater the abuses that will occur. I think there has to be a reaction at some point. Can't help thinking people will wake up one day and it will hit them how invasive information gathering has become and push back. Then I go to some public place and look around and realize...these people are fucking idiots.

  • UMMM..... helllo!? (Score:2, Interesting)

    by AF726 ( 705828 )
    The Only connection from the world from a on* system is simply a watt analog cellular phone. Remember the Old MOTOROLA BAG PHONES.... same tranciever. So if peoiple are truely that paranoid, throw out your cell phones. because it's only when it dials out or in from a on* call centre is that GPS data being trancieved. So anyone trying to track has to get info from the on* people, not the vehicle. Maby from the MTSOs' of some areas if you know the ESN of the tranciever. To wich you can only tell wich towe
  • by crzfire ( 654340 ) on Monday December 29, 2003 @09:36PM (#7832024) Homepage
    My friend bought a brand new Mustang a few weeks ago. He comes into the living room yesterday and told me that his car tracks speeds, seatbelt information and even the way he drives. Also right after that it says that it can be downloaded by ford, the US government and that he can even request the information. I dont want a car that spies on me, thats just a bit much
    • Once a pending scheduled service comes due, our Mercedes will contact the local dealer and make a service appointment...all on it's own.

      Not that any of that type of servitude qualifies the gathering of historical data as relates to location, exceeding the speedlimit, etc. Just a matter of time before insurance companies misuse that info, just like they do when profiling/redlining.
  • by TyrranzzX ( 617713 ) on Monday December 29, 2003 @09:39PM (#7832042) Journal
    Get it straight, I could care less if a computer decided it wanted to catalouge and profile my life to help me out. Most people feel this way. I'd love to have a PDA that was intellegent enough to tell me what restuarants served food with my preferences (such as no msg, no feedlotted beef, no tap water, etc) or that'd give me directions in my car when I got lost, or could call up emergency services if I get stranded in the desert. But I have HUGE problems with the US goverment, companies and buisnesses, or even my neighbors having that information. The potential for abuse is to great for me to allow myself to be invaded like that.

    Why? Because the information people have about you is power they have over you, and I don't trust anyone accept family with that information. I DO NOT trust the US goverment as much as I trust my parents or siblings and that's how it's supposed to be. I DO NOT trust sony to know what my buying preferences or toxic waste distributors like coca cola to know I don't like drinking their toxic waste. Infact, the very fact that most of us are scared shitless at the US goverment or corperations or buisnesses prying is proof enough that something's wrong and something needs to be done before a real civil war takes place and people begin shooting and dieing and nuking.
  • by Anonymous Coward on Monday December 29, 2003 @10:31PM (#7832333)
    You know the old chestnut:
    "What'd you pull me over for, Officer"
    "Yer headlight's out"
    "Not its not"
    {smash, tinkle}
    "Yes it is"

    Here's the future of OnStar...

    "Sir? This is OnStar. Your car has reached a recommended service interval. Would you like to book an appointment now?"
    "No, thank you." ...
    "OnStar, how may I help you?"
    "My car will only do 5 miles an hour."
    "That's correct sir. As a courtesy to OnStar members, GM offers their GOFAST, GM Online Failure Avoidance Safety Tracking System free of charge. For your safety and convenience, your car will continue to operate at this safe speed until the safety systems have been verified by a GM-ceritified engineer." ...
    "I heard that, sir." ...
    "OnStar, how may I help you?"
    "The hood won't open"
    "The system indicates that you are not at an authorized GM service center." ...
    (somebody else can finish the story...)
  • by alecto ( 42429 ) on Monday December 29, 2003 @11:08PM (#7832497) Homepage
    OnStar isn't the only potential problem. Newer vehicles, GM in particular, carry fairly extensive data logging in the airbag unit (which, conveniently, altering or disabling is a violation of federal law).

    The only company that makes a device (the Vetronix CDR system) to extract the data from it charges thousands of dollars for it--there's a secretive Yahoo group of "accident reconstructionists" that make their living extracting data from these devices and testifying for those willing to pay expert witnesses (e.g. insurance companies).

    Those who don't value their privacy will say that people should be held accountable for their actions. Fair enough--but these data are open to interpretation, and only those with the cash will be able to pay one of these people to get the interpretation they want.

  • by Animats ( 122034 ) on Tuesday December 30, 2003 @03:20AM (#7833453) Homepage
    OnStar could be a great aid to terrorists. Plant bombs, and wait until the target drives by to detonate them. Load in a list of targets (politicians, cops, judges, journalists) and the next one to drive by gets it.
  • Paging Mr Irony... (Score:3, Insightful)

    by Channard ( 693317 ) on Tuesday December 30, 2003 @09:42AM (#7834363) Journal
    .. to a thread about the New York Times complaining about privacy when their site requires you to register and log in, thus tracking what you read.

The rule on staying alive as a program manager is to give 'em a number or give 'em a date, but never give 'em both at once.

Working...