Are Your Wheels Listening? The Alarming Reality of Privacy in Modern Vehicles

Have you ever considered the possibility that your car could be eavesdropping on you? Recording audio and video? Collecting data from your mobile phone? Tracking your trips and sending all this information to organizations that could potentially use it against you? Unfortunately, this is no longer the realm of conspiracy theories. A recent expose by Mozilla, the creators of the Firefox web browser, revealed that modern vehicles are the worst offenders when it comes to privacy. In their research, they concluded that “All 25 car brands we researched earned our *Privacy Not Included warning label — making cars the official worst category of products for privacy that we have ever reviewed.”

The Disturbing Trend of Data Collection

The implications of this finding are staggering. It’s one thing for a company like Ford to patent a system designed to eavesdrop on conversations in your car to sell you targeted ads. It’s another to learn that General Motors is selling your driving data to insurance companies, which can then increase your rates or even drop your coverage based on your driving habits. This kind of data exploitation raises serious ethical questions about consumer privacy and the extent to which companies are willing to go to monetize personal information.

But the situation becomes even more concerning when we consider the involvement of foreign entities, particularly the People’s Republic of China (PRC). With the rise of Chinese electric vehicles (CEVs), there is a growing fear that these cars could be used as tools for surveillance and data collection, posing a significant threat to both individual privacy and national security.

The Threat of Chinese Electric Vehicles

Chinese vehicles, especially new electric models, are increasingly viewed as a serious threat. The notion that these vehicles could be susceptible to foreign interference is not merely speculative; it’s a legitimate concern. Chinese companies are legally obligated to provide the PRC with access to any data they request. This means that any data collected by a Chinese-made vehicle could potentially be accessed by the Chinese government, raising alarms about privacy violations and national security risks.

The Biden Administration has finally begun to recognize these threats. In February 2024, President Biden took steps to block internet-connected Chinese cars and trucks from entering the American market. While this action is a step in the right direction, many argue that it is long overdue.

The Risks of Connected Vehicles

CEVs are not just vehicles; they are rolling surveillance devices that can be weaponized. Imagine a scenario where the PRC decides to create chaos in the U.S. by remotely controlling these vehicles to accelerate uncontrollably during rush hour. The potential for such catastrophic events is alarming. Furthermore, CEVs could be turned into road-based missiles targeting critical infrastructure like chemical plants, water treatment facilities, or power grids, endangering countless lives.

In light of these risks, the Department of Commerce has issued a notice of proposed rulemaking (NPRM) aimed at prohibiting the sale or import of connected vehicles that incorporate certain technologies from countries deemed a concern. This commonsense measure is crucial for protecting American consumers and national security.

The Broader Implications of Cybersecurity

China is America’s greatest geopolitical adversary, and the FBI has warned that they are actively weaponizing technology to undermine U.S. global leadership and national security. The recent “hacking typhoon” launched by Beijing targets critical infrastructure, aiming to infiltrate and cripple essential services that Americans rely on daily.

As our society becomes increasingly dependent on interconnected digital technology, the risks associated with cybersecurity grow exponentially. Protecting our data and privacy is no longer just an individual concern; it is a societal imperative. Each of us must take proactive steps to safeguard our information, particularly when it comes to “smart” Internet of Things (IoT) devices, including our vehicles.

Making Informed Choices

In a time of rising inflation and skyrocketing living costs, the allure of cheap CEVs may be tempting. However, the risks associated with these vehicles far outweigh any potential savings. Before purchasing a new vehicle, it is essential to conduct thorough research. Understand where the vehicle is manufactured and consider the implications of buying a car from a country that poses a potential threat to your privacy and security.

As we observe Cybersecurity Month 2024, it is crucial to educate ourselves and those around us about the risks associated with connected vehicles. By sharing knowledge and best practices, we can better protect ourselves and our families from the potential dangers lurking in our increasingly digital world.

Conclusion

The reality is that our vehicles are becoming more than just modes of transportation; they are becoming sophisticated data collection devices. As consumers, we must remain vigilant and informed about the technologies we use daily. The stakes are high, and the time to act is now. By understanding the risks associated with modern vehicles and making informed choices, we can take control of our privacy and security in an increasingly connected world.

About the Author
Dave Hatter is an award-winning technology leader with over 30 years of software engineering and cybersecurity experience. He currently works as a Cybersecurity Consultant at Intrust IT and has served as the Mayor of Fort Wright, Kentucky, since 2015.