Comment Encryption (Score 4, Interesting) 20
I hate how it is always presented like lack of encryption is a bad thing. In many cases it is not. Someone has to have physical control to get to that data. Physical control is the first piece of security. Encryption in many cases after that protects NOTHING from the owners perspective. Encryption after that fact, other than the end to end communications are almost always used AGAINST the owner. Metrics and information that the owner never gets a chance to explicitly deny. I agree with encrypted communications and even encryption at rest, but things like pinned certificates and other aspects of encryption do absolutely nothing but allow manufacturers to weaponize things against the owner. Being blocked out is the first step, but after that comes data mining. Then after that comes artificially crippled features so those features can be sold back to you piecemill. Fuck that and them. Every connected thing should be forced by the government to have features at the bare minimum that allow the owner to see data streams and control what goes where. Zero trust is the gold standard in security and the fact that owners are not allowed to lock out the manufacturer from EV's and other cars is patently ridiculous. These things are connected to the grid a large portion of the time for God's sake. Government needs to step in and enforce that all connected things have a root level firewall that allows the OWNER to control the security and where the data goes and the ability to inspect encrypted traffic to see if they approve of it leaving the vehicle or the connected thing.