They only looked at the domains the car talks to over wifi, not to the content. For a Tesla Model 3 they also looked at the mobile traffic, because it was easy doable.
They played around with the infotainment of the car for 30 minutes, when it has for example a YouTube app, they opened it. When the car talked to YouTube over Wifi they counted it as one ATA (Advertising, Tracking, and Analytics).
When you have less apps in the car, or all data is tunneled trough the car manufacturer it results in less ATA and therefore a better score.
The paper says this:
> 2. Stationary Active: The vehicle was parked and powered on for 30 minutes while we interacted with as many sensors and features as possible. This included opening and closing doors and the trunk, pressing dashboard and seat controls, activating stalks (lights, wipers), and exploring all infotainment menus and apps.
<a href="https://automatictransmission.khoury.northeastern.edu/paper.pdf" rel="nofollow">https://automatictransmission.khoury.northeastern.edu/paper....
Their repository has the classification of vendors here:
<a href="https://github.com/nicolegerzon813/Automatic-Transmission-An-Empirical-Study-of-Data-Privacy-in-the-Connected-Vehicle-Ecosystem/blob/main/integrated_third_parties.txt" rel="nofollow">https://github.com/nicolegerzon813/Automatic-Transmission-An...
It would be nice to have know which domains were accessed by which car. Even better would be to know which action in the car correlated with which connection.
Yes, I read this report and came to the same conclusion. What did they expect when they opened Youtube for example? Also, there was no implication that the ATA transmitted was any different than what you'd see in a regular browser e.g. the automotive companies aren't sending additional data when you open Youtube in your car.
randomhacker123 · · focus · HN ↗
They played around with the infotainment of the car for 30 minutes, when it has for example a YouTube app, they opened it. When the car talked to YouTube over Wifi they counted it as one ATA (Advertising, Tracking, and Analytics).
When you have less apps in the car, or all data is tunneled trough the car manufacturer it results in less ATA and therefore a better score.
The paper says this:
> 2. Stationary Active: The vehicle was parked and powered on for 30 minutes while we interacted with as many sensors and features as possible. This included opening and closing doors and the trunk, pressing dashboard and seat controls, activating stalks (lights, wipers), and exploring all infotainment menus and apps. <a href="https://automatictransmission.khoury.northeastern.edu/paper.pdf" rel="nofollow">https://automatictransmission.khoury.northeastern.edu/paper....
Their repository has the classification of vendors here: <a href="https://github.com/nicolegerzon813/Automatic-Transmission-An-Empirical-Study-of-Data-Privacy-in-the-Connected-Vehicle-Ecosystem/blob/main/integrated_third_parties.txt" rel="nofollow">https://github.com/nicolegerzon813/Automatic-Transmission-An...
It would be nice to have know which domains were accessed by which car. Even better would be to know which action in the car correlated with which connection.
pnw · · focus · HN ↗